Senior Markets DevSecOps Engineer (Hybrid)

The Senior DevSecOps Engineer is a senior level position responsible for establishing and implementing new or revised application systems and programs in line with the Markets Engineering and Architecture Practices team's goals. The overall objective of this role is to lead applications systems analysis, programming activities and architecture decisions.

Main responsibilities:

• Design, development and support of Gradle / Maven / npm / PyPi plugins to perform SBOM collection and SCA scanning
• Design, develop and support of REST API microservices using Java 17, Go, Python, deploy them to OpenShift ECS clusters and VMs
• Implement Synopsis BlackDuck, Snyk, OWASP DependencyTrack, Jfrog Artifactory and other integration APIs
• Work with Jenkins, TeamCity, and Tekton CI pipelines to implement and maintain our DevSecOps toolchain
• Design, architect and implement new ideas and services for our developer productivity toolset
• Interact with internal customers (developers) from all around the world to help them with integration of our tools and services to their development processes
• Plan capacity and order infrastructure for "natural" growth
• Hire, lead and mentor a small team of fellow DevSecOps engineers

Required skills:

• Strong experience with Java software development of web based applications
• Deep knowledge of Synopsis BlackDuck API, Snyk API, Checkmarx and other SCA / vulnerability and static code analysis tools
• Decent experience with JavaScript programming (NodeJS) and Golang
• Understanding of DevSecOps toolchains and concepts (Shift Left, SCA, SAST)
• Deep hands-on experience with Linux including Bash, containerisation tools such as Docker/Podman, Kubernetes/OpenShift

Skills that would be a huge plus:

• Deep-dive experience with PostgreSQL
• Experience with Cyber Security
• DevOps Engineer / SRE type of job experience
• Technology stack: Java/Gradle/Maven, JavaScript, npm/yarn, Go, python/PyPi Jenkins/TeamCity/Tekton, BitBucket, Artifactory, OpenShift/Kubernetes, uDeploy, HashiCorp Vault/CyberArk, PostgreSQL

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

-------------------------------------------------
Job Family Group:
Technology -------------------------------------------------
Job Family:
Applications Development ------------------------------------------------------
Time Type:
Full time ------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .

View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting