Job Summary
The DevSecOps Senior Engineer is an intermediate-level position responsible for designing, implementing, and securing application delivery pipelines in coordination with development and technology teams. The overall objective of this role is to champion and embed security principles and automated practices throughout the entire software development lifecycle (SDLC).
Responsibilities:
- Promote a DevSecOps culture of collaboration, open communication, and shared responsibility across development, security, and operations teams.
- Design, architect, and optimize resilient and secure automated build, test, and deployment (CI/CD) pipelines to ensure fast, reliable feedback loops.
- Integrate automated security testing (e.g., SAST, DAST, dependency scanning, container scanning) directly into CI/CD pipelines to identify vulnerabilities early.
- Lead and execute the migration of legacy CI/CD pipelines (e.g., Jenkins, UrbanCode uDeploy) to modern, containerized, and cloud-native platforms.
- Implement and manage Infrastructure as Code (IaC) to provision, configure, and scale secure and consistent application environments.
- Manage day-to-day Business-As-Usual (BAU) operations, including troubleshooting pipeline failures, resolving environment issues, and providing expert support to development teams.
- Participate in scheduled weekend release windows and provide deployment support to ensure smooth and secure production rollouts.
- Establish and manage comprehensive observability platforms with monitoring, logging, and alerting to provide real-time visibility into application health, performance, and security posture.
- Build platforms, templates, and documentation that empower developers with self-service capabilities to provision resources and deploy code safely within established guardrails.
Skills Required:
- Strong engineering mindset and a deep understanding of DevSecOps fundamentals: automation, security, reliability, continuous feedback, and ownership.
- Hands-on experience with modern CI/CD tools (e.g., Jenkins, Tekton) and strategic pipeline design.
- Proficiency in scripting and programming for building custom automation and integrations, with strong knowledge of Python and Bash.
- Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible.
- Strong conceptual and practical knowledge of containerization and orchestration technologies (Docker, Kubernetes, OpenShift).
- Hands-on experience with Helm for packaging and managing Kubernetes applications.
- Familiarity with integrating various security scanning tools (SAST, DAST, SCA) into automated pipelines.
- Strong analytical, systems-thinking, and problem-solving skills.
- Excellent communication, empathy, and collaboration skills, with an ability to mentor and work with diverse technical stakeholders.
Nice to Have:
- Experience with cloud-native architecture patterns (e.g., microservices, serverless, immutable infrastructure).
- Knowledge of major cloud platforms (AWS, GCP, Azure).
- Experience with modern observability and monitoring tools (e.g., Prometheus, Grafana, ELK Stack).
- Additional programming experience in languages such as Java.
- Solid understanding of networking, operating systems, and security fundamentals (e.g., OWASP Top 10, IAM, encryption).
Knowledge/Experience:
- 8+ years of overall IT experience in a DevOps, SRE, or Platform Engineering role, with a demonstrable focus on security.
- Proven experience migrating complex, legacy CI/CD systems to modern, scalable platforms.
- Strong experience in automating routine operational tasks and infrastructure management.
- Experience managing and monitoring the health, capacity, and cost-efficiency of infrastructure.
- Comprehensive knowledge of software engineering principles and secure coding practices.
- Knowledge of agile (Scrum, Kanban) development methodologies is a plus.
- A can-do attitude toward solving complex engineering problems and strong interpersonal and teamwork skills.
- Experience in the Finance Industry is a plus.
- Experience with all phases of the Software Development Life Cycle (SDLC).
Qualifications:
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
------------------------------------------------------
Job Family Group: Technology------------------------------------------------------
Job Family:Applications Development------------------------------------------------------
Time Type:Full time------------------------------------------------------
Most Relevant Skills Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
Skills Required
- 8+ years of overall IT experience in DevOps, SRE, or Platform Engineering with a demonstrable focus on security
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience
- Hands-on experience with CI/CD tools such as Jenkins or Tekton
- Strong knowledge of Python and Bash scripting and programming
- Experience with Infrastructure as Code tools such as Terraform or Ansible
- Strong practical knowledge of Docker, Kubernetes, and OpenShift
- Hands-on experience with Helm for Kubernetes application management
- Experience integrating SAST, DAST, and SCA security scanning into automated pipelines
- Experience migrating complex legacy CI/CD systems to modern scalable platforms
- Experience automating operational tasks and infrastructure management
- Experience managing and monitoring infrastructure health, capacity, and cost efficiency
- Knowledge of software engineering principles, secure coding practices, and the full SDLC
- Strong analytical, systems-thinking, problem-solving, communication, collaboration, and mentoring skills
- Experience with cloud-native architecture patterns such as microservices, serverless, or immutable infrastructure
- Knowledge of AWS, GCP, or Azure
- Experience with Prometheus, Grafana, ELK Stack, or similar observability tools
- Additional programming experience with Java
- Understanding of networking, operating systems, OWASP Top 10, IAM, and encryption
- Knowledge of Agile methodologies including Scrum or Kanban
- Experience in the finance industry
What We Do
Citigroup is a global diversified financial services holding company serving consumers, corporations, governments and institutions. It provides consumer banking and credit, corporate and investment banking, securities brokerage, trade and securities services, and wealth management. Operating across nearly 160 countries and jurisdictions, Citi aims to be a leading partner for institutions with cross-border needs, a global wealth manager, and a valued personal bank in the United States.
.png){kind=logo}
