DevOps Engineer - DAP - DataMasking @ING Hubs Romania

Discover ING Hubs Romania

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals.

We started out in 2015 as ING's software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from two locations: Bucharest and Cluj-Napoca.

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?

The Mission

ING's Data, Analytics & AI Platform is responsible for enabling scalable, secure and compliant data processing capabilities across the organization. A key part of this mission is providing reliable data protection services that allow ING teams to safely use sensitive data while meeting regulatory and security requirements.

The Data Masking & Anonymisation team delivers and operates a centralized data masking platform for ING, supporting multiple business lines such as Wholesale Banking, Retail Banking and other domains. The platform is built on eXate, a distributed data privacy platform that embeds centralized controls into data ingestion and distribution. It runs as containerized Spark workloads on Kubernetes in ING's Private Cloud and is delivered to teams across ING as a managed service.

The team owns the platform end to end, from the Kubernetes-based runtime and containerized Spark execution layer to automation, operational reliability and security controls. Its responsibility is to ensure the platform is stable, scalable, secure and fit for purpose, while continuously improving performance, resilience and operability.

If you are a DevOps or SRE engineer who enjoys working with Kubernetes, containers, distributed compute platforms and production operations, this role offers the opportunity to run a critical Spark-on-Kubernetes platform where reliability, security and engineering quality directly shape how sensitive data is processed safely at scale across ING.

You will be responsible for the operational side of containerized Spark workloads, including driver and executor runtime configuration, pod lifecycle management, scheduling, security hardening, secrets and RBAC integration, observability, log-based troubleshooting, incident response, and performance and capacity optimization in a managed Kubernetes environment.

Your day to day

Even if you'll start your day from the comfort of your home or drink your morning coffee in our office's garden, your day will be quite similar when it comes to tasks:

• Responsibility for the end-to-end Spark execution platform across Development, Test, Acceptance and Production environments, built on Docker containers orchestrated by Kubernetes.

• Take ownership of the Docker image lifecycle for Spark workloads, including building and maintaining Spark driver and executor images, managing runtime and library dependencies and ensuring proper image versioning and optimization.

• Continuous automation of the Spark job lifecycle: container build, configuration, deployment, execution, monitoring and cleanup, including performance, stability and security aspects.

• Drive automation initiatives and Continuous Integration/Continuous Deployment (CI/CD) practices.

• Take ownership of runtime and lifecycle management across all platform components, covering operating systems (RHEL), Docker images, Kubernetes resources and the middleware and storage integrations required by Spark workloads.

• Be responsible for container and platform security, including image hardening and vulnerability scanning, RBAC and service accounts, and certificate and secret management.

• Continuous improvement of Spark job observability using agreed monitoring and alerting standards (Prometheus, Grafana, centralized logging).

• Perform root cause analysis for Spark job failures, container issues or platform gaps and propose pragmatic solutions.

• Work on technical improvements (automation, setting up environments, Azure DevOps pipelines).

• Ensure system security and compliance with ING's IT risk standards and policies.

• Occasional travel abroad (Amsterdam).

What you'll bring to the team

• Proven experience in a DevOps or Platform Engineering role.

• Strong hands-on experience with Apache Spark environments, including configuration and performance tuning.

• Solid knowledge of containerization technologies, including Docker, Kubernetes, or similar platforms.

• Experience operating Docker + Kubernetes platforms on RHEL based environments.

• Ability to automate release processes and operations using e.g. Python, Shell, Ansible.

• Experience with CI/CD tooling (Azure DevOps, Git or similar).

• Experience with monitoring and logging stacks (Prometheus, Grafana, ELK or similar).

• Good understanding of databases including RDBMS.

• Good communication skills.

Nice to have

• Experience migrating workloads from Cloudera / YARN to containerized Spark.

• Knowledge of S3 object storage.

• Foreign languages: English (advanced).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).