Senior DevOps Engineer - Assistant Vice President

Job Description: DevSecOps Engineer

Job Summary

The DevSecOps Senior Engineer is an intermediate-level position responsible for designing, implementing, and securing application delivery pipelines in coordination with development and technology teams. The overall objective of this role is to champion and embed security principles and automated practices throughout the entire software development lifecycle (SDLC).

Responsibilities:

• Promote a DevSecOps culture of collaboration, open communication, and shared responsibility across development, security, and operations teams.
• Design, architect, and optimize resilient and secure automated build, test, and deployment (CI/CD) pipelines to ensure fast, reliable feedback loops.
• Integrate automated security testing (e.g., SAST, DAST, dependency scanning, container scanning) directly into CI/CD pipelines to identify vulnerabilities early.
• Lead and execute the migration of legacy CI/CD pipelines (e.g., Jenkins, UrbanCode uDeploy) to modern, containerized, and cloud-native platforms.
• Implement and manage Infrastructure as Code (IaC) to provision, configure, and scale secure and consistent application environments.
• Manage day-to-day Business-As-Usual (BAU) operations, including troubleshooting pipeline failures, resolving environment issues, and providing expert support to development teams.
• Participate in scheduled weekend release windows and provide deployment support to ensure smooth and secure production rollouts.
• Establish and manage comprehensive observability platforms with monitoring, logging, and alerting to provide real-time visibility into application health, performance, and security posture.
• Build platforms, templates, and documentation that empower developers with self-service capabilities to provision resources and deploy code safely within established guardrails.

Skills Required:

• Strong engineering mindset and a deep understanding of DevSecOps fundamentals: automation, security, reliability, continuous feedback, and ownership.
• Hands-on experience with modern CI/CD tools (e.g., Jenkins, Tekton) and strategic pipeline design.
• Proficiency in scripting and programming for building custom automation and integrations, with strong knowledge of Python and Bash.
• Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible.
• Strong conceptual and practical knowledge of containerization and orchestration technologies (Docker, Kubernetes, OpenShift).
• Hands-on experience with Helm for packaging and managing Kubernetes applications.
• Familiarity with integrating various security scanning tools (SAST, DAST, SCA) into automated pipelines.
• Strong analytical, systems-thinking, and problem-solving skills.
• Excellent communication, empathy, and collaboration skills, with an ability to mentor and work with diverse technical stakeholders.

Nice to Have:

• Experience with cloud-native architecture patterns (e.g., microservices, serverless, immutable infrastructure).
• Knowledge of major cloud platforms (AWS, GCP, Azure).
• Experience with modern observability and monitoring tools (e.g., Prometheus, Grafana, ELK Stack).
• Additional programming experience in languages such as Java.
• Solid understanding of networking, operating systems, and security fundamentals (e.g., OWASP Top 10, IAM, encryption).

Knowledge/Experience:

• 8+ years of overall IT experience in a DevOps, SRE, or Platform Engineering role, with a demonstrable focus on security.
• Proven experience migrating complex, legacy CI/CD systems to modern, scalable platforms.
• Strong experience in automating routine operational tasks and infrastructure management.
• Experience managing and monitoring the health, capacity, and cost-efficiency of infrastructure.
• Comprehensive knowledge of software engineering principles and secure coding practices.
• Knowledge of agile (Scrum, Kanban) development methodologies is a plus.
• A can-do attitude toward solving complex engineering problems and strong interpersonal and teamwork skills.
• Experience in the Finance Industry is a plus.
• Experience with all phases of the Software Development Life Cycle (SDLC).

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Applications Development

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.