HSBC Group

Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Consultant Specialist.

Business: Enterprise Technology L3

The Compliance Global Function within HSBC is responsible for implementing effective global standards to combat financial crime, including: Anti-Money Laundering (AML), Sanctions and Anti-Bribery & Corruption (AB&C) compliance. The Financial Crime Threat Mitigation (FCTM) department within Compliance includes investigators, intelligence analysts, data scientists, subject matter experts, liaison specialists and innovation specialists. FCTM is responsible for identifying, analyzing & investigating financial crime risk, and ensuring that these risks are properly mitigated within HSBC. The current FCTM systems architecture is based on multiple platform (on-perm & Cloud). These multi-platform systems support daily financial crime detection and investigation activities across entire HSBC. 

HSBC IT has an ambitious strategy to move majority of on-premise analytics workloads onto Google Cloud (GCP) and other Cloud services to fulfill global and regional regulatory requirements. At the same time, Risk and Compliance has started multiple programs across Financial Crime Investigation and Detection areas to radically improve HSBC's financial crime risk systems & processes. Some core applications that Risk and Compliance – Financial Crime IT owns are (a) data scientists a secure environment for developing & training new ML models, and (b) an execution environment for running approved ML models in a controlled operational environment, (c) multiple web based applications serving customer data, transaction data, and analytics/ML model outputs to HSBC Global Investigator team to proceed fraud case investigations with proper management flows. All applications under Risk and Compliance – Financial Crime IT are global faced hence the flexibility and compatibility are part of key requirements.  

Principal responsibilities: 

• Part of a small team of Engineers that supports multiple projects across multiple cloud environment such as GCP and Ali Cloud. 
• Collaborate with HSBC Cloud management teams to challenge and refine solution designs. Ensuring at all times that DevOps best practice is followed.
• Collaborate with people from multiple areas (architecture, security, engineering, networks) to design new implementation patterns and to apply them across the various cloud based projects.
• Design and develop solutions to manage the life cycle of different kinds of applications such as web applications, REST APIs, data batches, etc.
• Design and develop solutions to manage cloud and on-perm based services such as FQDN, LDAP, Database, Load Balancer, Kubernetes, logging & monitoring, etc. 
• Design and implement CICD pipelines for resources to be deployed to Cloud platforms.    

• 7+ years of working experience in DevOps
• Automation toolset (Terraform, Ansible, Ansible Tower)
• CI/CD Engines - Bamboo/Jenkins 2 (Pipeline as Code)
• DevOps principles (CI/CD, designing & implementing infrastructure/configuration-as-code, application lifecycle management, risk mitigation management)
• Designing & writing robust automated tests related frontend, backend, and infrastructure such as Jest, Junit, Cucumber, Rest-assured, Selenium, Terratest, etc.
• Knowledge of cloud architecture & services (preferably GCP or Ali Cloud) 
• Security (IAM, roles, service accounts, entitlements)
• Bash/shell scripting and Python development
• Development tools and IDEs such as Git, VS code, Intellij, Postman, etc.
• Artifact repositories such as NPM, PyPI, Nexus, etc.
• Knowledge of Docker for containerization and encapsulation.
• Atlassian toolset (Bamboo, Bitbucket, JIRA, Confluence).
• Network configuration, VPC, VPN, GCP Interconnect.
• Familiar with Java, Spring Boot, Maven for API development is a plus. 
• Familiar with ReactJS, JavaScript, TypeScript, Webpack, Babel, and other tools related to user interface application development is a plus.
• Key or pivotal role in delivery of a large-scale IT project (requirements, design, development, testing, data, infrastructure), preferably delivered following an Agile approach.
• Demonstrable experience in understanding business requirements and translating these requirements into a solid, robust technical design that can withstand scrutiny by various teams involved in governance processes around live deployments (IT Security, Cyber Security etc.)  
• Demonstrated an ability to see beyond the defined business requirements and designing solutions that are readily maintainable, easy to extend and that allow for future requirements to be easily implemented minimizing technical debt where possible  
• A large cloud implementation/migration project (preferably GCP or Ali Cloud), all the way through to go-live.
• Strong working knowledge of cloud architecture solutions that maximize the use of PaaS offerings.
• Understand the concept of immutable infrastructure (what it means, what design considerations are key & why it is important), and ideally some experience on at least one project.
• Understand infrastructure-as-code and configuration-as-code, and ability to differentiate toolsets/platforms used to implement each one.
• Experience of using modern frontend development languages, frameworks, and libraries to build user faced applications.
• Experience in data security and work closely with data security measures and protocols, such as user access control and token management, to protect both the organization from threats and exploits.
• Experience managing cloud infrastructure environments (admin, users, IAM & service accounts).
• Experience using Terraform (designing re-usable code & writing custom Terraform modules).
• Experience writing Ansible playbooks, developing custom Ansible roles.
• Experience of designing and implement CI/CD pipeline.
• Experience of working in a test-driven development (TDD) approach.
• Have knowledge of modern web application authentication and authorization approaches including JWT, OAuth, and OpenID Connect.
• Experience of using programming languages and frameworks to build REST APIs and Streaming APIs.
• Knowledge of tracking record of delivery.
• Basic knowledge or familiar with Banking and/or Financial Crime Risk experience.                                                                                                                                                                                      

What additional skills will be good to have? (List out good to have skills and certifications)

• Good communication skills (verbal, written).
• Ability to explain complex ideas.
• Ability to work as part of a team (familiarity with agile methodology).
• Ability to work in a team that is located across multiple countries and regions.
• Willingness to adapt and learn new things.
• Takes ownership of tasks. 

Link to Candidate User Guide: 

https://hsbchrdirect.service-now.com/hrsp?id=kb_article&sys_id=60ce20691ba69010280dc9df1d4bcb56 

You’ll achieve more at HSBC 

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.” 

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. 

***Issued By HSBC Software Development (GuangDong) Limited***