Principal Engineer II - DevOps Development Architecture

Job Title:

Principal Engineer II - DevOps Development Architecture

Location:

Block 23

What you'll do:

The Principal Engineer II is a senior technical leader with the Enterprise Development Architecture/DevOps, responsible for the administration, security integration, and continuous improvement of the organization’s development, testing and DevOps capabilities. This role has a strong focus on secure development practices (DevSecOps) while supporting the full breadth of the software development lifecycle.

As a Principal Engineer II for this domain, this role will partner with engineering teams, security, architecture and risk teams to embed security controls into development workflows, ensure tooling is operating according to standards, and drive adoption of industry best practices. This role is responsible for advancing the security capability to develop platforms & services that enable automation, robust testing, & a ‘shift left’ security mentality as it relates to developing, testing, & deploying application code that application teams can leverage. The role also serves as a mentor and technical coach across IT, elevating engineering maturity and security awareness organization-wide.

This role requires a deep technical understanding in the areas of: DevOps platforms, CI/CD pipelines and integrations, Microsoft Azure DevOps, GitHub Enterprise, static/dynamic application security testing, software composition analysis, development frameworks, and configuring and deploying software across multiple environments. Additionally, strong strategic & critical thinking skills as well as communication and collaboration skills are required to develop relationships with multiple delivery teams, business partners, and IT leadership.

• Administer, secure, and optimize enterprise development platforms and application security tooling (Azure DevOps, GitHub Enterprise, SonarQube, Invicti, and GitHub Advanced Security).
• Design and maintain integrations across development, CI/CD, security and workflows tools to ensure seamless and auditable pipelines.
• Embed security controls and automation across CI/CD pipelines consistent with DevSecOps principles.
• Partner with application security and risk teams to operationalize policies for Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Provide technical leadership across all stages of the SDLC, including design, development, testing, release and maintenance.
• Define and promote best practices, technology standards, and engineering standards for the Development Architecture and DevOps team.
• Develop and delivery training, documentation, and hand-on enablement for development and security tooling.
• Collaborate with Architecture, Infrastructure, Security and Risk teams to align tooling with enterprise standards.
• Act as a trusted advisor and mentor development teams by providing guidance on secure coding practices, pipeline security, modern DevOps practices and assist in remediation of security findings.
• Supports audits and regulatory reviews by providing evidence, documentation, and tool transparency.
• Evaluate new tools and capabilities, providing recommendations based on risk, scalability, and business value.

What you'll need:

• 10+ years of experience in software engineering, DevOps, or platform engineering roles.
• Bachelor's degree in related field required; Masters or MBA in related field preferred.
• Strong hands-on experience administering enterprise development platforms such as Azure DevOps and/or GitHub Enterprise.
• Proven expertise with application security tooling, including SAST, DAST, and SCA solutions. (SonarQube, Invicti, GitHub Advanced Security preferred)
• Deep understanding of the software development lifecycle (SDLC) and DevSecOps best practices.
• Proficiency in Git including branching strategies and pull request best practices.
• The Objective mindset that can think ‘enterprise first’ and remain unbiased toward any specific technology or vendor choice, with decisions made based on data, analysis, & POC results.
• Advanced to expert experience in leading cross-functional teams and managing multiple projects simultaneously. Demonstrated ability to mentor, train, and influence engineers across multiple teams.
• Advanced to expert familiarity with the capability model across IT and the applications and infrastructures available for engagement in solutioning across the bank to develop results that leverage existing capabilities in addition to implementing new solutions when required.
• Expert documentation and communication skills, with the ability to translate complex technical topics for broad audiences.