Role purpose
You'll build and run the CI/CD pipelines which build state of the art application platforms and deploy AWS infrastructure for a multi-year programme moving a large portfolio of middle-office applications to AWS. This is a hands-on engineering role: most of your day is spent writing pipeline code, Terraform and scripts, and fixing builds and deployments. You'll work closely with full-stack application teams (ReactJS and Java), database engineers and SRE.
Key responsibilities
Build tooling
•Set up and maintain front-end builds with npm and pnpm, vite, babel etc including workspaces/monorepos, dependency caching, lockfile management and private registries.
•Set up and maintain Java builds with Maven and Gradle, including multi-module projects, dependency management and build performance.
•Publish and version artifacts through Artifactory (or similar), and keep builds reproducible.
CI/CD pipelines
•Design and build pipelines in Harness and GitHub Actions for build, test, security scanning and deployment across all environments.
•Create reusable pipeline templates so application teams can onboard quickly and consistently.
•Add quality and security gates: unit tests, code coverage, SAST/SCA scanning, container image scanning and approval steps.
•Support blue/green and canary deployments, automated rollback and release tracking that meets State Street change management requirements.
Infrastructure as code and AWS
•Write and maintain Terraform modules for AWS: VPC, IAM, EC2, ECS/EKS, ALB, S3, RDS and related services.
•Manage Terraform state, module versioning and policy checks; detect and fix configuration drift.
•Build and run container platforms (Docker, ECS/EKS) for application workloads.
•Integrate secrets management (HashiCorp Vault/CyberArk) into pipelines and runtime environments.
Linux
•Build, harden and automate Linux servers and container images for applications moving off Solaris and Windows.
•Write Shell and Python scripts for automation, troubleshooting and operational tasks.
•Support migration of batch jobs and file transfers to the target platform (e.g. AutoSys, MFX/SFTP).
Reliability and collaboration
•Work with SRE to add logging, metrics and alerting (e.g. Dynatrace, Splunk) to pipelines and environments.
•Troubleshoot build, deployment and environment issues for application teams.
•Document runbooks and standards, and use AI assistants (e.g. GitHub Copilot) to speed up pipeline, Terraform and script development, with review.
Required experience and skills
•5+ years in DevOps, build or platform engineering roles.
•Front-end builds: practical experience with npm and pnpm for React/TypeScript projects.
•Java builds: strong experience with Maven and Gradle.
•Terraform: writing production modules and managing state for AWS.
•AWS: hands-on experience with core compute, networking, IAM, containers and managed services.
•CI/CD: building pipelines in Harness and/or GitHub Actions; Jenkins experience is a plus.
•Linux: strong administration, hardening and scripting (Bash, Python).
•Docker and Kubernetes/ECS/EKS.
•Git, branching strategies and pull-request workflows.
Preferred
•Experience in a regulated financial services environment.
•Experience with secrets management (Vault, CyberArk) and security scanning tools (e.g. SonarQube, Black Duck, Checkmarx).
•Experience with database change pipelines (Liquibase/Flyway).
•AWS certification (DevOps Engineer or SysOps Administrator) and/or HashiCorp Terraform certification.
Success measures (first 12 months)
•Reusable pipeline templates adopted by all modernization and migration teams.
•All target environments provisioned through Terraform, with no manual infrastructure changes.
•Faster, more reliable builds and deployments, measured against a baseline.
•No audit findings related to pipeline controls or secrets handling.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
