Trabajos devsecops en Westfield, New JerseyCrear alertas

Job Description Job Title: Application Security Tester / DevSecOps Lead Location: Berkeley Heights, NJ (onsite) Type: Contract Pay Rate: $70-$75 W2 " 10 years in Application Security / DevSecOps, with at least 2-3 years in a lead capacity. " Proven, hands-on experience implementing and enforcing SAST/DAST/SCA gates in CI/CD pipelines. " Direct experience with Fortify (SAST) in an enforcing/blocking configuration, ideally across multiple technology stacks. " Working knowledge of Sonatype (or equivalent SCA) and WebInspect (or equivalent DAST) in production pipelines. Experience: 10 Years Role Overview This is a hands-on DevSecOps Lead role responsible for owning and strengthening the security posture of the software delivery pipeline across three distinct technology stacks: modern cloud-native .NET Core / Azure AKS platform, legacy VB.NET / ASP.NET (.NET Framework 4.8) estate running on IIS, Core COBOL mainframe environment. The successful candidate will be responsible for configuring, tuning, and enforcing security controls within CI/CD pipelines, with direct accountability for transforming SCA, SAST, and DAST from advisory practices into mandatory, pipeline-blocking security gates across all three technology stacks. The role sits at the intersection of Application Security, DevOps Engineering, and Mainframe Modernization, requiring the ability to influence and collaborate effectively with developers across diverse environments from Kubernetes-based microservices and cloud-native applications to traditional COBOL batch workloads and CL-driven mainframe processes. The ideal candidate will combine deep technical expertise with hands-on execution, driving secure-by-design practices while ensuring security controls are seamlessly integrated into the software delivery lifecycle without compromising engineering velocity. Key Responsibilities Enforce Security Gates Across All Stacks " Convert Fortify SAST from advisory/report-only mode to a blocking gate: Critical and High severity findings must fail the build for the Modern (.NET Core/AKS), Legacy (.NET/IIS), and Core COBOL (mainframe) pipelines. " Define and tune Fortify rulesets, filters, and issue-suppression policies per stack to minimize false positives while preserving enforcement integrity. " Drive the exception/waiver process for findings that cannot be remediated immediately (compensating controls, documented risk acceptance, expiry dates). Extend and Mature Security Tooling Coverage " Extend Sonatype SCA to the legacy IIS/.NET Framework 4.8 / VB.NET stack, including NuGet and legacy package dependency scanning. " Assess Fortify (or Arcad) rulesets for COBOL, pilot on the mainframe codebase, and deploy where technically feasible; document coverage gaps and compensating controls where static analysis is not viable. " Maintain and tune WebInspect DAST scans against staging/pre-prod environments for all applications. " Integrate Dynatrace and Splunk signals into the security workflow for runtime visibility and post-deployment monitoring. DevSecOps Pipeline Engineering " Embed SAST (Fortify), DAST (WebInspect), and SCA (Sonatype) directly into CI/CD pipelines across GitHub Actions, Ansible, and Harness. " Implement build-breaker logic and quality/security gates so pipelines fail deterministically on policy violations, with clear developer-facing feedback. " Integrate SonarQube for code quality and security hotspots alongside Fortify, avoiding tool overlap/conflict. " Manage secure artifact promotion through Nexus, including scanning gates prior to promotion between environments. " Automate vulnerability remediation workflows: auto-ticketing, developer notification, re-scan verification, and closure evidence for audit purposes. Establish Remediation SLAs " Stand up a remediation pipeline with a target SLA of under 30 days for Critical/High findings across SAST, DAST, and SCA. " Build tracking, reporting, and escalation workflows (dashboards, ticket auto-creation, aging reports) so overdue findings are visible to engineering leadership and the CISO. " Define severity-based SLA tiers (e.g., Critical: 15 days, High: 30 days, Medium: 90 days) and get sign-off from engineering and compliance stakeholders. Governance, Metrics & Stakeholder Management " Report pipeline enforcement status, SLA compliance, and risk trends to the CISO and engineering leadership on a regular cadence. " Partner with development leads across all three stacks to drive remediation without stalling delivery velocity. " Contribute security control evidence to ISO 27001, SOC 2, NIST CSF, and ISO 42001 audit cycles. " Maintain documentation for tool configuration, gate logic, exception handling, and rollback procedures. AI-Augmented Findings Orchestration & Remediation " Operate AI agents to orchestrate findings intake across Fortify, WebInspect, and Sonatype - correlating, deduplicating, and prioritizing results into a single actionable queue. " Use AI-assisted triage to distinguish true positives from false positives, reducing manual review load while maintaining audit-defensible reasoning for every disposition. " Use AI agents for auto-generate remediation guidance and, where appropriate, remediation code suggestions for developers, with human review gates before merge. " Establish guardrails, human-in-the-loop checkpoints, and audit trails for all AI-driven security decisions to satisfy ISO 27001 / SOC 2 / ISO 42001 evidentiary requirements. " Measure and report AI-assisted triage performance (false-positive reduction rate, mean time to triage, agent accuracy drift). Tools & Platforms Category Tools Source Control GitHub / GitLab CI/CD GitHub Actions, Ansible, Harness Artifact Management Nexus SAST Fortify SCA Sonatype DAST WebInspect Code Quality / Build Gating SonarQube, Build Breaker Observability Dynatrace, Splunk Essential Skills & Experience " 10 years in Application Security / DevSecOps, with at least 2-3 years in a lead capacity. " Proven, hands-on experience implementing and enforcing SAST/DAST/SCA gates in CI/CD pipelines. " Direct experience with Fortify (SAST) in an enforcing/blocking configuration, ideally across multiple technology stacks. " Working knowledge of Sonatype (or equivalent SCA) and WebInspect (or equivalent DAST) in production pipelines. " Practical exposure to at least two of the three target stacks: cloud-native .NET/Kubernetes, legacy .NET/IIS, and mainframe/COBOL; candidates with all three are strongly preferred. " Experience with GitHub Actions, Ansible, and/or Harness pipeline authoring, including custom actions/plugins for security gating. " Familiarity with Nexus repository management and secure artifact promotion practices. " Experience defining and operating remediation SLA programs with measurable compliance reporting. " Exposure to compliance frameworks relevant to a lean, cloud-native SMB environment: ISO 27001, SOC 2, NIST CSF, GDPR; ISO 42001 awareness a plus. " Strong stakeholder management skills - able to hold the line on security gates while working constructively with developers across very different tech generations. " Hands-on experience with AI agents / LLM-based tooling for security findings orchestration, triage, and remediation workflows. " Demonstrated experience reducing false-positive rates through AI-assisted or ML-assisted triage, including training/fine-tuning models or rule-based classifiers on historical findings data. " Understanding of AI governance and safety practices (human-in-the-loop review, audit logging, model drift monitoring) as applied to security decision-making.

Job Description Position: junior software engineer Onsite: 5 days onsite Clearance: Must have an active Top Secret Location: El Segundo, CA or Albuquerque, New Mexico Interview process: 1 video interview to hire Contract: 6-12 months extension (they would like to bring someone on perm) Must have: Java or Python or C (if they have all three, would be perfect), REST API development, CI/CD Nice to have: Space or mission systems, or ground systems experience · Active TS Clearance (TS/SCI preferred) · Strong software engineering fundamentals · Backend development experience · Java, C , Python, or JavaScript · REST API development · Object-oriented programming · CI/CD, DevSecOps, Agile · Space, mission systems, or ground systems experience

Job DescriptionClient: boeing Position: Sr Software engineer Onsite: 5 days onsite Clearance: Must have an active Top Secret Location: El Segundo, CA or Albuquerque, New Mexico Rate: $105/hr on apex w-2 Interview process: 1 video interview to hire Contract: 6-12 months extension (they would like to bring someone on perm) Referral fee: $3/hr Must have: Java or Python or C (if they have all three, would be perfect), REST API development, CI/CD Nice to have: Space or mission systems, or ground systems experience • Active TS Clearance (TS/SCI preferred), • Strong software engineering fundamentals, • Backend development experience, • Java, C , Python, or JavaScript, • REST API development, • Object-oriented programming, • CI/CD, DevSecOps, Agile, • Space, mission systems, or ground systems experience Must have: Java or Python or C (if they have all three, would be perfect), REST API development, CI/CD Project Scope: • Support Boeing Defense, Space & Security's Rapid Space Capabilities (RSC) portfolio developing next-generation space and ground software systems. These Software Engineers will contribute across the software development lifecycle including requirements, design, development, integration, testing, and deployment of mission-critical applications supporting space, mission, and command-and-control environments. While space domain knowledge is beneficial, the priority for these lower-level Software Engineers is strong software development capability, with opportunities to learn the mission and ground systems domain from senior team members. Team Size & Breakdown: • Immediate Need:, • 4 Software Engineers (individual contributors), • Future Growth:, • Team expected to scale to approximately 50 total software engineers, • Supporting Environment:, • Software development team supporting space and ground system programs, • Leads will provide technical direction and mentorship to junior and mid-level engineers High-Level Individual Duties: • Design, develop, and maintain software applications and services, • Develop backend software components and APIs, • Support system integration and testing activities, • Participate in code reviews and software quality activities, • Collaborate with systems engineering and mission teams to implement requirements, • Work within Agile and DevSecOps development environments, • Support software deployment, troubleshooting, and sustainment activities, • Contribute to the development of ground systems, mission systems, and command-and-control applications, • Utilize CI/CD pipelines and source control tools for software delivery Must-Haves (Concepts & Tools): • Strong software engineering fundamentals, • Backend software development experience, • Object-oriented programming experience, • Java, C , Python, or JavaScript development experience, • Experience with REST APIs/services Security Requirements • Active Top Secret (TS) Clearance required on Day 1, • TS/SCI highly preferred Nice-to-Haves: • Space systems or satellite program experience, • Ground systems experience, • Mission systems experience, • Command and Control (C2) environments, • Space domain knowledge

Job Description Mandatory Skills: Python, AWS Devops • Experience: 10 years of hands-on professional software engineering and technical leadership experience., • Architecture & Design: Proven track record of architecting distributed data processing systems, schema design, and microservices., • Data Engineering Stack: Expert-level proficiency with Databricks, DBT and Apache Airflow., • Programming: Mastery of Python and solid database/SQL expertise., • AWS Cloud Depth: Hands-on experience with core AWS services: EC2, S3, Lambda, and RDS, including IAM and secure VPC networking., • Web Services & Integration: Strong proficiency in REST API design and integration patterns (JSON, XML, OData).Strong Plus:, • Full-Stack Familiarity: Experience or familiarity with frontend tech stacks (HTML/CSS, TypeScript, Node.js, or React)., • DevOps Excellence: Solid grasp of infrastructure-as-code (Terraform), containerization (Docker), and automated DevSecOps pipelines., • Regulated Systems: Experience working in GxP environments or software requiring compliance with FDA 21 CFR Part 11 regulations., • Security & Auth: Practical knowledge of modern authentication protocols (OAuth, JWT, SAML)., • Education: Bachelor's degree in Information Technology, Computer Science, or a related technology stream.

Job Description Position: Java developer Location: either Columbus, OH or Minneapolis, MN or Dallas, TX or Charlotte, NC or Atlanta, GA or Chicago, IL or Detroit, MI Onsite: 4 days a week Interview process: 1 video then face to face (they have to live in one of those markets already) Relo candidates: No Contract: 6 months to perm Design, code, test, deploy and support a Java based solution within our payments ecosystem. Develop modern RESTful API's using Java and Spring Boot, full stack developer, DevOps, CICD, Cloud enabled services (Container, both on prem and in the cloud) Assist with system design / Business Analysis (server layout, availability, disaster recovery planning, production deployments etc.) Assist with software / Data design (Database Schema, Storage considerations, Data Mapping, Data Storage Efficiency, NOSQL Data Considerations, RDMS to NOSQL considerations, Flat file to NOSQL considerations and design related matters, API design including call signature, schema, business logic, data access, resilience, logging, supportability, etc.) Assist with software delivery (Hands on typically, but also in an advisory or architectural role in order to create server architecture, create table layouts, create highly available data resources, create highly recoverable data resources, configure highly performant data sources) Assist with a transition to Kafka specifically with analyzing proper use cases, detailed Kafka environment setup considerations, enrichment and transformations Assist with transitioning from a Physical / Virtual Machine environment to one based on cloud run environments and containers Demonstrate knowledge of and can deliver solutions using DevSecOps tool chains and processes Analyzes, designs, and develops systems based upon user specifications. Provides technical assistance in solving hardware or software problems. Possesses an in-depth knowledge of and works with the technical tools available for systems development and support. Maintains and demonstrates knowledge of technical industry trends, particularly as they apply to Huntington.

Job DescriptionWe are seeking an experienced Information Security Architect to join a growing enterprise security organization. This is a highly technical architecture role focused on designing secure, scalable solutions across cloud, infrastructure, identity, applications, data, and emerging technologies. The position will work closely with cloud, infrastructure, application development, platform engineering, and cybersecurity teams to ensure security is incorporated into new platforms and modernization initiatives from the beginning. This is an excellent opportunity for someone who enjoys solving complex technical security problems and wants to remain close to the technology while influencing broader enterprise security strategy. Responsibilities • Design enterprise security architectures, reference patterns, technical standards, and secure implementation approaches across cloud and on-premises environments., • Review proposed applications, platforms, infrastructure solutions, and technology integrations to identify security risks and recommend practical design improvements., • Conduct threat modeling and technical risk assessments for applications, cloud platforms, APIs, infrastructure, and emerging technologies., • Develop secure architecture patterns for AWS, Azure, hybrid cloud, containers, Kubernetes, and Infrastructure as Code environments., • Establish cloud security controls around identity, network segmentation, logging, secrets management, workload protection, and secure configuration., • Help advance Zero Trust architecture, including ZTNA, micro-segmentation, least privilege, secure remote access, and identity-centric security controls., • Partner with Identity teams on authentication, authorization, SSO, MFA, federation, PAM, RBAC/ABAC, and identity governance., • Work with development and DevOps teams to incorporate security into the SDLC and CI/CD process, including application security, API security, software supply chain security, and secrets management., • Support secure adoption of Generative AI and AI-enabled technologies, including evaluating AI platforms, development tools, data exposure risks, model governance, and secure-use patterns., • Contribute to enterprise data protection architecture involving encryption, key management, classification, DLP, and tokenization., • Evaluate security technologies across areas such as CSPM, CWPP, EDR/XDR, SIEM, CASB, vulnerability management, and cloud-native security., • Partner with engineering teams to automate security controls and improve visibility, resiliency, scalability, and operational efficiency.Qualifications, • 8+ years of experience across cybersecurity, security architecture, cloud security, infrastructure security, or related technical disciplines., • Strong hands-on background designing and implementing enterprise security architectures and technical security standards., • Deep technical knowledge of AWS and/or Azure, including cloud-native security controls and hybrid-cloud environments., • Experience with Zero Trust, network security, segmentation, ZTNA, endpoint security, and enterprise connectivity., • Strong understanding of identity security, including IAM, SSO, MFA, federation, PAM, RBAC/ABAC, and least privilege., • Experience supporting Application Security and DevSecOps, including threat modeling, CI/CD security, API security, and secure SDLC practices., • Familiarity with container/Kubernetes security and Infrastructure as Code security., • Understanding of modern enterprise security technologies including EDR/XDR, SIEM, DLP, CASB, CSPM, vulnerability management, and workload protection., • Familiarity with AI/GenAI security, including the security considerations associated with enterprise AI platforms and AI-assisted development., • Strong ability to translate complex security requirements into practical technical solutions and communicate effectively with both engineering teams and business stakeholders., • Bachelor's degree in a technical or related discipline Preferred Experience Experience within financial services or another highly regulated enterprise environment is highly desirable. Certifications such as CISSP, CCSP, CISM, SABSA, AWS Security Specialty, Azure security certifications, or GIAC are beneficial but not required. Exposure to security frameworks and regulatory standards such as NIST, ISO 27001, CIS Controls, SOX, GLBA, NYDFS, or PCI-DSS is also valuable, along with experience in scripting, automation, Infrastructure as Code, cloud transformation, secure platform engineering, or enterprise AI initiatives.

Job DescriptionGreetings! DevOps Engineer 5 days in office FLORHAM PARK, New Jersey -- onsite Key Responsibilities Design and manage GCP services including Cloud Run, Cloud Run Functions, Cloud Scheduler, BigQuery Develop and maintain CI/CD pipelines using Cloud Build and Cloud Deploy Implement Infrastructure as Code (Terraform)--Must Manage containerized workloads using Docker Kubernetes (GKE) Configure and manage IAM roles, policies, and Cloud IAP for secure access Implement and manage Cloud Logging Monitoring for observability and alerting. Monitor system performance and ensure high availability Debug and resolve network and infrastructure-related issues Collaborate with development teams for efficient deployment and release automation Required Skills 10+ years of experience in DevOps/Cloud engineering Strong hands-on experience with GCP services (Cloud Run, Functions, Scheduler, BigQuery, IAM, IAP) Expertise in Cloud Build, Cloud Deploy, Terraform, CI/CD tools, Kubernetes Proven experience in IAM roles and policy management Strong troubleshooting skills in networking and infrastructure issues Scripting knowledge (Python/Bash) Solid understanding of cloud security, networking, and monitoring Preferred Google Cloud Certified – Professional DevOps Engineer and/or Professional Cloud Architect Experience with serverless architecture, microservices, and DevSecOps practices Regards,

AI Application Architect Berkeley Heights, NJ (5days Onsite) AI Application Architect with 10+ years of experience in enterprise application modernization, cloud-native architecture, microservices, systems integration, and solution design. The candidate should have recent experience with AI/GenAI solutions, Spec Driven development, and skill files, including LLM integration, RAG architectures, AI agents, prompt engineering, and enterprise AI adoption initiatives. The ideal candidate should also demonstrate strong client-facing skills. Experience with Spec-kit or BMAD framework is desirable (good to have) Key Responsibilities • Work closely with customers and stakeholders to understand business problems and translate them into technology solutions., • Design, generate and validate AI-generated code and engineering artifacts, and drive deployment of enterprise-grade applications, integrations, and AI-powered solutions., • Apply prompt engineering, context engineering, and AI enablement techniques to improve solution outcomes., • Review and validate AI-generated artifacts including requirements, design documents, code, and technical specifications., • Review and validate AI-generated test designs, test cases, Playwright automation scripts, and quality engineering assets to ensure functional accuracy, adequate coverage, maintainability, and production readiness., • Ensure compliance with enterprise security, governance, DevSecOps, and quality standards., • Build and orchestrate agentic workflows, automation pipelines, and developer productivity solutions., • Develop solution prototypes, proof-of-concepts, and production-ready implementations., • Support customer engagements, workshops, demonstrations, and solution consulting activities. Required Skills Technical Skills • Strong software engineering background with 5–7 years of experience., • Strong proficiency in Python, with the ability to review, validate, debug, and optimize AI-generated code for enterprise use., • Experience leveraging AI-assisted development tools such as GitHub Copilot, Claude, Cursor, or equivalent platforms., • Experience working with Spec-Driven Development methodologies., • Hands-on experience with APIs, microservices, and modern application architectures., • Familiarity with CI/CD, DevSecOps, automated testing, and deployment pipelines., • Experience with test automation frameworks such as Playwright, Selenium, or equivalent. Professional Skills • Strong problem-solving and analytical capabilities., • Customer-facing communication and consulting skills., • Ability to work independently in fast-paced environments., • Experience collaborating with cross-functional and distributed teams., • Strong ownership mindset with a focus on measurable business outcomes. Preferred Qualifications • Experience in Banking & Financial Services (BFS) domain., • Exposure to Agentic SDLC, Spec-Driven Development, or AI-assisted delivery models. Understanding of cloud-native architectures and platform engineering.

Job Title: GenAI Architect Location: Iselin, NJ (Hybrid - 3 days onsite in a week) Position Type: Contract position Responsibilities: Project Overview: Join our dynamic Delivery department as a GenAI Architect, where you will play a key role in designing and implementing innovative solutions leveraging Generative AI, AI Architecture, and Transformation methodologies. With a focus on cutting-edge technologies like Azure and MCP, you will help shape robust AI-driven solutions for enterprise applications. Modernization, quality engineering, DevSecOps, and SRE. Partnering with client executives, sector leaders, and delivery teams, you will translate AI strategy into production solutions and measurable business outcomes. Candidates must have personally designed, coded, and deployed production AI systems. Key Responsibilities: • Lead AI adoption: Co-create roadmaps aligned to client priorities; prioritize high-impact use cases and embed AI into end-to-end delivery workflows., • Architect and build solutions: Design production-grade LLM applications and multi-agent systems with secure enterprise integrations, governed model access, and clear trade-offs across quality, latency, cost, and risk., • Drive hands-on execution: Build rapid client PoCs, guide production deployment, debug agent behavior, review code, and establish reusable architectures and engineering standards., • Design and architect Generative AI solutions tailored to enterprise needs, ensuring scalability and reliability., • Lead the integration of AI-related technologies within existing enterprise architecture frameworks., • Drive digital transformation initiatives by leveraging Agentic AI and innovative methodologies., • Develop and implement APIs to support seamless integration of AI-powered solutions across platforms., • Collaborate with cross-functional teams to define and refine solution architectures., • Ensure compliance with best practices and standards for enterprise and solution architecture., • Stay updated on emerging AI trends and technologies to incorporate them into architectural strategy., • Lead clients and teams: Advise senior stakeholders, enable changes in skills and ways of working, and lead forward-deployed engineers (FDEs) and AI specialists. Develop reusable assets, industry perspectives, and thought leadership., • Embed responsible AI: Establish security, privacy, data residency, auditability, and human oversight controls appropriate to client and regulatory requirements. Required Skills and Experience: • Proven AI transformation experience, including recent, personal delivery of production LLM applications and agents, preferably in regulated or security-sensitive environments., • Deep AI architecture expertise spanning model selection, orchestration, data and context layers, identity, integration, and observability., • Hands-on experience with multi-agent systems and Agent-to-Agent (A2A) interoperability, Model Context Protocol (MCP) servers and clients, and AI gateways for routing, access controls, guardrails, and cost governance., • Strong practical knowledge of RAG, GraphRAG, context engineering, agent memory, and agent frameworks or SDKs; experience applying AI coding assistants and autonomous agents across the SDLC., • Expertise in LLMOps, evaluation, regression testing, tracing, production monitoring, model adaptation, and inference optimization., • Experience implementing defenses against prompt injection and tool misuse, human approval controls, and responsible AI governance., • Hands-on experience with at least one major cloud AI platform - Azure AI Foundry, AWS Bedrock, or Google Vertex AI - and leading model-provider APIs., • Strong executive communication, team leadership, and commercial judgment, with the ability to translate complex technology into compelling business value. Success in This Role • Secure, scalable AI adoption that moves beyond experimentation, delivers measurable engineering and business improvements, and maintains continuity from strategy and deal commitments through production execution. AI Tools - • Azure AI Foundry, • Agent365, • Copilot, • MS Purview, • Defender

About the role We are looking for a hands-on AWS DevOps Lead to own and evolve our cloud platform and lead a blended onsite and offshore team of 5–10 engineers. You will set the vision and roadmap for AWS infrastructure, DevOps, and CI/CD, while staying technical enough to design, build, and troubleshoot the platform yourself. As part of the Platforms & Engineering team, you will partner with IT stakeholders to cloud-enable their systems, keep our AWS environment secure and well governed, and make sure the team delivers reliably. This role suits a leader who is equally comfortable whiteboarding a multi-account network design, reviewing a pipeline, and running a team stand-up. Key responsibilities Leadership and vision • Define the vision, roadmap, and standards for AWS infrastructure, DevOps, and CI/CD across the Platforms & Engineering team., • Lead, mentor and grow a team of 5–10 FTEs and contractors across onsite and offshore locations., • Plan and assign work, set priorities, track delivery and remove blockers so commitments are met on time., • Build a culture of automation, ownership, documentation and continuous improvement., • Manage contractor and vendor resources, including onboarding, quality of delivery and knowledge transfer. AWS infrastructure and architecture • Design, build and maintain secure, scalable and cost-effective AWS environments using services such as EC2, ECS/EKS, Lambda, S3, RDS, IAM, CloudWatch and CloudFormation., • Own the AWS network architecture: VPC design, subnets, routing, Transit Gateway, VPC peering, PrivateLink, Direct Connect / site-to-site VPN, DNS (Route 53), load balancing, and hybrid connectivity., • Drive Infrastructure as Code (Terraform/Terragrunt and/or CloudFormation/CDK) as the standard for all provisioning., • Hands-on experience authoring Terraform modules from scratch, not just consuming existing ones., • Lead multi-account strategy and governance using AWS Organizations, Control Tower, and landing zone patterns., • Ensure high availability, disaster recovery, backup, and resilience of cloud workloads., • Monitor and optimize cloud spend through tagging, rightsizing and FinOps practices. DevOps, GitHub and CI/CD • Own GitHub administration: organizations, repositories, branching strategy, access controls and GitHub Actions., • Design and maintain CI/CD pipelines that deliver fast, repeatable and secure releases., • Standardize build, test, deployment, and release practices across teams., • Implement observability: monitoring, logging, alerting, and incident response runbooks. Cloud security • Embed security in every layer of the AWS platform, working with the Cybersecurity team., • Implement and manage IAM least-privilege, SCPs, KMS encryption, Secrets Manager, Security Groups, and NACLs., • Use AWS security services such as GuardDuty, Security Hub, AWS Config, CloudTrail, Inspector, and WAF., • Integrate DevSecOps practices into pipelines, including code, dependency, container and IaC scanning., • Support audits, compliance requirements and remediation of security findings. Stakeholder partnership • Work closely with IT stakeholders and application owners to migrate, cloud-enable, and support their systems on AWS., • Translate business and application needs into infrastructure designs, estimates, and delivery plans., • Communicate status, risks, and roadmap clearly to senior leadership and partner teams. Required qualifications • Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience., • 10+ years in infrastructure, cloud, or DevOps engineering, with 5+ years of hands-on AWS experience., • 3+ years leading technical teams, including managing contractors and onsite/offshore delivery., • Deep expertise in AWS networking: VPC design, Transit Gateway, hybrid connectivity, DNS, and routing., • Strong hands-on experience with core AWS compute, storage, database, and serverless services., • Proven experience with Infrastructure as Code (Terraform/Terragrunt, CloudFormation, or CDK)., • Strong background in GitHub administration, GitHub Actions, and CI/CD pipeline design., • Solid knowledge of AWS security services, IAM, and cloud security best practices., • Scripting skills in Python, Bash, or PowerShell., • Experience with containers and orchestration (Docker, ECS and/or EKS)., • Excellent communication skills and the ability to influence technical and non-technical stakeholders., • Exposure to FinOps practices and cloud cost management tools. Preferred qualifications • Experience with Amazon Bedrock and integrating generative AI services into enterprise platforms and applications., • Familiarity with AI/ML infrastructure on AWS, such as SageMaker, vector stores, and secure model access patterns., • AWS certifications such as Solutions Architect – Professional, DevOps Engineer – Professional, Advanced Networking – Specialty, or Security – Specialty., • Experience in regulated industries such as financial services or insurance., • Knowledge of security and compliance frameworks such as NIST, CIS Benchmarks, SOC 2 or ISO 27001.

About CLS: CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day. Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use. CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market. Job information: • Functional title – IAM Engineering Lead, • Department - CISO, • Corporate level - Director, • Report to – Head of Security Architecture, Design and Engineering, • Location – Iselin, New Jersey. On site 2 days per week, • Expected full-time salary range between $200,000 - $230,000 + variable compensation + 401(k) match + benefits. Note: Disclosure as required by NY Pay Transparency Law of the expected salary compensation range for this role. What you will be doing: As Head of IAM Engineering, you will lead the strategic design, implementation, and governance of a comprehensive identity and access management program that protects CLS Services' most critical asset: trusted digital identity. This is a hybrid executive and technical role that bridges security, compliance, and business enablement in a highly regulated financial services environment. You will be responsible for architecting and scaling identity systems across our workforce, customers, and machine identities—each with distinct risk profiles and regulatory demands. This includes accelerating onboarding of applications and infrastructure into our IGA platform, expanding our PAM scope to network devices and non-traditional endpoints, building a comprehensive secrets management capability, and embedding AI-assisted automation to reduce manual operational burden while maintaining security and auditability. Key Responsibilities: • Scale application and infrastructure onboarding to IAG through a phased, iterative deployment strategy, prioritizing critical systems and expanding coverage over time to maximize early wins while managing complexity., • Automate provisioning and access reviews using IAG connectors, role-based access control (RBAC) frameworks, and AI-driven workflows to reduce manual errors and accelerate user lifecycle management., • Implement self-service capabilities and identity workflow automation to automate and accelerate onboarding to the IAG platform., • Maintain data quality and integration governance by establishing rigorous data cleansing practices, continuous syncing with authoritative HR systems, and monitoring to ensure accurate, consistent identity and entitlement data., • Where possible Leverage AI and machine learning to generate role recommendations, detect over-permissioning, and automate access certification workflows at scale., • Govern machine identities (workloads, services, future AI agents) through IAG lifecycle management, ensuring all identity types are managed through a unified access governance framework., • Deploy behavioral anomaly detection using AI/ML to identify unauthorized or suspicious IAM activities, including potential abuse by rogue AI agents operating at machine velocity., • Onboard critical device and infrastructure accounts to PAM, including network devices, databases, and cloud infrastructure, implementing just-enough-privilege (JEP) and just-in-time (JIT) access models to reduce standing privileges and blast radius., • Expand PAM scope beyond Linux/Windows to include network devices, databases, cloud infrastructure (AWS), and non-traditional endpoints (operational technology etc.) where applicable to CLS Services' infrastructure., • Where possible Implement JIT and zero standing privileges (ZSP) across PAM-managed resources, restricting privilege duration and scope to specific use cases and time-bound sessions. AI-Assisted IAM Operations • Redistribute high-volume, low-risk IAM tasks to AI agents, such as routine provisioning, deprovisioning, access reviews, and anomaly detection, while maintaining human oversight, exception handling, and strategic decision-making., • Implement AI-driven intelligent recommendations for access reviews, vulnerability remediation, and role engineering to accelerate decision cycles and improve accuracy., • Design and monitor AI agent identity lifecycle management, including provisioning, fine-grained authorization, token monitoring, and continuous audit of AI agent activities to prevent privilege escalation or unauthorized data access. Vendor and Technology Management • Negotiate and manage vendor relationships to ensure technical roadmaps align with CLS Services' strategy, support regulatory requirements, and deliver value. Measurement and Governance • Define and track outcome-driven metrics aligned with business objectives, such as:, • IGA onboarding cycle time and application/infrastructure coverage expansion, • Reduction in identity-related security incidents and unauthorized access events, • PAM scope expansion and just-in-time privilege adoption rates, • User experience and self-service adoption metrics, • AI recommendation accuracy and agent behaviour anomaly detection rates Engineering Leadership & Operating Model • Build and lead a high-performing security engineering function, aligned to product-based delivery., • Help define the target operating model for security engineering, including platform ownership, DevSecOps integration, and automation-first principles., • Establish clear engineering standards, patterns, and reusable security services., • Experience with tooling selection, deployment and vendor management., • Integration of tooling with downstream and upstream systems, • Tooling automation development, • Continuous Tooling Optimization, • Platform Health Monitoring, • Remediation Engineering, • Resiliency Engineering Stakeholder Engagement & Strategy • Work closely and partner with the ED, Head of Identity and Access Management., • Partner with CIO, CISO, heads of technology and senior business leaders to align security engineering initiatives with organizational priorities., • Work closely with the enterprise security architects and solution architects on control gaps, control maturity and business cases., • Translate risk and threat insights into practical engineering outcomes., • Manage vendor relationships and strategic technology partnerships. What we’re looking for: • Senior leadership in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred)., • Proven delivery of large-scale security platforms end-to-end (design → build → run), including multi-system integration., • Deep experience identity & privileged access engineering., • Strong track record of regulatory/audit engagement and evidence-based assurance., • Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience., • Strategic thinker with the ability to translate vision into execution., • Strong communicator, able to influence at executive level., • Data-driven and outcome-focused, with a bias toward measurable security improvements., • Comfortable operating in fast-paced, evolving environments. Desirable Skills and Experience • SailPoint IGA platform administration and customization (roles, policies, workflows, connectors), • Delinea PAM platform expertise (credential management, session recording, just-in-time workflows), • Cloud infrastructure security (AWS IAM), • Identity and access intelligence (IAI) or AI/ML analytics applied to IAM use cases. Our commitment to employees: We are a small company with a big mandate, so every person is essential to our success. We are also committed to employing and retaining the most talented and dedicated people. What makes us interesting goes beyond our competitive salaries and great benefits. Our work environment is designed around quality outcomes, not output. The FX market would cease to function without our services, and we take pride in being responsible for keeping it running smoothly. We are different from other financial institutions in that we have a flatter and more transparent structure, with accessible leadership. You will be seen, heard and empowered to develop your career. We are a purpose-driven organization, with an inclusive culture that focuses on doing what is right. The well-being of our people is as important to us as the resilience of our systems. In addition to encouraging our people to ‘locate for their day,’ we run a range of initiatives that support a sense of belonging, as well as physical, emotional and mental well-being. Our extensive benefits for employees typically include: • Vacation/annual leave: 25 days in UK/Asia + 3 life days, 23 in US + 3 life days, • Private medical and dental cover and life insurance, • Generous pension contributions in the UK and Asia; matching 401(k) in the US, • Paid volunteer days, • ‘Locate for your day’ hybrid working - 2 days a week in office, • Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning, • Paid parental leave / Coaching and support services, • Career development / LinkedIn Learning, • ‘Heads down days’ with no meetings on the last Friday of every month, • Wellbeing / Mental health support, • Employee Networks (Black Employee Network, Parents & Caregivers Network, Pride Network, Sustainability Network, Veterans Network, Women’s Forum), • Social events Awards: • The Sunday Times Best Places to Work 2023, 2024, 2025 / Big Company / The Sunday Times Awards, • Third place in Britain’s Healthiest Workplace 2022 / Medium Company / Vitality Awards

Role overview: • Job title – Application Security Specialist, • Department – IT Security, • Level – Vice President, • Reports to – Director, Application Security, • Location – New Jersey, • Compensation – $140,000–$180,000 base salary + variable compensation + 401(k) match + benefits We’re hiring an Application Security Specialist to help development teams build secure, resilient software. This is a hands-on AppSec role for someone who can interpret security findings, understand real-world application risk, and turn that insight into practical guidance for engineers. This is not a DevSecOps tooling integration role: engineering teams own security tool integration, automation, and pipeline operation. Your focus will be on understanding the output of those tools, separating meaningful risk from noise, and partnering with developers to improve the security of the code we write. What you’ll do: • Analyze and validate findings from SAST, DAST, SCA, API security testing, AI-assisted analysis, penetration testing, and code reviews., • Assess vulnerabilities in context, considering exploitability, business impact, compensating controls, and realistic application risk., • Work closely with development teams to explain issues clearly, prioritize remediation, and support secure implementation choices., • Lead or facilitate threat modelling, secure design reviews, and architecture risk reviews for new features, services, APIs, and platforms., • Promote secure coding standards, reusable security patterns, and practical guidance that reduce recurring vulnerability themes., • Provide AppSec subject-matter expertise to improve security testing, reporting, and SDLC processes without owning pipeline integration or tool administration. What you’ll bring: • Strong experience in application security, secure coding, secure-by-design practices, application security testing, and vulnerability management., • Solid understanding of common application and API vulnerability classes, including the OWASP Top 10, and how to remediate them in modern software environments., • Ability to read and reason about code well enough to validate findings, identify root causes, and discuss remediation options with developers., • Experience with threat modelling, architecture risk reviews, secure design reviews, or similar AppSec activities., • Practical knowledge of SAST, DAST, SCA, API security, secrets detection, and related testing approaches, with an emphasis on interpreting results rather than administering tools., • Working knowledge of at least one programming language such as Java, Python, JavaScript, C#, or Go., • Clear communication skills and the ability to translate security risk into practical guidance for engineering, product, and technology leadership audiences., • Collaborative mindset, sound risk judgement, and a coaching style that helps development teams improve their security capability over time. Qualifications: • Degree in a technology discipline such as Computer Science, Information Management, Computer Engineering, Cybersecurity, or equivalent practical experience., • Relevant security certifications such as CISSP, CSSLP, GWAPT, GWEB, or equivalent are preferred but not required.

Industry/SectorNot ApplicableSpecialismFunctional & Industry TechnologiesManagement LevelSenior AssociateJob Description & SummaryThe OpportunityAs a GIS DevSecOps Engineer, Senior Associate, you will engage in consulting services for a variety of business applications, helping clients optimize oper

Strong understanding of DevSecOps principles; hands-on experience with CI/CD pipelines and related tooling and automating build/test/release workflows.

A leading IT services provider based in Newark, NJ seeks a Mid-Senior level DevSecOps engineer.

A Security and Risk professional specializing in application security, DevSecOps and modernization, focused on updating and transforming existing applications to cloud-first models, enhancing their resilience against evolving threats using shift-left DevSecOps principles, automation and AI. Demonstr

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

Job Title: ADMS System Engineer Location: South Plainfield, NJ Work Mode: Onsite 5 days/week OR Hybrid – 3 days onsite + 2 days remote Employment Type: Contract Contract Duration: 11/01/2026 – 10/31/2027 Immigration: US Citizen or Green Card only – No H1B Interview Availability: Starting 09/30

WE ARE HIRING – MULTIPLE IT ROLES | W2 OPPORTUNITIES | JOB ASSISTANCE | H1B Transfer | GC Processing.Are you an experienced IT professional looking for.W2 job opportunities, bi-weekly payroll, H-1B transfer, or Green Card processing support?.We are looking for experienced IT professionals interest

Photon is a Digital Engineering and Digital Modernization company founded in 1999, partnering with leading global enterprises, including Fortune 500 organizations, to build and modernize digital platforms and experiences.Senior Cloud / Server Engineer.We are looking for a Senior Cloud / Server Engin

At Synechron, we believe in the power of digital to transform businesses for the better.Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions.Synechron’s progressive technologies and optimization strategies span end-to-end Artificial

At Synechron, we believe in the power of digital to transform businesses for the better.Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions.Synechron’s progressive technologies and optimization strategies span end-to-end Artificial

Broadridge is hiring! We are seeking a Software Developer to support, enhance, and maintain intelligent document processing, workflow, and imaging solutions with a primary focus on Tungsten TotalAgility (TTA).This role is ideal for a mid-level developer with hands-on experience in workflow automatio

Must Have Technical/Functional Skills.Must have hands-on programming experience in Python with strong coding and debugging skills.Must have experience in SQL, data processing, and relational database concepts.Must have experience in developing and consuming REST APIs and enterprise integrations.Must

Note - Only W2 candidates are eligible for this opportunity.C2C candidates will not be considered.Java 17+ development experience.Spring Boot and RESTful Services.Object-Oriented Programming and software design principles.Experience across the full Software Development Lifecycle (SDLC).Knowledge of

Our client is seeking a Senior GenAI Cloud Engineer to build and deploy enterprise-scale AI solutions that drive intelligent automation, conversational experiences, and business process transformation.This is a Right-to-Hire Opportunity.This is a hands-on engineering role responsible for designing,

Industry experience in Software testing in Banking / Finance (preferably in Card/Payment) domain.Preferably having knowledge of Switch and Tandem Concepts/Base24 Switch Knowledge.Must have experience in Test automation for Web, API & Windows based apps preferably using TOSCA.Support end to end integ

Promote engineering best practices, secure coding standards, and DevSecOps principles.

At Synechron, we believe in the power of digital to transform businesses for the better.Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions.Synechron’s progressive technologies and optimization strategies span end-to-end Artificial

Location: Hybrid in Newark, NJ.Pay: $55-$65 per hour on W2, depending on experience (No C2C).Build and deploy enterprise-scale agentic AI solutions supporting business workflows, decision support, operational intelligence, and customer engagement.Hands-on engineering role delivering production-grade

We are seeking an energetic, experienced, Senior DevOps person who is passionate about applying technology to solve complex challenges.As Transcend DevOps Engineer, you will have the opportunity to be at the forefront of driving a major transformation.We are modernizing our DevOps practice, which in

Enjoy digging into software issues, testing complex applications, and making sure technology works the way it should?.We're looking for a hands-on Software QA Engineer to help ensure the quality, stability, and performance of software solutions used in demanding communications environments.Conduct t

This job is not open to work on C2C.Berkeley Heights, NJ (5 days onsite).We are seeking experienced DevOps Engineers to join a growing cloud infrastructure team responsible for designing, automating, securing, and supporting enterprise-scale Azure environments.This is an excellent opportunity for a