Total 2 Director/C-Level construction engineer job vacancies in F&B / Tourism / Hospitality category in Hong Kong

About Us

The SDLC team delivers engineer-first, mission critical tooling across the entire cycle of source code, build, test, maintain and distribution. Our tools are used by all the Engineers of Goldman Sachs across all business units, and therefore the scope and reach of the impact of our engineering can be felt in all aspects of the organization.

As an SDLC Engineer

You will be working at the heart of the developer experience, ensuring the code that is written by thousands of GS engineers is versioned securely, reviewed expertly, compiles fast, tests comprehensively and is distributed widely. You will deliver CI/CD solutions that use modern tooling and software stacks. You could be working with cutting edge build technology, or the latest cloud native software and infrastructure in one or more languages including Java, Golang, and Python, or enabling and assisting our machine learning and AI tooling efforts.

SDLC Platforms include

• Build and Development using modern software stacks and methodologies

- GitLab - The firm's strategic CI/CD platform, hosted in-house with instances on-premise and on public clouds

- In-house developed Continuous Deploy (CD) tools for safely and repeatably deploying software packages, configuration and Infrastructure as Code

• Distribution - Secure software distribution mechanisms on both Linux and Windows
• Artifact Repositories - Build artifact repositories hosting dynamic terabytes of internal and external software packages and industry standard asset repositories, kept up-to-date and well secured.

Responsibilities

• Key contributor to the design, implementation and execution of our next generation CI/CD instances with an emphasis on security, testing the capability to exceed industry standard performance and availability.
• Develop features and improvements to our CI/CD solution, working with the vendor provided software stacks to extend and enhance according to engineering platform requirements.
• Collaborate with Product Management and other stakeholders within Engineering to maintain and improve the functions and quality of service
• Advocate for improvements to product quality, security, and performance
• Diagnose and solve technical problems, both within the core GitLab environment, and the broader SDLC ecosystem
• Metric gathering, analysis and reporting
• Reliability Engineering and operational resiliency

What you will learn when you join us

• Cloud native architectures in AWS.
• Managing all sizes and scopes of software repositories, build systems and deployment paradigms
• Expertise in commercial / open source build systems and strong knowledge of software change management systems
• Expertise in DevOps, SRE and Infrastructure (storage / networks / etc.)
• Design and implement distributed resilient systems
• Partner with and provide technical guidance on best practices to the GS Engineering community, across all revenue aligned Engineering teams
• Thinking about systems, edge cases, failure modes and behaviors

Skills and experience we are looking for

• A technical degree in Computer Science, Engineering, Mathematics, or a related field
• Min. 7 years’ experience in software engineering
• Ability to use and familiarity with Git
• Professional experience with Cloud deployment patterns. Notably AWS and Hashicorp Terraform
• General knowledge of multiple languages, and in-depth strong programming skills of at least one of: Golang, Java, Python, C, C++, preferably in large scale financial or technical organization
• Highly knowledgeable about running key applications on Linux
• Knowledgeable about networking protocols and topology
• Strong software engineering fundamentals, understanding algorithms, data structures and software design
• Experience with all stages in the lifecycle and debugging of developing and running distributed systems
• Demonstrable track record of taking ownership of requirements and delivering value

Attitudes we want

• Naturally collaborative with the ability to thrive in our global organization in an output driven, fast paced, hybrid and asynchronous work place
• Ability to communicate technical and organizational challenges and propose high quality solutions
• Self-managed, self-directed and good organization skills
• Passionate about the software development process and facilitating high frequency / high quality change across a vibrant and diverse user community
• Have an urge to resolve incidents and automate and document the resolution to prevent recurrence

PREFERRED QUALIFICATIONS

• BSc, MSc or PhD in relevant field (Computer Science, Maths, Physics)
• Highly knowledgeable about running key business applications on Linux platforms and Linux internals.
• Knowledgeable about networking (TCP, UDP, ICMP, ARP, DNS, TLS, HTTP, SSH, etc)
• Experience with Cloud and Infrastructure as Code technologies - AWS, Terraform, Docker, Kubernetes, etc.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2026. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group
The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GIC’s ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities, and to create an inclusive, innovative and integrated work environment.

What impact can you make in this role?

We are seeking a highly experienced Senior Active Directory (AD) Security Engineer to focus on securing, hardening, and automating enterprise Active Directory environments, ensuring robust Tier 0 protection, privileged access controls, trust hardening, OU/GPO security, and cyber resilience. The engineer will work closely with Red Teams, Penetration Testing, and Threat Detection functions to identify attack paths, simulate AD-based threats, automate recovery capabilities, and continuously strengthen the enterprise AD security posture. 

What will you do as an VP, Active Directory & Entra ID Engineer?

• Design, secure, and manage hybrid identity environments across on-prem Active Directory and Entra ID (Azure AD) to ensure resilience, integrity, and threat resistance.
• Define and implement a clean, compliant target state for identity and access management (IAM), aligning AD and Entra ID security with enterprise IAM processes and governance.
• Conduct threat modelling and exposure assessments for both AD and Entra ID to identify and mitigate identity attack paths.
• Implement and maintain Tier 0 (Privileged Access) controls aligned with Microsoft’s Enterprise Access Model (EAM) and Zero Trust principles.
• Harden AD forests, domains, and trust relationships, as well as Entra ID tenants, to prevent privilege escalation, domain compromise, and lateral movement.
• Design and manage Privileged Access Workstations (PAWs) and enforce administrative boundaries for Tier 0 and Tier 1 assets.
• Develop and maintain PowerShell and Graph API automation frameworks to:

• Audit and report AD and Entra ID configurations, permissions, and delegations.

  Enforce baseline hardening and compliance controls.

  Automate remediation, monitoring, and hygiene tasks.

• Support AD Forest recovery and Entra ID incident response automation to improve recovery time objectives (RTO).
• Design and implement AD Forest Recovery and Entra ID tenant recovery plans, perform automated recovery drills, and build operational readiness for cyberattack or ransomware scenarios.
• Manage and secure Organizational Unit (OU) delegation models and Entra ID administrative units following least-privilege principles.
• Manage and harden Group Policy Objects (GPOs) and Conditional Access Policies to enforce security baselines and prevent policy abuse.
• Collaborate with IAM teams to integrate AD and Entra ID workflows (e.g., provisioning, deprovisioning, access reviews) into enterprise identity lifecycle processes.
• Collaborate with Red Team, Penetration Testing, and SOC teams to identify vulnerabilities, validate attack paths, and remediate exposures.
• Simulate and analyse identity-based attack scenarios (e.g., DCSync, DCShadow, Golden/Silver Ticket, Pass-the-Hash, Kerberoasting, token replay, and consent phishing).
• Integrate Threat Detection and Response capabilities within SOC operations and SIEM tools (e.g., Microsoft Sentinel, Splunk, QRadar).
• Support Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Thycotic to enforce Just-in-Time (JIT) and Just-Enough Access (JEA).
• Maintain detailed documentation, baselines, recovery guides, and post-assessment reports to enhance hybrid identity security and resilience posture.

What qualifications or skills should you possess in this role?

• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
• Minimum of 5 years in AD security engineering 
• Deep expertise in Active Directory internals (replication, Kerberos, LDAP, DNS, GPO) and Entra ID architecture (Conditional Access, Identity Protection, PIM, App Registrations, and Connect).
• Proven experience in AD and Entra ID hardening, Tier 0 protection, trust management, and privileged access isolation.
• Hands-on experience in hybrid identity design, including synchronization, federation, and secure integration with SaaS applications.
• Experience integrating AD and Entra ID with enterprise IAM processes, including provisioning, deprovisioning, and access governance workflows.
• Strong experience in OU and Entra ID administrative unit design, delegation, and access control aligned with least-privilege principles.
• Advanced knowledge in GPO and Conditional Access policy management, including security baselining, auditing, and change control.
• Expert-level PowerShell scripting and Graph API automation for auditing, reporting, and enforcing identity configurations.
• Experience collaborating with Red Teams and Penetration Testing Teams to simulate attacks and strengthen defences.
• Proficiency with AD and Entra ID security tools such as BloodHound / PingCastle / PurpleKnight / ADRecon / PowerView / Microsoft Defender for Identity.
• Knowledge of Privileged Access Management (PAM) solutions and SIEM integration for identity threat detection.
• Strong understanding of Zero Trust and EAM principles as applied to hybrid identity environments.
  

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection.  At the same time, we believe that flexibility allows us to do our best work and be our best selves.  Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer 
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn more about our Technology Group here:
https://gic.careers/group/technology-group/