Job Summary
The DevSecOps Senior Engineer is an intermediate-level position responsible for designing, implementing, and securing application delivery pipelines in coordination with development and technology teams. The overall objective of this role is to champion and embed security principles and automated practices throughout the entire software development lifecycle (SDLC).
Responsibilities:
- Promote a DevSecOps culture of collaboration, open communication, and shared responsibility across development, security, and operations teams.
- Design, architect, and optimize resilient and secure automated build, test, and deployment (CI/CD) pipelines to ensure fast, reliable feedback loops.
- Integrate automated security testing (e.g., SAST, DAST, dependency scanning, container scanning) directly into CI/CD pipelines to identify vulnerabilities early.
- Lead and execute the migration of legacy CI/CD pipelines (e.g., Jenkins, UrbanCode uDeploy) to modern, containerized, and cloud-native platforms.
- Implement and manage Infrastructure as Code (IaC) to provision, configure, and scale secure and consistent application environments.
- Manage day-to-day Business-As-Usual (BAU) operations, including troubleshooting pipeline failures, resolving environment issues, and providing expert support to development teams.
- Participate in scheduled weekend release windows and provide deployment support to ensure smooth and secure production rollouts.
- Establish and manage comprehensive observability platforms with monitoring, logging, and alerting to provide real-time visibility into application health, performance, and security posture.
- Build platforms, templates, and documentation that empower developers with self-service capabilities to provision resources and deploy code safely within established guardrails.
Skills Required:
- Strong engineering mindset and a deep understanding of DevSecOps fundamentals: automation, security, reliability, continuous feedback, and ownership.
- Hands-on experience with modern CI/CD tools (e.g., Jenkins, Tekton) and strategic pipeline design.
- Proficiency in scripting and programming for building custom automation and integrations, with strong knowledge of Python and Bash.
- Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible.
- Strong conceptual and practical knowledge of containerization and orchestration technologies (Docker, Kubernetes, OpenShift).
- Hands-on experience with Helm for packaging and managing Kubernetes applications.
- Familiarity with integrating various security scanning tools (SAST, DAST, SCA) into automated pipelines.
- Strong analytical, systems-thinking, and problem-solving skills.
- Excellent communication, empathy, and collaboration skills, with an ability to mentor and work with diverse technical stakeholders.
Nice to Have:
- Experience with cloud-native architecture patterns (e.g., microservices, serverless, immutable infrastructure).
- Knowledge of major cloud platforms (AWS, GCP, Azure).
- Experience with modern observability and monitoring tools (e.g., Prometheus, Grafana, ELK Stack).
- Additional programming experience in languages such as Java.
- Solid understanding of networking, operating systems, and security fundamentals (e.g., OWASP Top 10, IAM, encryption).
Knowledge/Experience:
- 8+ years of overall IT experience in a DevOps, SRE, or Platform Engineering role, with a demonstrable focus on security.
- Proven experience migrating complex, legacy CI/CD systems to modern, scalable platforms.
- Strong experience in automating routine operational tasks and infrastructure management.
- Experience managing and monitoring the health, capacity, and cost-efficiency of infrastructure.
- Comprehensive knowledge of software engineering principles and secure coding practices.
- Knowledge of agile (Scrum, Kanban) development methodologies is a plus.
- A can-do attitude toward solving complex engineering problems and strong interpersonal and teamwork skills.
- Experience in the Finance Industry is a plus.
- Experience with all phases of the Software Development Life Cycle (SDLC).
Qualifications:
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
------------------------------------------------------
Job Family Group: Technology------------------------------------------------------
Job Family:Applications Development------------------------------------------------------
Time Type:Full time------------------------------------------------------
Most Relevant Skills Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
Skills Required
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience
- 8+ years of overall IT experience in DevOps, SRE, or Platform Engineering with a focus on security
- Experience designing and managing CI/CD pipelines
- Experience with Jenkins or Tekton
- Strong Python and Bash scripting or programming experience
- Experience with Terraform or Ansible for Infrastructure as Code
- Experience with Docker, Kubernetes, and OpenShift
- Experience with Helm for Kubernetes application management
- Experience integrating SAST, DAST, SCA, dependency, and container scanning into pipelines
- Experience migrating complex legacy CI/CD systems to modern scalable platforms
- Experience automating operational tasks and infrastructure management
- Experience managing infrastructure health, capacity, and cost efficiency
- Knowledge of software engineering principles, secure coding practices, and the SDLC
- Strong analytical, systems-thinking, problem-solving, communication, collaboration, and mentoring skills
- Experience with cloud-native architecture patterns
- Knowledge of AWS, GCP, or Azure
- Experience with Prometheus, Grafana, or ELK Stack
- Additional programming experience with Java
- Knowledge of networking, operating systems, OWASP Top 10, IAM, and encryption
- Knowledge of Scrum or Kanban methodologies
- Experience in the finance industry
Citi Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Citi and has not been reviewed or approved by Citi.
-
Healthcare Strength — Health coverage is described as comprehensive and reliable, with multiple medical, dental, vision, prescription, and mental-health options. Wellness programs, counseling, and preventive resources further reinforce health support.
-
Retirement Support — Retirement planning is viewed as a standout, with dollar-for-dollar matching up to 6% and, in some cases, an additional fixed contribution. These elements are positioned as competitive features of the total rewards package.
-
Parental & Family Support — Family-support programs include parental leave, childcare and eldercare resources, backup-care assistance, and educational support. Part-time employees in some areas also access standard health and wellness benefits.
Citi Insights
What We Do
Citi's mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Our core activities are safeguarding assets, lending money, making payments and accessing the capital markets on behalf of our clients. We have 200 years of experience helping our clients meet the world's toughest challenges and embrace its greatest opportunities. We are Citi, the global bank – an institution connecting millions of people across hundreds of countries and cities.








.png)