DevOps Engineer II

DevOps Engineer II in Charlotte, North Carolina Posted 03/25/22

• Top 25 U.S. digital financial services company committed to developing award-winning technology and services.
• Named one of the top three fastest-growing banking brands in the U.S. in 2020.
• Offers a full suite of products including mortgage lending, personal lending, and a variety of deposit and other banking products (savings, money-market, and checking accounts, certificates of deposit (CDs), and individual retirement accounts (IRAs)), self-directed and investment-advisory services, and capital for equity sponsors and middle-market companies.
• Where permitted by applicable law, must have received or be willing to receive the COVID-19 vaccine by date of hire to be considered.

• Fast paced, highly collaborative, teamwork-oriented environment
• Make an immediate impact in this high visibility role
• Ability to drive change within the organization with a focus on advancement in technology and programs
• Top-notch leadership committed to developing people

• Work with application development teams to ensure that the vulnerability detection, false positive analysis, and gating process is implemented appropriately
• Aid with the remediation of vulnerabilities identified during initial onboarding to the security CI/CD pipeline
• Build security into the automation provisioning cloud resources through Infrastructure-as-Code tooling such as Terraform, CloudFormation, AWS CDK, etc.
• Coach teams on Tooling, CI/CD, Security concepts and Infrastructure Automation
• Partner with Development teams to ensure coding standards are in alignment with DevOps practices with respect to Tools, Standards and Security

• BA/BS Degree in Computer Science or related technical discipline, or equivalent practical experience.
• 3+ years of experience developing software using a modern programming language (e.g. Java, Python, JavaScript, Go, Ruby etc.), and experience developing and integrating RESTful APIs.
• Security automation experience developing, integrating, and automating security in CI/CD pipelines
• Experience working with cloud native container technologies including Docker, Kubernetes and/or Serverless
• Experience with OOP concepts and development patterns
• Ability to perform peer review of code for security analysis and train application teams on the process.
• Able to communicate complex and technical issues to security-technical and non-technical audiences, verbally and in-writing.
• Experience implementing security tools into established CI/CD pipelines (e.g. Jenkins, GitLab etc.)
• Working knowledge of a range of security-related subjects such as threat modeling, data protection, application security, and vulnerability management.
• Experience with serverless deployments.
• Experience applying the Open Web Application Security Project (OWASP) Top Ten to web application design and code
• Extensive experience with Jenkins, GitLab, Bitbucket, Kubernetes/OpenShift , AWS
• Implemented and managed build lifecycle through CI/CD (Jenkins, GitLab)
• Implemented containerized solutions using Docker/Kubernetes/OpenShift
• An understanding of best practices around source control, specifically Git, GitFlow, branching, versioning, and naming conventions.
• Experience with repository managers with preference for Nexus, Quay
• Extensive experience with Infrastructure as code, either CloudFormation or Terraform preferred
• Experience working on Agile Scrum teams
• Automation mind-set - an innate drive to continuously look for ways to automate existing processes