Senior Site Reliability Engineer - Access Team

About the Opportunity

We are seeking a Senior Site Reliability Engineer to join the Platform Engineering Domain in the Access Team.

The mission of Platform Engineering is to provide trusted, performant, self-service platforms that empower product teams to build “the bank the world loves to use.” Access Team’s mission is to ensure secure, seamless, and compliant access to that infrastructure. We build the gateway between our engineers and our cloud resources.

As one of the first banks completely hosted in the cloud, our security and compliance standards are industry-leading. We don’t just use a modern stack; we build sophisticated access solutions like JIT (Just-In-Time) provisioning and Privileged Access Management (PAM) to protect our customers and our data.

In this role, you will:

Be responsible for designing and maintaining the systems that govern how humans and services access our AWS environment. You will ensure that access is "least-privilege" by default, automated, and audit-ready.

More specifically, you will:

Manage and scale our Teleport infrastructure for secure access to servers, databases, and Kubernetes clusters.

Develop and maintain automated Identity and Access Management (IAM) workflows within AWS.

Implement and improve Just-In-Time (JIT) access solutions to reduce our permanent attack surface.

Collaborate closely with the Cloud Control team to integrate security policies into the core infrastructure provisioning process.

Automate authorization flows to ensure regulatory compliance without slowing down engineering velocity.

Maintain and improve our Infrastructure-as-Code (Terraform) for all access-related components.

Support internal and external audits by providing technical evidence and ensuring our access protocols meet strict regulatory standards; proactively identify gaps in our current access landscape and drive initiatives to remediate them.

Create monitors and alerts for access patterns, diagnosing and resolving issues related to authentication and authorization services.

What you need to be successful:

Background and skills:

Production expertise in Amazon Web Services (AWS), specifically with IAM, Organizations, and Multi-account security.

Hands-on experience with Access Management tools, preferably Teleport, or similar PAM/JIT solutions.

Strong experience with Terraform for managing cloud resources and security policies.

Solid understanding of Linux systems and networking fundamentals (OIDC, SAML, SSH, TLS, TCP/IP).

Experience programming in Go and/or Python to automate security workflows.

Familiarity with compliance frameworks and a proven ability to translate audit requirements into technical solutions.

Experience with container orchestration (Docker, Kubernetes) from an access and RBAC perspective.

A "Security-first" mindset with a proactive approach to solving complex permission issues.

Good communication skills and the ability to work autonomously within a fast-paced environment.

Traits:

Independently lead tech projects

Lead and promote technical discussions with engineering audiences

Mentoring & support of Junior & Mid-level engineers

Review, assessment & improvement of the current team tool landscape

Advancements in code quality practices, security awareness and monitoring

Build up knowledge of production data and its analysis

You are on top of incidents, generate learnings and follow up

Deepest understanding of everything built by the team

Leading specialist activities, drive tech projects independently

Bring architectural & technical debt issues into the backlog

You see the delivery of your team in a broad, domain-wide context

Building bridges to other areas and be the glue in your own team

Take full responsibility for your work and projects you participate

Mature & solution-oriented tech counterpart in any discussion

What’s in it for you:

Accelerate your career growth by joining one of Europe’s most talked ab