上海招聘

Position: CI/CD Operations and Cloud Security Management

Division/Department: HR&ORG&ITP/ITP Region China

Location: Beijing

Main goals and objectives:

Application Operation

? Manages lifecycle and release management processes for apps running the Platform

(such as Cloud Foundry).

? Responsible for the continuous delivery process to build, deploy, and Platform

applications.

? Ensures apps have automated functional tests that are used by the continuous

delivery process to determine successful deployment and operation of applications.

? Ensures monitoring of applications is configured and have rules / alerts for routine

and exceptional application conditions.

? Acts as second level support for applications, triaging issues, and disseminating

them to the platform operator, platform developer or application developer as

required,

? Quality Assurance: Technical acceptance of the Platform systems and

recommendation for Go Live decisions

Platform Operator

? Manages IaaS infrastructure that the Platform is deployed to, or co-ordinates with the

team that does.

? Installs and configures the Platform (such as Pivotal Cloud Fundry).

? Performs capacity, availability, issue, and change management processes for the

Platform.

? Scales the Platform, forecasting, adding, and removing IaaS and physical capacity

as required.

? Upgrades the Platform.

? Ensures management and monitoring tools are integrated with the Platform and

have rules / alerts for routine and exceptional operations conditions. Manage and

coordinate external service providers in the Connected Car area including:

o Technical and functional supervision of contracted parties

o Contract management

o Support hiring process for new service employees

o Monitoring and reporting

? Support budget planning and control

? Responsible for assuring measurable high-quality delivery in accordance with the

defined KPIs and the MBO

? Continuous technical and process improvement and optimization

Platform Engineering

Responsibility for extending the capabilities of the cloud platform in use to:

? Make enhancements to existing buildpack(s) and builds new buildpack(s) for the

platform.

? Builds service broker(s) and make them available to the Platform.

? Build Production releases and service brokers to enable managed services in the

platform.

? Manages release and promotion process for buildpacks, service brokers, and

components across the deployment topology.

? Integrates Platform APIs with external tool(s) when required.

Platform Security

? Establish and lead the Penetration Test Center to provide independent verification

services to IT related systems in region China.

? Leading Source code review service and closure of the findings.

? Implementing actionable plans to achieve remediation of security threats, and diving

deep on tactical security aspects of the cloud service in need of extra attention.

? High quality project management and execution of IT regional and local security

projects within rollout of Group Information Security projects.

? Ensure the Information Security Engagement in critical IT area, e.g. VW Cloud,

Connected Car.

? Establish automation and security maintenance by deploying security monitoring and

logging in critical IT area, e.g. VW Cloud, Connected Car.

Your Responsibilities:

? Creation and coordination of the CI/CD Concept (documentation, consulting and

deployment as well as operation)

? Requesting the required Platform resources (people and machines)

? Selection and introduction of technologies and CI/CD Platforms including training

? Scheduling of the individual system stages and the nexcessary tool chain.

? Planning of implemetation costs and time

? Plans, monitors and steers the CI/CD operation

? Reports the implementation progress and the CI/CD readyness to the project teams

? Implements an defect management

? Support project managers with Go/No Go live recommendations

? Regular interact with local stakeholders/business and for the IT/system related

project/program management and Management for digital solutions

? Build up stable and regular communication channel to identify and realize synergy in

the digital solutions area with all involved stakeholders incl. JVs

? Coordinate, validate and implement change requests and release updates in

cooperation with the project teams and the suppliers and their quality assurance

through testing

? Implement and optimize Deployment- and Release processes and policies

? Managing and tracking milestones and KPIs related to the CI/ CD Toolchain

Resources.

? Review by Project created Concept considering by CI / CD Operations defined

requirements with determining the suitability for the CI / CD Operation and the

development of relevant CI / CD Operation

? Provision independent system level penetration test services to VW IT related

systems as required.

? Lead the penetration test implementation. Manage the collaboration crossing

business unites.

? Lead the source code review execution. Manage the collaboration crossing business

unites.

? Lead the security findings follow-up and track security measures’ implementation.

? Be responsible to VGC management by regularly reporting IT vulnerabilities and

risks identified from series of penetration test.

? Establish and ensure the security engagement into VGC Cloud. Roll out IT security

regulations, implement IT security quality assurance process.

? Ensure IT security implementation in business critical projects, e.g. VW Connected

Car, Car Sharing. Be responsible for projects’ IT security management during

systems development and operation phases.

? Establish automation and security maintenance by deploying security monitoring

and logging in critical IT area, e.g. VW Cloud, Connected Car.

? Delivery Excellence based on high quality management in terms of planning,

scoping, tracking and reporting.

Our Requirements:

Necessary Education:

Bachelor or Master in computer science or equivalent (or a comparable degree)

Proven experience in Cloud Systemes and CI / CD Operation of Cloud systems,

experience in Cloud Security.

Personal Skills:

? Communication & Presentation skills

? Teamwork spirit

? Proactive problem- & conflict solving skills

? Customer & Result orientation

? Motivation, Initiative & Flexibility

? Understanding of financial aspects

? Ability to work in an intercultural environment

? Ability to manage risks and make decisions

? Ability to set and pursue targets independently (self-initiative and independence)

Working Experience (in years):

? At least 3 years’ experience in CI / CD Operation in the automotive and/or other

industry and at least 5 years’ equivalent information security experience.

? Proven experience in the Cloud Operations and Security Area

? Proven experience in IT Services Management (ITIL) and ISO 27001

? Minimum of 1 year with international projects

? Familiar with IT Architecture Management concepts

? Experience driving request for information (RFI) and request for proposal (RFP)

processes and evaluate the technical proposals

? Experience in IT Project Planning, Delivery and Optimization (incl. Budgeting)

? Experience in managing partners/vendors to deliver the requested projects, solutions

and services

? Experience in Documentation and Reporting

? Experience in leading Project Teams and enhancing Team Quality

? Experience with secure-cloud configuration, cloud-security technologies (VPC,

Security Groups, etc.) and cloud-permission systems (IAM).

? Experience with Identity and Access concepts and technologies to secure production

and corporate access,

? Experience with Logging, monitoring and response concepts and technologies for

cloud networks, corporate networks and host in all environments.

Remarks (Language, IT Knowledge, Certificates etc.):

? English fluent (spoken and written)

? German or/and Chinese would be an advantage

? Intercultural competence

? PMP or equivalent certification would be an advantage

? ITIL certification and experiences would be an advantage

? One or more security-related certifications, such as CISSP, CEH, CISA, CISM,

SECURITY+, OSCP, etc

? Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills.

? Possess self-drive to keep moving things forward even in the face of ambiguity and

imperfect knowledge (avoid “analysis paralysis”)

? Experience in Compliance Requirements (e.g. SOX, ISO, GDPR, Cyber Security

Law etc.)

? Strong demonstrated knowledge of web protocols, common attacks, and an in-depth

knowledge of Linux/Unix tools and architecture.

? Effective written and oral communication with multiple levels of leadership involving

both business and technical sides of the business.

What we offer:

? Strong brands, excellent products and image

? Performance oriented competitive compensation & benefits package

? Professional career development & qualification

? Good management, team work, open communication &feedback

? International working environment & global network

? Attractive work, health programs & work-life balance

Join us and become a part of the Volkswagen Family - We are looking forward to

welcome you on board!

Please send your application in English to: career@volkswagen.com.cn with

subject “channel name (where you find this job posting) - applicant name -

current company - current position - applied position”.

Volkswagen Group China

Volkswagen Group is one of the earliest and most successful international partners of China’s automobile industry. The Group has grown together with China’s auto industry, overcoming many challenges and achieving significant growths, during the 30 years’ partnership with China.

As early as 1978, Volkswagen Group started contacts with China. The first Santana was produced in Shanghai in April 1983. In October 1984, Shanghai Volkswagen Corporation Ltd, the first joint venture of Volkswagen Group in China, laid foundation in Shanghai. In February 1991, FAW-Volkswagen Corporation Ltd was established in Changchun, creating Volkswagen Group’s second joint venture in China.

The business scope of Volkswagen Group in China includes the production, sales and services of complete vehicles and parts, such as engines and transmissions. All of the Group auto brands — including Volkswagen, Audi, SKODA, SEAT, Bentley, Bugatti, Lamborghini, Porsche, Ducati, Volkswagen Commercial Vehicles, Scania and MAN — have a business presence in China through Volkswagen Group China and its subsidiaries.