• Platform - Security Software Engineer

    Location(s) UK-London
    Job ID
    2018-44024
    Schedule Type
    Full Time
    Level
    Associate
    Function(s)
    Engineering
    Region
    EMEA
    Division
    Engineering
    Business Unit
    Platform
    Employment Type
    Employee
  • MORE ABOUT THIS JOB

    WHAT WE DO


    At Goldman Sachs, our Engineers don’t just make things – we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. Create new businesses, transform finance, and explore a world of opportunity at the speed of markets.

    Engineering, which is comprised of our Technology Division and global strategists groups, is at the critical center of our business, and our dynamic environment requires innovative strategic thinking and immediate, real solutions. Want to push the limit of digital possibilities? Start here.

    WHO WE LOOK FOR
    Goldman Sachs Engineers are innovators and problem-solvers, building solutions in risk management, big data, mobile and more. We look for creative collaborators who evolve, adapt to change and thrive in a fast-paced global environment.

     

    YOUR IMPACT

     

    The Secret Management team within Cryptography Services helps secure the firm’s systems and software by providing solutions that allow our software engineering teams to easily and reliably safeguard their secrets - e.g. tokens, passwords, API keys, TLS certificates. We ensure secrets are stored securely, encrypted at rest and in transit and accessed only by authorized entities. Our team forms part of the firm’s Security Platform Engineering group, which is broadly responsible for designing and implementing core authentication, authorization and encryption support for the firm’s internal and public cloud technology. Are you are enthusiastic about security and cryptography, with an interest in new technologies and a minimum of 5 years’ engineering experience, looking for a role where you can have a broad-reaching positive impact?

    RESPONSIBILITIES AND QUALIFICATIONS

    HOW YOU WILL FULFILL YOUR POTENTIAL

    • Build software libraries to integrate with existing systems, provide secure defaults, along with tools to allow teams to manage secrets both during development and in production
    • Collaborate on feature design and problem solving
    • Partner with colleagues from across technology and risk to ensure an outstanding, useable and unobtrusive experience for owners and users of secrets
    • Help to provide frictionless integration with the firm’s runtime, deployment and SDLC technologies
    • Manage the full lifecycle of software components, from requirements through design, testing, development, release and demise
    • Help to communicate and promote best practices for secret management across the firm
    • Engage in production troubleshooting


    SKILLS AND EXPERIENCE WE ARE LOOKING FOR

     

    BASIC QUALIFICATIONS

    • A strong grounding in security concepts, including core cryptography, secure coding practices and principles of secret management
    • A good understanding of PKI, X.509, key exchange protocols, and authentication protocols, including token-based authentication
    • The ability to reason about performance, security, and process interactions in complex distributed systems
    • Proficiency in designing, developing and testing cross-platform software in one or more of Java, C++, C# or golang; open to using multiple languages
    • Experience developing, deploying and supporting software across the full Continuous Delivery life-cycle
    • Solid experience of version control, continuous integration, deployment and configuration management tools
    • The ability to understand and effectively debug both new and existing software
    • Experience meeting demands for high availability, low latency and scale
    • The ability to communicate technical concepts effectively, both written and orally, as well as the interpersonal skills required to collaborate effectively with colleagues across diverse technology teams

    PREFERRED QUALIFICATIONS

    • Experience using and/or supporting Hashicorp Vault and/or Consul in production
    • Experience with attribute-based access controls
    • perience with containerisation - Kubernetes/Docker
    • Experience monitoring, measuring, auditing and supporting software
    • Scripting skills using Python, PowerShell or Bash

    ABOUT GOLDMAN SACHS

    The Goldman Sachs Group, Inc. is a leading global investment banking, securities and investment management firm that provides a wide range of financial services to a substantial and diversified client base that includes corporations, financial institutions, governments and individuals. Founded in 1869, the firm is headquartered in New York and maintains offices in all major financial centers around the world.

    © The Goldman Sachs Group, Inc., 2018. All rights reserved Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Vet.