System Engineer , Document Upload Zone
UBS
- Manno, Tessin Zurich
- CDI
- Temps-partiel
- perform installation on test environments and manage installation orders to production
- improve and maintain our CI procedure and automate pipelines
- support our Software engineers when they are building their delivery pipeline and Integrate 3rd party software into the UBS environment
- analyze areas of improvement, initiate, and monitor measures to remedy them (3rd level support)
- cooperate closely with Product Owners, Software Engineers, and 2nd Level Support
- rethink and innovate the delivery of the app from code to production
- support project team in regards to technical questions
- maintain documentation relevant to operations (operation manual, installation guide, etc.) and share your knowledge among the team
UBS RecruitingYour teamThe Document Upload Zone POD is enabling a client to upload certain documents to the Client Advisors in a secure and standardized way. You'll be part of the Agile Delivery Organization in Zurich but working closely together with the main Team in India, serving as the Switzerland based System Engineer and Troubleshooter for the team. We plan and lead IT projects by having chosen an agile mode of working with a mindset around time-boxed delivery of solutions, empowerment of interdisciplinary teams and close collaboration throughout the whole software development process. It is the location for co-located software development. It's a very demanding, fast paced and exciting environment.Your expertise
- high skills in Ansible (inventory, playbooks, roles, modules, variables), YAML syntax, creating and managing GitLab Runners, and integration of Ansible and GitLab
- expertise in Azure cloud concepts, including security and networking (VNet, subNet, NSG, load balancer, traffic manager, firewall), Azure CLI, Terraform (with remote state management), and ARM templates
- possess the skills to create application packages that integrate with Azure services and resources, such as virtual machines, key vault, storage accounts, monitoring, logging, and databases
- a solid understanding of Kubernetes architecture (nodes, pods, services, control plane), cluster management, workload types (Deployment, StatefulSets, DaemonSets, and Jobs), networking, persistent storage, configuration (ConfigMaps, secrets), security (RBAC, policies), and monitoring/logging
- the knowledge to configure Ingress Controllers with a focus on security measures
- a solid understanding of general security concepts, especially in relation to encryption practices and the ability to identify situations that requires encryption (with guidance, somewhat of a soft skill). You possess familiarity with authentication and authorization concepts, including Mutual TLS, OAuth 2.0, and OIDC
- a strong foundation in RedHat Linux and Windows and ability to troubleshoot and resolve issues in these environments. The knowledge includes package management, file systems, Active Directory, Group Policy, and Bash/Powershell scripting