Senior DevSecOps Engineer (Remote NC, TX, AZ, GA)

First Citizens Bank is a financial institution seeking a Senior DevSecOps Engineer for a remote role. The position is responsible for overseeing all phases of data processing system projects, leading technical efforts, and ensuring the security and reliability of software development and infrastructure.

Responsibilities:

• CI/CD implementation - Develop, implement, and maintain CICD pipelines to automate the build, test, and deployment process. Standardize and ensure adoption of the process
• Infrastructure management - Automate the process to provision, configure, and manage infrastructure on cloud platforms. This includes using "infrastructure as code" tools like Terraform and Ansible to ensure consistency and scalability
• Automation - Identify and automate manual processes to improve efficiency and reduce errors. This includes writing scripts for various operational and development tasks
• System monitoring and reliability - Implement and manage monitoring, logging, and alerting tools to track system performance and availability. They also perform root cause analysis and troubleshoot production issues
• Security as a code - Ensure the security of the software development pipeline and infrastructure by implementing security best practices and tools throughout the lifecycle
• Collaboration - Work closely with development, QA, Application Security, Governance and IT teams to improve the overall delivery process
• Containerization and orchestration - Implement and manage containerization technologies like Docker and orchestration platforms such as Kubernetes
• System Enhancement - Performs a variety of actions that evaluate and improve department systems, processes, and applications. Utilizes programming specifications to construct modules, develop testing methods, and design materials. Provides new feature time estimates for system changes and assists in implementing modifications. Executes test plans to validate application functions as designed
• Analysis - Collects data related to user requests and determines scope, time estimates, and system impacts. Inspects business specifications, programming specifications, coding, test plans, documentation, and implementation plans for accuracy
• Business Support - Provides technical support to production systems by addressing reported issues, anticipating maintenance requirements, and ensuring functionality for end user needs. Drafts documentation to be used for system, end user, and operational purposes, including technical specifications and application designs
• Technical Expertise - Responsible for complex involvement in the software development life cycle including the creation, enhancement, implementation, and evaluation of software. Serves as a technical resource for management, associates, and business units
• On-call Support - Provides 24/7 on-call support via rotations

Requirements:

• Bachelor's Degree and 4 years of experience in Software application development and maintenance OR High School Diploma or GED and 8 years of experience in Software application development and maintenance
• 8+ years of experience in DevOps, DevSecOps, Platform Engineering, Cloud Engineering, or related disciplines
• 6+ years of experience in architecting, developing, maintaining, and optimizing enterprise-scale CI/CD pipelines using GitLab
• 5+ years of experience in implementing DevSecOps practices, security controls, and automated compliance checks within CI/CD pipelines
• Experience in developing automation solutions using Python, Bash, and other scripting languages
• Knowledge in major tech stacks of modern application development
• Experience in developing build process for Java, .net, ios and android, and automating deployment process for Openshift and VM
• Knowledge in AWS & Azure is a plus
• Hands-on Experience in Linux environments (RHEL), Ansible, writing playbooks to automate tasks, deploy artifacts, configuring monitoring tools (AppDynamics, Dynatrace), tools upgrade, patching and migrations, security vulnerability remediations
• Experience in Automating deployment and release processes across OpenShift, Kubernetes, Docker, virtual machines, and cloud environments
• Experience in implementing Infrastructure as Code (IaC) solutions using Terraform for cloud infrastructure provisioning and DevSecOps tool deployments
• Deep knowledge in security scans and experience in implementing them as part of the CICD pipeline
• Experience in working with cross functional teams, including App security, Application engineering, Quality automation engineering, and Infrastructure teams to integrate security and automation throughout the software development lifecycle
• Experience in migrating applications from one SCM to another
• Working experience on Docker, OpenShift/Kubernetes/Docker Swarm
• Implementation, management, and administration of Enterprise systems tools and processes - AWS stack, JIRA, Confluence, GitLab, Jenkins, Azure DevOps, Nexus, Artifactory, Snyk, SonarQube