Company Name: FMR LLC d/b/a Fidelity Investments
Job Title: Principal Systems Engineer
Work Site: 1-2 Destiny Way, Westlake, TX 76262


Position Description:


Writes scripts for software process automations using Bash and Python. Deploys and operates production software applications within public cloud environments -- Amazon Web Services (AWS) and Azure. Builds automation pipelines using Continuous Integration and Continuous Delivery (CI/CD) tools. Supports technical architecture security using container orchestration technologies and containerization orchestration tools – Docker, Azure Kubernetes Service (AKS), and Amazon Elastic Kubernetes Service (EKS). Develops improvements to container security in both private and public cloud environments using Cloud Workload Protection Platform tools -- Qualys and Cloud Security Posture Management.


Primary Responsibilities:

· Improves application security experiences using Penetration Testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF).

· Leads the development and support of software solutions to reduce security risks associated with the container space.

· Reduces container security risks through automated detection, monitoring, and notification at an enterprise-scale.

· Confers with systems analysts, engineers, programmers, and others to design systems and to obtain information on project limitations and capabilities, performance requirements and interfaces.

· Leads the development of software system testing or validation procedures, programming, or documentation.

· Assists application development teams in adopting container security controls and in remediates container security issues.

· Develops and maintains Cloud Infrastructure as Code (IaC) to deploy and manage container security applications in cloud, including managing compute resources, access controls, monitoring, and networking.

· Develops and supports improvements to container security in both private and public cloud.

· Drives container security compliance by assisting in reporting and governance.


Education and Experience:


Bachelor’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and five (5) years of experience as a Principal Systems Engineer (or closely related occupation) leading development of strategies to automate application deployments to cloud developing container orchestration solutions.

Or, alternatively, Master’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and three (3) years of experience as a Principal Systems Engineer (or closely related occupation) leading development of strategies to automate application deployments to cloud developing container orchestration solutions.


Skills and Knowledge:


Candidate must also possess:


-Demonstrated Expertise (“DE”) gathering and maintaining requirements with business and technology partners within a Cloud computing and cybersecurity environment; evaluating vendor/cloud products against gathered requirements by integrating products with Artifactory, AWS/AZURE, AKS/EKS; and recording collated information and results using JIRA and Confluence.
-DE designing container security integration patterns and procedures for Cloud (AWS and Azure) using, Cloud Security Posture Management (CSPM) tools, Cloud API, Cloud VM Images, and Kubernetes; and developing reporting process from APIs - Python, Linux Shell Scripting, DevOps, Helm and CFT/Terraform.
-DE providing technology leadership during implementation and ensuring highly scalable Continuous Integration and Continuous Deployment (CI/CD) pipelines using Infrastructure as Code (IaC), DevOps tools and scripting; reviewing and confirming requirements are met by team and mentoring team to develop automation practices; releasing products into production (monitoring and maintaining applications) using Docker, Python, Shell, Helm and CFT /Terraform; and coordinating release activities.
-DE coordinating, deploying, testing, and validating applications on public and private cloud using Kubernetes, Docker, Identity Governance and Access Management (IAM), Network, Storage and CFT /Terraform.


For full job details and to apply, please visit https://jobs.fidelity.com and search for job number 2093561