Principal Cloud Engineer (security Platform - Certificate Management)
Fidelity
Principal Cloud Engineer (Security Platform - Certificate Management)
As a Principal Cloud Engineer within Security Platforms with deep expertise in Software Development, you will help develop the next generation Security Platform providing critical data security to Fidelity's vast business applications. You will design and implement solutions to improve automation, monitoring, and instrumentation for the management and security of Public Key Infrastructure (PKI) at Fidelity. This role will offer a great opportunity to participate in a team at the center of encryption by creating and developing of PKI. You will work with multiple teams, leading technology, and be part of an exciting team of Platform Security experts involved in ground breaking Cybersecurity work and crypto agility.
What you will do
- Lead the development, and deployment of applications built using Java and GoLang (Python is a plus).
- Deliver on next-gen Certificate Management / Public Key Infrastructure (PKI) systems.
- Drive automation and build CI / CD pipelines.
- Implement monitoring and observability to support application telemetry and metrics.
- Partner with other developers to manage code repositories, code security, and lifecycle.
- Conduct code reviews, threat modeling, and security audits to identify and mitigate vulnerabilities.
- Develop with security in mind.
- Provide hands-on operational support to the Certificate Management team as needed.
- Mentor/Coach and guide a team of developers, fostering a culture of secure coding practices and technical excellence.
- Stay current with advancements in PKI, Software Engineering frameworks, and cybersecurity threats.
The Expertise and Skills You Bring
- 7+ years of experience in software development, with at least 3 years in a technical leadership role.
- 7+ years of experience in a distributed IT Engineering and/or support function.
- Strong proficiency in Java and GoLang (Python a plus)
- DevOps experience and a strong understanding of release management including CI/CD pipeline creation and automation (git/Jenkins/Python/CloudFormation/Terraform).
- Experience with AWS, Azure, or other public cloud provider.
- Experience with API Management.
- Experience working in an Agile team and with Agile process.
- Knowledge of Micro-services design and implementation.
- Knowledge of Kubernetes and Containerization.
- Knowledge of Cybersecurity a plus.
- Experience with Public Key Infrastructure (PKI) preferred.
- Experience with certificate management and cryptography preferred.
- Available to join an on-call production support rotation as needed.
The Certificate Management team, part of Fidelity's Security Platform, provides encryption and Data Security services supporting Fidelity Investments applications. A core team within Fidelity Architecture and Engineering, the team provides the security to ensure that critical business systems have the encryption and PKI resources they need for complete data security. We are a team of Cybersecurity Engineers passionate about security and engineering, working with the latest technology and security systems, and building crypto agile systems.