Software Engineer Principal Sr. - Javascript, GO, CI​/CD, DevSecOps

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a(n) [position title] within PNC's [name of division] organization, you will be based in [city/state location of position].

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success.

As a Software Engineer Principal within PNC's Technology organization, you will be based in Pittsburgh PA, Cleveland OH, Birmingham AL, Phoenix AZ or Dallas TX.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

You will serve as the lead engineer for an in‑house secrets scanning and remediation platform built on proprietary, patent‑pending technology. This role supports a Security Innovation team working across the Dev Sec Ops  organization to help prevent, detect, and remediate credential exposure across enterprise source code.

You will own the reliability, support, and continued development of the platform, including CI/CD integrations, self‑service remediation capabilities, reporting data, and production services. This is a hands‑on engineering role for someone who can support the current environment while helping expand the platform as adoption grows.

• Own production support for an in‑house secrets scanning and remediation application, including availability, incident troubleshooting, release coordination, patching, monitoring, and operational hygiene.
• Maintain and enhance integrations with core CI/CD and source control platforms, including Bitbucket, Azure Dev Ops, Git Hub Enterprise, and related pipeline controls.
• Support scanning and enforcement workflows that help development teams identify, track, and remediate hardcoded credentials in source code.
• Build and improve self‑service remediation portals that allow users to review findings, validate results, take remediation actions, and drive compliance activities at enterprise scale.
• Maintain active services, application components, and supporting infrastructure across Linux, Windows, containerized services, and database layers.
• Improve reporting data used to track scan results, remediation progress, compliance status, and platform adoption.
• Troubleshoot data quality, service performance, failed jobs, integration issues, and user‑reported defects across the application stack.
• Partner with security innovation, Dev Sec Ops , and application teams to prioritize backlog items, deliver enhancements, and keep the platform aligned to enterprise needs.
• Support ongoing improvements to platform reliability, automation, user experience, and operational support processes.

• Hands‑on production support experience for enterprise applications, including troubleshooting, patching, monitoring, release support, and incident response.
• Experience supporting Linux and Windows environments, with strong RHEL administration and shell scripting skills.
• Experience supporting containerized applications and microservices, preferably on Open Shift or similar Kubernetes‑based platforms.
• Experience with MySQL or similar relational databases, including query troubleshooting, performance review, data validation, backup awareness, and restore support.
• Development experience with JavaScript, Go, and shell scripting for application support, automation, integrations, and service enhancements.
• Experience integrating applications with CI/CD and source control platforms such as Bitbucket, Azure Dev Ops, Git Hub Enterprise, Jenkins, or similar tools.
• Ability to troubleshoot pipeline integrations, service endpoints, API calls, failed jobs,…