Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Senior Penetration Tester

If you’re passionate about security and privacy, and want to use your offensive security skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. 

Who you are

You’re a natural at solving problems and identifying security weaknesses with deep expertise in application security and infrastructure, and you have experience working on teams that know how to remediate vulnerabilities you identified based on your recommendations. You aren’t afraid of change, and you ask the questions that need to be asked. A lack of clarity is something you can’t settle for, and you voice your concerns when the balance between effort and impact seems off. 

As someone with an offensive security mindset, you know there are always vulnerabilities waiting to be found, and you’re naturally collaborative to help find and address them. You’re always willing to hear ideas from your colleagues. Likewise, you're willing to share your own knowledge and mentor others. 

What you’ll do

As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:

• Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, London, Germany and Bucharest.
• We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our tech stack.
• You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.
• Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities
• Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these 
• Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated
• Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions. Identify areas where automated testing can be done, then develop, maintain and continuously improve tools to support these automated tests
• Mentor, guide and support other team members using your strong technical knowledge
• Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion

This role focuses strongly on your ability to perform penetration testing (with a specialization in either desktop and server applications, infrastructure, and mobile apps, depending on your experience). To be a good fit for this role, you should be able to read source code in various languages, identify security weaknesses and vulnerabilities in various platforms and efficiently deliver security assessment projects while mentoring junior team members. Networking knowledge is critical to succeed in this role.

What you’ll bring

• Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED
• Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system
• Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concepts
• Experience writing automation workflows such as Github Actions
• Provide mentorship and guidance to other team members and share knowledge and findings with them
• Good knowledge of:
• TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering
• Cryptography: PGP, SSH, PKI

How you’ll succeed

• Your capacity to consistently identify security vulnerabilities and provide sound remediation strategies alongside our engineering teams is key to success in this role
• You’ll be assigned as a security lead across a number of our projects, and will need to mentor more junior team members and help them grow their skillset
• Your ability to design technical solutions while staying ahead of industry trends will help drive continued security improvement, especially when supporting secure engineering designs

Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.

How we’ll support you

We believe in fostering an environment that empowers decision-making at all levels. Our culture is rooted in the inverted pyramid approach, where the engineers, who have a deep understanding of the product and the customers, are the ones who have the knowledge and the authority to make impactful decisions. 

• We prioritize treating every team member with respect and promote open and constructive feedback, ensuring a culture of trust and transparency
• We encourage learning through experimentation and provide a safe space for everyone to learn from their experiences
• Our managers are dedicated to facilitating career growth and creating an environment that attracts and supports talented engineers

#LI-PS1

ABOUT US

Capco is a global technology and management consultancy specializing in driving digital transformation in the financial services and insurance industries. Capco is committed to providing clients with practical solutions. We offer a globally integrated service with offices in leading financial centers across the globe. We have the people, the vision, and the passion.

We are growing through a significant growth journey, now is a very good time to join us as we expand geographically, increase headcount and disrupt the consulting market across APAC with entrepreneurial and agile thinking.

We are:

• Experts in banking and payments, capital markets and wealth and asset management
• Deep knowledge in financial services offering, including e.g. Finance, Risk and Compliance, Financial Crime, Core Banking etc.
• Committed to growing our business and hiring the best talent to help us get there
• Focus on maintaining our nimble, agile and entrepreneurial culture

ROLE RESPONSIBILITIES

We are currently seeking Senior Data Consultants to support and drive the growth of our Data practice, particularly in our Python Development stream. This is an exciting opportunity to be a leader, in a growing team of data practitioners, where you will be initiating and implementing cutting-edge data & analytics programmes for top-tier Financial Services clients.

As a Senior Data Consultant, you will be involved in developing the HK Data Practice capabilities and the broader Global Data Practice to supporting topics such as Cloud, Artificial Intelligence and Machine Learning.

KEY RESPONSIBILITIES 

SKILLS & EXPERTISE

• 5 years of experience in python development within Financial Services. 
• Advanced proficiency in Python for data processing and analytics, including libraries such as pandas, NumPy, and related frameworks.
• Strong understanding of data warehousing concepts, data modelling principles, and data governance standards.
• Solid experience working within SDLC and Agile delivery environments as a strong individual contributor.
• Experience with FIS tools, including Prophet and PMCS (configuration, runs, outputs, integration
• CI/CD: automate tests/quality checks in pipelines (e.g., GitHub Actions/GitLab/Jenkins)
• Immediately available highly preferred 

WHY JOIN CAPCO?

You will work on engaging projects with some of the largest banks in the world, on projects that will transform the financial services industry.

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

We provide flexible arrangements to our remote contract talents with:

• Work from home to help you find the perfect balance between work, family and personal life
• Paid holidays and leave so you won’t miss out any important events
• Team building & offsite events to bring our global team closer
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Option to choose to be paid in fiat or crypto currency, providing the flexibility to shape your financial freedom

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Who We Are

Build. Scale. Sustain. 

We are a global technology consultancy with a trademarked, AI-first engineering approach for accelerating the delivery of digital products, and revolutionizing platform modernization. We do the right thing, and we do it right. We're proud to be a World Economic Forum New Champion, and a B Corp-certified company.

• We are small enough to care locally, big enough to deliver globally: 5 continents, 10 countries, +500 experts from +50 nationalities across the Americas, Europe and APAC
• We are robust and resilient: 100% independent and 0 debt
• We are entrepreneurs and passionate experts: We invest in what we believe genuinely and work as a collective intelligence
• We are positive, courageous, caring, doers and committed to excellence

About Gen-e2^TM

While the market is still largely AI-augmenting delivery, we have reinvented the SDLC to be AI First. Leveraging our 16 years expertise in digital transformation, our approach is a game-changer in productivity and quality, with a strong collaboration between IA generative and our best Talents:

• We now generate 95% of the entire product — code, documentation, infrastructure as code, and even design powered by GitHub Copilot.
• The quality consistently exceeds the output of our best traditional engineering teams.
• A product repository houses all product artefacts, giving AI full project context for higher-quality generation.
• A library of rules and prompts defines coding standards, design principles, and security guidelines, ensuring enterprise-grade quality and scalability.
  With Gen-e2^TM, we deliver end-to-end products 2–3× faster than traditional approaches, while raising the bar for engineering excellence.

YOUR ROLE:

As a DevOps Engineer, you will be responsible for designing, building, and maintaining scalable and reliable cloud infrastructure using AWS/Azure/Openstack/Kubernetes. You will apply DevOps practices and solutions, conduct client workshops to identify challenges, develop transformation roadmaps, and deliver technical solutions. Additionally, you will coach delivery teams on DevOps best practices and approach projects with an engineering consultant mindset, providing expert guidance and strategic consulting to clients.

Working closely with project teams and business stakeholders, you'll provide technical expertise that enables innovation through both traditional development practices and AI-augmented workflows. Your outstanding interpersonal skills will help you build or be part of a high-performing engineering team that consistently exceeds expectations by effectively combining human expertise with AI capabilities.

YOUR RESPONSIBILITIES

• Provide customers with reliable and scalable cloud solutions using AWS, Azure, and Kubernetes.
• Design, build, configure, maintain, and support cloud infrastructure.
• Implement and support various CI/CD, security, and testing tools.
• Develop multi-stage CI/CD pipelines to enable faster and frequent releases to production; assist delivery teams in automating their build and deployment processes.
• Document and share knowledge on developed DevSecOps solutions.
• Conduct client workshops to identify challenges, develop transformation roadmaps, and deliver technical solutions.
• Collaborate with clients and other PALO IT teams to understand client requirements, design comprehensive end-to-end approaches, and implement DevOps solutions that meet client needs.
• Approach projects with an engineering consultant mindset, providing expert guidance and strategic consulting to clients.
• Utilize AI development tools such as GitHub Copilot and Cursor to enhance development processes and improve efficiency.

YOUR PROFILE

As our company transitions into an AI-focused firm, all developers are expected to demonstrate proficiency in AI-augmented development practices. We are looking for a creative, self-motivated individual with the following qualifications and qualities:

• Proficiency in working with AI coding assistants (e.g., GitHub Copilot, Cursor) for code generation and problem-solving.
• Understanding of prompt engineering principles for optimal AI tool interaction.
• Ability to effectively collaborate with AI tools while maintaining code quality and adherence to best practices.
• Critical thinking to validate and verify AI-generated code and solutions.
• Adaptability and willingness to continuously learn and stay updated with the rapidly evolving AI landscape.
• Deep understanding of cloud computing technologies, deployment, costing, HA/DR, etc.
• Ability to coach delivery teams on DevOps principles (e.g., CI/CD, test automation, release automation) and engineering practices (e.g., TDD, BDD).
• Proficiency with public cloud platforms such as AWS and Azure. Strong exposure to container technologies (e.g., Docker, Kubernetes, AWS EKS, AKS).
• Hands-on experience with automation and infrastructure-as-code using tools like Terraform, AWS CloudFormation, SAM, ARM, and Bicep.
• Experience in developing and implementing processes for handling releases from development to operations, including rollback solutions.
• Hands-on experience in designing, developing, and migrating CI/CD pipelines (e.g., GitHub Actions, Azure DevOps Pipelines).
• Good understanding of microservice and event-driven architectures and DevSecOps practices for complex distributed systems.
• Proficiency in setting up and configuring monitoring tools (e.g., ELK, Prometheus, Grafana, Splunk) and security tools (SAST, DAST, etc.).
• Strong RDBMS and NoSQL skills in deploying and fine-tuning databases such as MySQL, Oracle, and Elasticsearch.
• 6-10 years of experience in platform automation, applying various DevOps principles.

More About PALO IT

We’re eager to adapt to change, learn from our experiences and move to meet our planet’s urgent needs. We are continuously taking action to:

• Become a climate net-zero company 
• Deliver projects with a positive impact
• Train 100% of our workforce on impact 
• Achieve B Corp certification among all our offices across the globe 
• Continuously measure & improve employee happiness

Our clients are amongst the world's most successful companies. We innovate with both established Fortune 1000s, SMEs and start-ups who aim to make an impact, become global leaders and address the world's most complex challenges.

What We Offer

• Stimulating working environments
• Unique career path
• International mobility
• Internal R&D projects
• Knowledge sharing
• Personalized training
• Entrepreneurship & intrapreneurship

For more on our team culture and benefits, check out our careers page.

To learn more about our team culture and benefits, visit our careers page. If you resonate with our values, we look forward to connecting with you!

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race or ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other legally protected status.

Information provided by applicants will be for recruitment purposes within PALO IT and only the short-listed candidates will be contacted.

For further information on our company, please visit our website: https://www.palo-it.com/en-hk/

We are hiring for one of our clients. They are a fast-growing Web3 startup rethinking how digital identity and reputation work online. They’re building privacy-first infrastructure that lets users prove who they are and what they’ve done—without giving up personal data. Backed by strong ecosystem partners and a passionate founding team, the company is shaping a more trusted and user-centric internet.

We are seeking a Senior Quality Assurance (QA) Lead to own and elevate quality across the product lifecycle. You will define the QA strategy, and partner closely with Product, Engineering, and Design to ship reliable, secure, and delightful features.

Responsibilities

• Own end-to-end quality across the product suite — from defining QA strategy and test plans to hands-on execution, reporting, and continuous improvement.
• Shape the QA roadmap by setting up effective testing processes, tools, and metrics, ensuring smooth release cycles and data-driven quality tracking.
• Collaborate early and often with product and engineering to refine requirements, user flows, and acceptance criteria — advocating for testability and great user experiences.
• Plan and execute testing at every level (manual and automated): API, UI, integration, regression, and smoke — ensuring solid coverage and reliability.
• Drive smart automation — identify high-value test cases for automation and maintain stable, scalable test suites.
• Track and communicate quality metrics such as defect trends, coverage, and release health to keep the team aligned and proactive.
• Champion a shift-left mindset by embedding QA practices early in discovery and development, and helping engineers take ownership of quality.
• Oversee release readiness — from environment setup and data prep to go/no-go decisions and post-release validation.
• Lead defect management — prioritize fixes, uncover root causes, and turn insights into prevention and process improvements.
• Mentor and scale the QA function, building documentation, standards, and best practices that grow with the team.
• Partner with DevOps and Security to strengthen performance, reliability, and security testing — ensuring compliance and operational excellence.

Requirements

• 7+ years in QA/Software Quality roles with 2+ years leading QA initiatives or teams in a fast-paced product environment.
• Strong expertise in test strategy, risk-based testing, requirements analysis, and release management.
• Hands-on experience with test automation frameworks and tools (e.g., Playwright/Cypress/WebdriverIO, pytest/Jest, Postman/Newman, REST/GraphQL tools).
• Proficiency with CI/CD and version control (e.g., GitHub/GitLab Actions, Jenkins, CircleCI); experience integrating automated tests into pipelines.
• Solid understanding of modern web/mobile architectures, APIs, microservices, and cloud environments.
• Experience with non-functional testing: performance (e.g., k6, JMeter), reliability, accessibility, and security testing practices.
• Data-driven mindset with experience defining and reporting quality metrics and OKRs.
• Excellent communication and stakeholder management; able to translate technical quality issues into business impact and recommendations.

Nice to have

• Understanding of wallets and signing flows (e.g., MetaMask, WalletConnect, EIP-712 typed data), basic key management concepts.
• Exposure to smart contracts and EVM tooling (reading Solidity/ABIs, Foundry/Hardhat test basics, contract events).
• Experience testing dApp UX with wallet connectors, chain switching, and handling pending/confirmed/failed on-chain states.
• Awareness of token standards (ERC-20/721/1155), approvals/permits, and common failure modes (reverts, RPC errors, reorgs).
• Light exposure to wallet-aware E2E automation (e.g., Synpress or Playwright with mocked providers) is a plus.

We are hiring for one of our clients. They are a fast-growing Web3 startup rethinking how digital identity and reputation work online. They’re building privacy-first infrastructure that lets users prove who they are and what they’ve done—without giving up personal data. Backed by strong ecosystem partners and a passionate founding team, the company is shaping a more trusted and user-centric internet.

We are seeking a Senior Quality Assurance (QA) Lead to own and elevate quality across the product lifecycle. You will define the QA strategy, and partner closely with Product, Engineering, and Design to ship reliable, secure, and delightful features.

Responsibilities

• Own end-to-end quality across the product suite — from defining QA strategy and test plans to hands-on execution, reporting, and continuous improvement.
• Shape the QA roadmap by setting up effective testing processes, tools, and metrics, ensuring smooth release cycles and data-driven quality tracking.
• Collaborate early and often with product and engineering to refine requirements, user flows, and acceptance criteria — advocating for testability and great user experiences.
• Plan and execute testing at every level (manual and automated): API, UI, integration, regression, and smoke — ensuring solid coverage and reliability.
• Drive smart automation — identify high-value test cases for automation and maintain stable, scalable test suites.
• Track and communicate quality metrics such as defect trends, coverage, and release health to keep the team aligned and proactive.
• Champion a shift-left mindset by embedding QA practices early in discovery and development, and helping engineers take ownership of quality.
• Oversee release readiness — from environment setup and data prep to go/no-go decisions and post-release validation.
• Lead defect management — prioritize fixes, uncover root causes, and turn insights into prevention and process improvements.
• Mentor and scale the QA function, building documentation, standards, and best practices that grow with the team.
• Partner with DevOps and Security to strengthen performance, reliability, and security testing — ensuring compliance and operational excellence.

Requirements

• 7+ years in QA/Software Quality roles with 2+ years leading QA initiatives or teams in a fast-paced product environment.
• Strong expertise in test strategy, risk-based testing, requirements analysis, and release management.
• Hands-on experience with test automation frameworks and tools (e.g., Playwright/Cypress/WebdriverIO, pytest/Jest, Postman/Newman, REST/GraphQL tools).
• Proficiency with CI/CD and version control (e.g., GitHub/GitLab Actions, Jenkins, CircleCI); experience integrating automated tests into pipelines.
• Solid understanding of modern web/mobile architectures, APIs, microservices, and cloud environments.
• Experience with non-functional testing: performance (e.g., k6, JMeter), reliability, accessibility, and security testing practices.
• Data-driven mindset with experience defining and reporting quality metrics and OKRs.
• Excellent communication and stakeholder management; able to translate technical quality issues into business impact and recommendations.

Nice to have

• Understanding of wallets and signing flows (e.g., MetaMask, WalletConnect, EIP-712 typed data), basic key management concepts.
• Exposure to smart contracts and EVM tooling (reading Solidity/ABIs, Foundry/Hardhat test basics, contract events).
• Experience testing dApp UX with wallet connectors, chain switching, and handling pending/confirmed/failed on-chain states.
• Awareness of token standards (ERC-20/721/1155), approvals/permits, and common failure modes (reverts, RPC errors, reorgs).
• Light exposure to wallet-aware E2E automation (e.g., Synpress or Playwright with mocked providers) is a plus.

We are hiring for one of our clients. They are a fast-growing Web3 startup rethinking how digital identity and reputation work online. They’re building privacy-first infrastructure that lets users prove who they are and what they’ve done—without giving up personal data. Backed by strong ecosystem partners and a passionate founding team, the company is shaping a more trusted and user-centric internet.

We are seeking a Senior Quality Assurance (QA) Lead to own and elevate quality across the product lifecycle. You will define the QA strategy, and partner closely with Product, Engineering, and Design to ship reliable, secure, and delightful features.

Responsibilities

• Own end-to-end quality across the product suite — from defining QA strategy and test plans to hands-on execution, reporting, and continuous improvement.
• Shape the QA roadmap by setting up effective testing processes, tools, and metrics, ensuring smooth release cycles and data-driven quality tracking.
• Collaborate early and often with product and engineering to refine requirements, user flows, and acceptance criteria — advocating for testability and great user experiences.
• Plan and execute testing at every level (manual and automated): API, UI, integration, regression, and smoke — ensuring solid coverage and reliability.
• Drive smart automation — identify high-value test cases for automation and maintain stable, scalable test suites.
• Track and communicate quality metrics such as defect trends, coverage, and release health to keep the team aligned and proactive.
• Champion a shift-left mindset by embedding QA practices early in discovery and development, and helping engineers take ownership of quality.
• Oversee release readiness — from environment setup and data prep to go/no-go decisions and post-release validation.
• Lead defect management — prioritize fixes, uncover root causes, and turn insights into prevention and process improvements.
• Mentor and scale the QA function, building documentation, standards, and best practices that grow with the team.
• Partner with DevOps and Security to strengthen performance, reliability, and security testing — ensuring compliance and operational excellence.

Requirements

• 7+ years in QA/Software Quality roles with 2+ years leading QA initiatives or teams in a fast-paced product environment.
• Strong expertise in test strategy, risk-based testing, requirements analysis, and release management.
• Hands-on experience with test automation frameworks and tools (e.g., Playwright/Cypress/WebdriverIO, pytest/Jest, Postman/Newman, REST/GraphQL tools).
• Proficiency with CI/CD and version control (e.g., GitHub/GitLab Actions, Jenkins, CircleCI); experience integrating automated tests into pipelines.
• Solid understanding of modern web/mobile architectures, APIs, microservices, and cloud environments.
• Experience with non-functional testing: performance (e.g., k6, JMeter), reliability, accessibility, and security testing practices.
• Data-driven mindset with experience defining and reporting quality metrics and OKRs.
• Excellent communication and stakeholder management; able to translate technical quality issues into business impact and recommendations.

Nice to have

• Understanding of wallets and signing flows (e.g., MetaMask, WalletConnect, EIP-712 typed data), basic key management concepts.
• Exposure to smart contracts and EVM tooling (reading Solidity/ABIs, Foundry/Hardhat test basics, contract events).
• Experience testing dApp UX with wallet connectors, chain switching, and handling pending/confirmed/failed on-chain states.
• Awareness of token standards (ERC-20/721/1155), approvals/permits, and common failure modes (reverts, RPC errors, reorgs).
• Light exposure to wallet-aware E2E automation (e.g., Synpress or Playwright with mocked providers) is a plus.