Principal Engineer II - DevOps Development Architecture

Overview

Job Title: Principal Engineer II
- Dev Ops Development Architecture

Location: Block 23

The Principal Engineer II is a senior technical leader with the Enterprise Development Architecture/Dev Ops, responsible for the administration, security integration, and continuous improvement of the organization's development, testing and Dev Ops capabilities. This role has a strong focus on secure development practices (Dev Sec Ops ) while supporting the full breadth of the software development lifecycle.

As a Principal Engineer II for this domain, this role will partner with engineering teams, security, architecture and risk teams to embed security controls into development workflows, ensure tooling is operating according to standards, and drive adoption of industry best practices. This role is responsible for advancing the security capability to develop platforms & services that enable automation, robust testing, & a 'shift left' security mentality as it relates to developing, testing, & deploying application code that application teams can leverage.

The role also serves as a mentor and technical coach across IT, elevating engineering maturity and security awareness organization-wide.

This role requires a deep technical understanding in the areas of:
Dev Ops platforms, CI/CD pipelines and integrations, Microsoft Azure Dev Ops, Git Hub Enterprise, static/dynamic application security testing, software composition analysis, development frameworks, and configuring and deploying software across multiple environments. Additionally, strong strategic & critical thinking skills as well as communication and collaboration skills are required to develop relationships with multiple delivery teams, business partners, and IT leadership.

• Administer, secure, and optimize enterprise development platforms and application security tooling (Azure Dev Ops, Git Hub Enterprise, Sonar Qube, Invicti, and Git Hub Advanced Security).
• Design and maintain integrations across development, CI/CD, security and workflows tools to ensure seamless and auditable pipelines.
• Embed security controls and automation across CI/CD pipelines consistent with Dev Sec Ops  principles.
• Partner with application security and risk teams to operationalize policies for Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Provide technical leadership across all stages of the SDLC, including design, development, testing, release and maintenance.
• Define and promote best practices, technology standards, and engineering standards for the Development Architecture and Dev Ops team.
• Develop and delivery training, documentation, and hand-on enablement for development and security tooling.
• Collaborate with Architecture, Infrastructure, Security and Risk teams to align tooling with enterprise standards.
• Act as a trusted advisor and mentor development teams by providing guidance on secure coding practices, pipeline security, modern Dev Ops practices and assist in remediation of security findings.
• Supports audits and regulatory reviews by providing evidence, documentation, and tool transparency.
• Evaluate new tools and capabilities, providing recommendations based on risk, scalability, and business value.

• 10+ years of experience in software engineering, Dev Ops, or platform engineering roles.
• Bachelor's degree in related field required;
  Masters or MBA in related field preferred.
• Strong hands-on experience administering enterprise development platforms such as Azure Dev Ops and/or Git Hub Enterprise.
• Proven expertise with application security tooling, including SAST, DAST, and SCA solutions. (Sonar Qube, Invicti, Git Hub Advanced Security preferred)
• Deep understanding of the software development lifecycle (SDLC) and Dev Sec Ops  best practices.
• Proficiency in Git including branching strategies and pull request best practices.
• The Objective mindset that can think 'enterprise first' and remain unbiased toward any specific technology or vendor choice, with decisions made based on data, analysis, & POC results.
• Advanced to expert experience in leading cross-functional teams and managing multiple projects simultaneously.
  
  Demonstrated ability to mentor, train, and influence engineers across multiple teams.
• Advanced to expert familiarity with the capability model across IT and the applications and infrastructures available for engagement in solutioning across the bank to develop results that leverage existing capabilities in addition to implementing new solutions when required.
• Expert documentation and communication skills, with the ability to translate complex technical topics for broad audiences.
• Experience in the following tools and technologies:
  Atlassian Confluence, Lucid Chart, Ansible, Terraform, Kubernetes is preferred.
• Advanced to expert knowledge with regulatory frameworks such as SOX, FFIEC, NIST, or similar is preferred.
• Advanced knowledge operating in a regulated or financial services…