Senior DevOps Engineer - Assistant Vice President

DevSecOps Engineer Job Summary The DevSecOps Senior Engineer is an intermediate-level position responsible for designing, implementing, and securing application delivery pipelines in coordination with development and technology teams.

Responsibilities

• The overall objective of this role is to champion and embed security principles and automated practices throughout the entire software development lifecycle (SDLC).
• Promote a DevSecOps culture of collaboration, open communication, and shared responsibility across development, security, and operations teams.
• Design, architect, and optimize resilient and secure automated build, test, and deployment (CI/CD) pipelines to ensure fast, reliable feedback loops.
• Integrate automated security testing (e.g., SAST, DAST, dependency scanning, container scanning) directly into CI/CD pipelines to identify vulnerabilities early.
• Lead and execute the migration of legacy CI/CD pipelines (e.g., Jenkins, UrbanCode uDeploy) to modern, containerized, and cloud-native platforms.
• Implement and manage Infrastructure as Code (IaC) to provision, configure, and scale secure and consistent application environments.
• Manage day-to-day Business-As-Usual (BAU) operations, including troubleshooting pipeline failures, resolving environment issues, and providing expert support to development teams.
• Participate in scheduled weekend release windows and provide deployment support to ensure smooth and secure production rollouts.
• Establish and manage comprehensive observability platforms with monitoring, logging, and alerting to provide real-time visibility into application health, performance, and security posture.
• Build platforms, templates, and documentation that empower developers with self-service capabilities to provision resources and deploy code safely within established guardrails.

Requirements

• Strong engineering mindset and a deep understanding of DevSecOps fundamentals: automation, security, reliability, continuous feedback, and ownership.
• Hands-on experience with modern CI/CD tools (e.g., Jenkins, Tekton) and strategic pipeline design.
• Proficiency in scripting and programming for building custom automation and integrations, with strong knowledge of Python and Bash.
• Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible.
• Strong conceptual and practical knowledge of containerization and orchestration technologies (Docker, Kubernetes, OpenShift).
• Hands-on experience with Helm for packaging and managing Kubernetes applications.
• Familiarity with integrating various security scanning tools (SAST, DAST, SCA) into automated pipelines.
• Strong analytical, systems-thinking, and problem-solving skills.
• Excellent communication, empathy, and collaboration skills, with an ability to mentor and work with diverse technical stakeholders.
• 8+ years of overall IT experience in a DevOps, SRE, or Platform Engineering role, with a demonstrable focus on security.
• Proven experience migrating complex, legacy CI/CD systems to modern, scalable platforms.
• Strong experience in automating routine operational tasks and infrastructure management.
• Experience managing and monitoring the health, capacity, and cost-efficiency of infrastructure.
• Comprehensive knowledge of software engineering principles and secure coding practices.
• A can-do attitude toward solving complex engineering problems and strong interpersonal and teamwork skills.
• Experience with all phases of the Software Development Life Cycle (SDLC).
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
• This job description provides a high-level review of the types of work performed.

Preferred

• Experience with cloud-native architecture patterns (e.g., microservices, serverless, immutable infrastructure).
• Knowledge of major cloud platforms (AWS, GCP, Azure).
• Experience with modern observability and monitoring tools (e.g., Prometheus, Grafana, ELK Stack).
• Additional programming experience in languages such as Java.
• Solid understanding of networking, operating systems, and security fundamentals (e.g., OWASP Top 10, IAM, encryption).
• Knowledge of agile (Scrum, Kanban) development methodologies is a plus.
• Experience in the Finance Industry is a plus.

Other job-related duties may be assigned as required. ------------------------------------------------------ Job Family Group: Technology ------------------------------------------------------ Job Family: Applications Development ------------------------------------------------------ Time Type: Full time ------------------------------------------------------ Most Relevant Skills Please see the requirements listed above. ------------------------------------------------------ Other Relevant Skills For complementary skills, please see above and/or contact the recruiter. ------------------------------------------------------ Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi . View Citi’s EEO Policy Statement and the Know Your Rights poster.