Principal Systems Engineer

Job Description:

Position Description:

Writes scripts for software process automations using Bash and Python. Deploys and operates production software applications within public cloud environments -- Amazon Web Services (AWS) and Azure. Builds automation pipelines using Continuous Integration and Continuous Delivery (CI/CD) tools. Supports technical architecture security using container orchestration technologies and containerization orchestration tools – Docker, Azure Kubernetes Service (AKS), and Amazon Elastic Kubernetes Service (EKS). Develops improvements to container security in both private and public cloud environments using Cloud Workload Protection Platform tools -- Qualys and Cloud Security Posture Management.

Primary Responsibilities:

• Improves application security experiences using Penetration Testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF).
• Leads the development and support of software solutions to reduce security risks associated with the container space.
• Reduces container security risks through automated detection, monitoring, and notification at an enterprise-scale.
• Confers with systems analysts, engineers, programmers, and others to design systems and to obtain information on project limitations and capabilities, performance requirements and interfaces.
• Leads the development of software system testing or validation procedures, programming, or documentation.
• Assists application development teams in adopting container security controls and in remediates container security issues.
• Develops and maintains Cloud Infrastructure as Code (IaC) to deploy and manage container security applications in cloud, including managing compute resources, access controls, monitoring, and networking.
• Develops and supports improvements to container security in both private and public cloud.
• Drives container security compliance by assisting in reporting and governance.

Education and Experience:

Bachelor’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and five (5) years of experience as a Principal Systems Engineer (or closely related occupation) leading development of strategies to automate application deployments to cloud developing container orchestration solutions.

Or, alternatively, Master’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and three (3) years of experience as a Principal Systems Engineer (or closely related occupation) leading development of strategies to automate application deployments to cloud developing container orchestration solutions.

Skills and Knowledge:

Candidate must also possess:

• Demonstrated Expertise (“DE”) gathering and maintaining requirements with business and technology partners within a Cloud computing and cybersecurity environment; evaluating vendor/cloud products against gathered requirements by integrating products with Artifactory, AWS/AZURE, AKS/EKS; and recording collated information and results using JIRA and Confluence.
• DE designing container security integration patterns and procedures for Cloud (AWS and Azure) using, Cloud Security Posture Management (CSPM) tools, Cloud API, Cloud VM Images, and Kubernetes; and developing reporting process from APIs - Python, Linux Shell Scripting, DevOps, Helm and CFT/Terraform.
• DE providing technology leadership during implementation and ensuring highly scalable Continuous Integration and Continuous Deployment (CI/CD) pipelines using Infrastructure as Code (IaC), DevOps tools and scripting; reviewing and confirming requirements are met by team and mentoring team to develop automation practices; releasing products into production (monitoring and maintaining applications) using Docker, Python, Shell, Helm and CFT /Terraform; and coordinating release activities.
• DE coordinating, deploying, testing, and validating applications on public and private cloud using Kubernetes, Docker, Identity Governance and Access Management (IAM), Network, Storage and CFT /Terraform.

#PE1M2

Certifications:

Company Overview

Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money.

Join Us

At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a top 10 Best Place to Work in 2024. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined.

Fidelity's working model blends the best of working offsite with maximizing time together in person to meet associate and business needs. Currently, most hybrid roles require associates to work onsite all business days of one assigned week per four-week period (beginning in September 2024, the requirement will be two full assigned weeks).

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation, detailed in this document, and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

We invite you to Find Your Fidelity at fidelitycareers.com.

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.