DevSecOps, Automation & Innovation Engineer

We are seeking an  Automation & Innovation Engineer  to join the IT Transversal (IT TRV) Innovation & Development team — a forward-looking role driving automation transformation and continuous innovation of CIB's development and deployment ecosystem.

Key Responsibility Areas

1. Automation Transformation Leadership

Primary: Eliminate manual development and operational toil

• Design and implement comprehensive  CI/CD pipeline automation  across CIB
• Automate infrastructure provisioning through  Infrastructure-as-Code  principles and tooling
• Establish  GitOps principles  for configuration management and deployment
• Automate security validation, compliance checks, and dependency scanning
• Drive adoption of  containerization  (Docker) and orchestration (Kubernetes/OpenShift)
• Create  self-healing infrastructure  that requires minimal human intervention
• Eliminate manual security reviews through automated security gates

1. Innovation Leadership & Technology Prototyping

Primary: Drive continuous innovation in automation practices

• Lead  innovation lab activities  — prototype and validate emerging automation technologies (service mesh, policy-as-code, advanced observability, GitOps tools)
• Conduct  technology watch  on DevOps, security automation, and AI4DevOps trends
• Create  proof-of-concept  implementations for cutting-edge tools/frameworks
• De-risk adoption of emerging technologies before enterprise-wide rollout
• Transfer innovations and c ompetencies to  Development Squad and Business IT teams  (IT TRV, IT GMT, IT GBCR)
• Establish  automation excellence center  standards and best practices
• Present findings and recommendations to CIB CIO community

1. Self-Service Platform Engineering

Primary: Build automation platform enabling team independence

• Design and maintain internal platform (CI/CD, IaC, observability, security scanning)
• Create  Platform-as-a-Service (PaaS)  abstractions hiding infrastructure complexity
• Enable developers to  deploy code securely without manual security reviews
• Establish platform as reusable asset available to IT Transversal, GMT, and GBCR teams
• Build self-service capabilities (provisioning, deployments, rollbacks)
• Document and evangelize platform usage through training and community building

1. Developer Experience & Productivity Innovation

Primary: Reduce friction and enable developer happiness

• Measure  "developer toil"  — manual, repetitive work slowing down delivery
• Enable  fast feedback loops  — deployment feedback in seconds, not hours
• Design  frictionless onboarding  — new team members productive in days
• Build tools that feel like  "magic"  — developers don't need to understand infrastructure
• Conduct regular feedback sessions with development teams to identify pain points

1. Velocity Metrics & Continuous Improvement

Primary: Drive measurable improvements in team performance

DORA Metrics Targets

• Metric                                             Target
• Deployment frequency                    Daily or multiple-times-daily
• Lead time for changes                    Reduce from weeks to days/hours
• Time-to-recovery (MTTR)               Reduce by 50%+
• Change failure rate                         Reduce failed deployments
•  

Automation Coverage Targets

• Area                                                Target
• Infrastructure-as-Code coverage    100%
• Security validation automation        90%+
• Testing automation                          95%+
• Self-service deployment adoption   90%+
•  

1. AI4DevOps Innovation & Intelligent Automation

Primary: Pioneer AI-driven automation in CIB's DevOps ecosystem

• Design and deploy  AI agents  for infrastructure provisioning, deployment automation, and incident remediation
• Establish  AI Agent Governance frameworks :
• Define permission systems and privilege boundaries for AI agents
• Implement containment strategies ensuring safe agent operation in production
• Establish audit trails and decision logging for agent actions
• Implement  AI-driven threat modeling  and proactive security:
• Leverage LLMs for threat modeling and adversary behavior anticipation
• Move from reactive compliance to proactive security hardening
• Build  observability and tracing  for AI agents (causal graph tracing, confidence metrics)
• Design  data governance policies  for AI agents (prevent data exfiltration, implement redaction)
• Develop  "agent-ready" infrastructure code  (idempotent, predictable, safe for AI consumption)
• Establish  hybrid human-AI workflows  with clear escalation paths

Experience & Education

• Bachelor's degree in Computer Science, Engineering, or equivalent experience
• 5+ years  in DevOps, Infrastructure Engineering, SRE, or related roles
• 3+ years  driving innovation, prototyping technologies, or leading architectural improvements
• Proven track record of reducing manual toil and improving team velocity
• Familiarity with financial services or regulated industries preferred

Infrastructure Automation & DevOps

• Expert-level  Infrastructure-as-Code  principles and practices (tool-agnostic)
• Strong  CI/CD expertise : Jenkins, GitLab CI, GitHub Actions
• Deep  containerization  (Docker) and orchestration (Kubernetes, OpenShift)
• Linux/Unix system administration (RHEL, CentOS, Ubuntu)
• Git mastery (GitFlow, branching strategies)
• Cloud platform experience (AWS, Azure, GCP)

Security & Compliance Automation

• Application security principles (OWASP Top 10)
• Security scanning automation: SAST/DAST (SonarQube, Checkmarx, ZAP)
• Container security scanning (Trivy, Aqua)
• Secrets management (HashiCorp Vault, AWS Secrets Manager)
• Compliance frameworks (PCI-DSS, GDPR, SOX)
• Security policy-as-code (OPA, Kyverno)

AI & Intelligent Automation (AI4DevOps)

• Understanding of AI agents and LLM applications in operations
• Familiarity with prompt engineering and LLM-based tooling
• Conceptual knowledge of agent governance, permission systems, and sandboxing
• Exposure to AI agent frameworks (LangChain, AutoGen)
• Understanding of hybrid human-AI workflow design

Monitoring, Logging & Observability

• Prometheus, Grafana, ELK Stack, Datadog
• Centralized logging (ELK, Splunk, CloudWatch)
• APM and distributed tracing (Jaeger, DataDog, New Relic)

Software Engineering & Architecture

• Proficiency in Python, Go, Java, or Bash
• REST APIs, microservices, event-driven systems
• Software design principles and testing strategies

Soft Skills

• Innovation mindset  — prototyping, experimentation, "failing fast"
• Entrepreneurial drive  — ownership, bias toward action
• Communication  — technical and non-technical stakeholders
• Collaboration  — across Development, Security, and Operations
• Teaching mindset  — mentoring teams on automation best practices
• Continuous learning  — staying current with emerging technologies

Preferred Skills

• Open-source contribution or community involvement
• Service mesh experience (Istio, Linkerd)
• GitOps platform experience (ArgoCD, Flux)
• Incident response and postmortem facilitation

Success Metrics & KPIs

DORA Metrics

• Deployment frequency: weekly → daily or multiple-times-daily
• Lead time for changes: weeks → days/hours
• MTTR: reduce by 50%+
• Change failure rate: reduce failed deployments and rollbacks

Automation Coverage

• Infrastructure-as-Code:  100%  defined in code
• Security scanning:  90%+  automated
• Testing:  95%+  executed automatically
• Deployments:  90%+  via automated pipelines

Platform Adoption

• Developer adoption:  80%+  of CIB developers using self-service platform
• Self-service deployments:  80%+  of production deployments
• Developer toil reduction:  20%+  in manual tasks
• Developer satisfaction:  80%+  satisfaction score

Innovation Impact

• Technologies prototyped:  2-3 per year
• Prototype-to-production rate:  60%+  within 18 months
• Regular innovation updates to CIB CIO community

AI4DevOps Maturity

• AI agent governance framework: established and documented
• AI-driven infrastructure changes:  30%+
• Agent success rate:  95%+  reliability
• Proactive threat detection via LLM-based modeling

Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are committed to being inclusive, caring, and fair, ensuring every voice is heard and valued.