The company needs an engineer to lead static code analysis, automated quality governance, security vulnerability fixes, and AI-assisted tooling for developers across its enterprise software delivery pipelines.
You will set standards for reliability, maintainability and clean code, and define automated quality gates. You will work with development teams, architects and platform engineers to run enterprise code quality platforms such as SonarQube, on-premises and in cloud or SaaS setups. You will also use Behavior-Driven Development (BDD) in your own delivery work, and apply agentic AI workers and Model Context Protocol (MCP) architectures to improve developer experience, simplify code governance and speed up engineering.
Responsibilities
Own the architecture, deployment, administration and ongoing improvement of enterprise SAST and code quality platforms, such as SonarQube, DeepSource, Codacy and Semgrep.
Set and enforce automated quality gates, rulesets, technical debt models and code coverage baselines across repositories in several languages.
Manage upgrades, patching, high availability and day-to-day operation of on-premises and SaaS or cloud code quality infrastructure.
Build code quality scanning and gating into CI/CD tools such as Tekton, Harness, Jenkins, GitLab CI and GitHub Actions.
Standardise build and pull request scanning so developers get fast feedback and branch policy checks run automatically.
Containerise and maintain scanning tools and quality agents using Docker, Podman, and OpenShift or Kubernetes.
Use existing BDD frameworks such as Cucumber or Behave in your own daily development, so every platform feature, integration and automation script reaching production is high quality.
Build reliability, robustness and fault tolerance into every engineering component, keeping test coverage high and running functional and regression checks before release.
Make sure automated test suites run as mandatory gates in CI/CD before anything moves to production.
Design and run agentic AI workers and MCP tool setups that help developers and speed up code review.
Connect AI agents to IDEs and pipelines to support quality triage, fix suggestions, boilerplate generation and static analysis interpretation.
Keep evaluating new AI tools and MCP servers that reduce manual work, improve developer experience and increase engineering speed across the firm.
Work with Cyber Security, Architecture and Application teams to triage, track and fix static code flaws, CVEs and OWASP Top 10 risks.
Run root cause analyses on repeated defects, code smells, architecture bottlenecks and pipeline failures.
Advise on clean coding, refactoring and design patterns in Java, Python, JavaScript/TypeScript and Go.
Act as the technical authority on code quality, static analysis and AI-enabled engineering for internal stakeholders and engineering leaders.
Coach junior engineers and teams on clean code, unit testing, BDD and using AI developer tools safely.
Work with product managers, solution architects and release engineering to set quality roadmaps, KPIs and velocity metrics.
Weigh risk in technical decisions, protecting the firm's reputation and assets.
Ensure tools, pipelines, AI agents and processes meet compliance policy, internal audit, information security and regulatory requirements.
Requirements
13+ years of relevant experience in software engineering, DevOps or code quality engineering at a large, complex or global enterprise.
Financial services experience is strongly preferred.
Hands-on administration and engineering with SonarQube, ideally the Enterprise or Data Center edition (preferred), plus tools such as Semgrep, Codacy, DeepSource, Checkmarx and SonarLint.
Strong development or scripting skills in at least one of Java, Python, JavaScript/TypeScript or Go.
Deep working knowledge of CI/CD automation with Jenkins, Harness, Tekton or GitHub Actions.
Practical experience with containers, such as Docker, Podman, OpenShift or Kubernetes.
Proven use of BDD frameworks like Cucumber or Behave, plus unit or functional suites such as JUnit, PyTest, Playwright or Cypress, in your own development work to deliver reliable production code.
Familiarity with or hands-on work in agentic AI architectures, MCP server integration, LLM coding assistants or AI-assisted developer tooling.
Proven experience in vulnerability management, static security scanning and automated security compliance gating.
Excellent written and verbal communication, with the ability to explain complex technical topics to non-technical people.
Strong analytical and diagnostic skills and a habit of continuous improvement.
Track record of running process improvements and reducing technical debt.
Able to work in a global matrixed organisation, handling tight deadlines and competing priorities on your own.
Bachelor's degree in computer science, computer engineering, information technology or equivalent practical experience.
Master's degree in a related technical field is preferred.
Conditions
Full-time role based in Tampa, Florida, United States.
Primary location salary range is $113,840.00 - $170,760.00.
Applications close Nov 02, 2026.
Automated processing and AI are used to match your skills to roles, but people make all hiring decisions and no decisions are fully automated.
Illinois residents have an AI notice and right, and jurisdiction-specific considerations apply in some countries; an EEO policy statement and Know Your Rights poster are available.
Benefits
Discretionary and formulaic incentive and retention awards may be offered to eligible employees.
Medical, dental and vision coverage, 401(k), life, accident and disability insurance, and wellness programs.
Paid vacation, sick leave and paid holidays.
Offerings may vary by jurisdiction, job level and date of hire; full benefit details are on the company benefits site.