HSBC Group

Business: Enterprise Technology L3

Open Positions: 1

Recruiter Name: Judy M J LIN

Location: GZ

Why join us?

The Compliance Global Function within HSBC is responsible for implementing effective global standards to combat financial crime, including: Anti-Money Laundering (AML), Sanctions and Anti-Bribery & Corruption (AB&C) compliance. The Financial Crime Threat Mitigation (FCTM) department within Compliance includes investigators, intelligence analysts, data scientists, subject matter experts, liaison specialists and innovation specialists. FCTM is responsible for identifying, analysing & investigating financial crime risk, and ensuring that these risks are properly mitigated within HSBC. The current FCTM systems architecture is based on a large on-premise Hadoop platform (aka Compliance Data Lake), which supports a large number of data processing and analytics workloads.

HSBC IT has an ambitious strategy to move all on-premise analytics workloads onto Google Cloud (GCP). At the same time, Compliance has started a large business programme (ILFCRM or Intelligence Lead Financial Crime Risk Management) to radically improve HSBC's financial crime risk systems & processes. One of the objectives of ILFCRM is to build a new GCP application (called DRA or Dynamic Risk Assessment) that uses advanced machine learning techniques. DRA will provide (a) data scientists a secure environment for developing & training new ML models, and (b) an execution environment for running approved ML models in a controlled operational environment, and (c) a web based application serving analytics/ML model outputs to HSBC Global Investigator team to proceed fraud case investigations. DRA currently runs a batch-based process, but in the longer term DRA will shift to a more flexible event-driven architecture (data streaming, etc.). At the meantime, since DRA is global faced, the web application the team builds there need to serve data of multiple markets to investigators at multiple regions.

The Opportunity:

This role is for a Frontend Development Engineer to help us design, develop, build, and deploy web based applications in Cloud and achieve integrations with REST/Stream API services.

What you’ll do:

• Part of a small team of Engineers that supports multiple GCP development projects.
• Collaborate with GCP delivery teams, to challenge and refine solution designs, ensuring at all times that DevOps best practice is followed.
• Collaborate with central GCP teams (architecture, security, engineering, networks) to design new implementation patterns and to apply them across the various GCP projects.
• Design, develop, and implement web based applications.
• Design and develop the integration between web applications and REST API services in multiple cloud projects.
• Ensure applications follows global and HSBC security requirements.
• Ensure packages and security related configurations are up-to-date.

• Design and implement CICD pipelines for web application related resources to be deployed to Cloud platforms.

• Automation toolset (Terraform).
• Continuous Integration/delivery servers - Jenkins (Pipeline as Code).
• DevOps principles (CICD, designing & implementing infrastructure/configuration-as-code).
• Knowledge of cloud architecture & services (preferably GCP).
• Security (IAM, roles, service accounts, entitlements)
• SQL experience (SQL/NoSQL scripting, ETL)
• Big Data (Hadoop)
• Atlassian toolset (Bamboo, Bitbucket, JIRA, Confluence).
• GitHub.
• Data (databases, management, transformation, metadata).

• Bash/shell scripting and Python development

What additional skills will be good to have?

• Key or pivotal role in delivery of a large-scale IT project (requirements, design, development, testing, data, infrastructure), preferably delivered following an Agile approach.
• Demonstrable experience in understanding business requirements and translating these requirements into a solid, robust technical design that can withstand scrutiny by various teams involved in governance processes around live deployments (IT Security, Cyber Security etc.)
• A large cloud implementation/migration project (preferably GCP), all the way through to go-live.
• Strong working knowledge of cloud architecture solutions that maximise the use of PaaS offerings.
• Understand the concept of immutable infrastructure (what it means, what design considerations are key & why it is important), and ideally some experience on at least one project.
• Understand infrastructure-as-code and configuration-as-code, and ability to differentiate toolsets/platforms used to implement each one.
• Experience of User Interfaces designs.
• Experience of using modern frontend development languages, frameworks, and libraries for developments of Web Based applications.
• Experience of the web application related authentication and authorisation approaches including JWT, OAuth, and OpenID Connect.
• Experience of working in Test Driven Design (TDD) or Behavior Driven Design (BDD) approaches.
• Experience of working on automated testing frameworks for web based applications.
• Experience of REST APIs and Streaming APIs integration with frontend applications.
• Experience in data security and work closely with data security measures and protocols, such as user access control and token management, to protect both the organization from threats and exploits.
• Experience in security configurations for web based applications to ensure the security of the application.
• Experience of designing and implement CI/CD pipeline for web based applications.

TECHNICAL SKILLS

• ReactJS, JavaScript, TypeScript, and other frameworks realted to User Interface Application development.
• Webpack, Babel, Redux, Thunk, and other tools related to compilation and encapsulation of user interface applications.
• LESS, SASS, CSS, and other styling frameworks to achieve the customisation and individualisation of web applications.
• Designing & writing robust automated tests related frontend such as Jest, Cucumber, Selenium, Cypress, etc.
• REST API and Stream API principles (integration, authentication, authorization, CORS, CSP header, etc)
• Artifact repositories such as NPM, Nexus, Docker registry, etc.
• Knowledge on usage of Docker for containerisation and encapsulation.
• CI/CD Engines - Bamboo/Jenkins 2 (Pipeline as Code)
• DevOps principles (CI/CD, designing & implementing infrastructure/configuration-as-code, application lifecycle management, risk mitigation management)
• Bash/shell scripting and Python development
• Development tools and IDEs such as Git, VS code, Intellij, Postman, etc.
• Atlassian toolset (Bamboo, Bitbucket, JIRA, Confluence).
• Knowledge of cloud architecture & services (preferably GCP)
• Cloud Security (IAM, roles, service accounts, entitlements, firewall, etc)
• Good communication skills (verbal, written).
• Ability to explain complex ideas.
• Ability to work as part of a team (familiarity with agile methodology).
• Ability to work in a team that is located across multiple countries and regions.
• Willingness to adapt and learn new things.
• Takes ownership of tasks.

• Good sense of humour.

Link to Candidate User Guide:

https://hsbchrdirect.service-now.com/esc?id=kb_article&table=kb_knowledge&sysparm_article=KB0184596&sys_kb_id=712b5f041b1f82908d3a0fe7ec4bcbd6&searchTerm=IJP

You’ll achieve more at HSBC

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued By HSBC Software Development (GuangDong) Limited***