Development Administration Analyst – Automation & Process

Citi•Mississauga, ON

1d•Hybrid

About The Position

The Development Administration Analyst – Automation & Process Engineering is a hybrid role that combines the operational discipline of application governance and risk management with hands-on technical capability to build automation solutions. Reporting into the Application Management Office (AMO), this position is designed to streamline application management processes while actively engineering tools and workflows that eliminate manual, repetitive work. The analyst possesses excellent communication and stakeholder management skills, while also serving as a builder who can design, develop, and deploy end-end automation solutions. The core mission is twofold: (1) proactively manage administrative and compliance tasks, ensuring development teams operate efficiently within the firm's risk and control framework, and (2) identify, design, and implement automation opportunities that drive measurable efficiency gains across the AMO's operational landscape.

Requirements

8+ years of IT experience, with a minimum of 3+ years in a relevant Application Development, Production Support, DevOps, or Software Engineering role.
A minimum of 2+ years of professional experience in full-stack development, software engineering, or a hands-on automation role.
Exceptional ability to plan, organize, and manage a demanding workload, with the capacity to adjust quickly to changing priorities.
Demonstrable experience navigating large, complex enterprise environments with formal risk and control processes.
Excellent communication skills and a proven ability to liaise with a large number of diverse stakeholders, from technical developers to senior managers.
Strong understanding of the full Software Development Lifecycle (SDLC) process, modern DevOps/DevSecOps principles, and system architecture.
Bachelor's degree/University degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.

Nice To Haves

Experience supporting the management of vendor-supplied applications, including coordinating with third-party support and internal risk assessment teams, is highly desirable.
Experience in Capital Markets or a similar regulated financial domain is a significant advantage.
Jira or equivalent agile tracking tool.
Microsoft Excel (Intermediate to Expert) for data analysis and reporting.
Strong programming proficiency in Python and experience with web frameworks (e.g., Flask, Django).
Proven experience in front-end development using JavaScript/TypeScript, HTML, CSS, and modern frameworks (e.g., React, Angular, Vue).
Proficiency with Git and GitHub for version control and collaborative development.
Experience with browser automation tools like Selenium or Playwright.
Experience with Project Management tools.
Foundational knowledge of ITIL concepts.
Familiarity with DevSecOps toolchains (e.g., Blackduck, Snyk, Checkmarx).
Proficiency with containerization technologies such as Docker, and container orchestration platforms like Kubernetes or OpenShift.
Experience deploying and managing applications on major cloud platforms (e.g., AWS, Azure, GCP).
Practical experience with CI/CD tools and pipelines.
IT Service Management platforms (e.g., ServiceNow) and low-code automation tools.
Experience with secrets management tools, preferably HashiCorp Vault.
Familiarity with AI development tools (e.g., Claude Code, GitHub Copilot).
Experience working in an Agile/Scrum development environment.

Responsibilities

Act as a delegate for Application Managers to navigate key institutional processes for a portfolio of applications.
Facilitate and monitor requests within internal governance platforms for key application lifecycle events, such as new application onboarding and the management of risk and control incidents.
Manage application metadata and ensure its accuracy within the Citi's internal systems, reflecting the correct risk posture, data classification, and ownership.
Proactively manage the administrative execution of the firm's risk and control framework, ensuring adherence to performance metrics and timely task completion.
Serve as a liaison between development teams, Application Managers, and control groups (e.g., Information Security, Enterprise Architecture).
Facilitate and track submissions for technology risk and control assessments and requests for using non-standard or restricted technologies.
Ensure all necessary architecture sign-offs (e.g., for cloud environment onboarding) are completed on schedule by coordinating with the relevant stakeholders.
Act as a primary administrative point of contact between internal technical teams and external software vendors.
Coordinate the third-party risk assessment process for new and existing vendors, working alongside Information Security, Procurement, and Legal teams.
Facilitate technical support sessions with vendors to troubleshoot application issues, and coordinate the deployment of vendor-supplied patches, upgrades, and compliance activities.
Maintain clear and accessible documentation for vendor contracts, support procedures, and key contacts.
Collaborate with Information Security Officers and development teams to document and track compliance with key security requirements.
Support the coordination of Application Vulnerability Assessments (AVA) and penetration testing and monitor the remediation of identified findings in vulnerability management tools (e.g., Blackduck, Snyk, Checkmarx).
Assist in the management and maintenance of the application's Software Bill of Materials (SBOM) to ensure all third-party components are licensed, secure, and compliant.
Design, build, and maintain end-to-end web applications and services that automate administrative tasks, such as user management reporting, compliance evidence collection, and mailbox processing.
Create robust backend services, RESTful APIs, and data processing pipelines using Python to drive core automation logic for AMO workflows.
Develop user-friendly web interfaces, dashboards, and tools that allow stakeholders to interact with, manage, and monitor automation solutions.
Apply development skills to implement complex automation workflows using tools like Selenium and Playwright where necessary (e.g., automating interactions with legacy governance portals).
Own the deployment and operation of automation applications, utilizing CI/CD pipelines, containerization (Docker, Kubernetes/OpenShift), and cloud platforms.
Manage all application code, scripts, and configurations using Git and GitHub, adhering to best practices for version control and collaborative development.
Develop and maintain comprehensive knowledge maps identifying key stakeholders, processes, and contacts for specific applications and Lines of Business (LOBs).
Create and refine knowledge bases for repeatable administrative and compliance tasks to drive efficiency and consistency.
Work closely with development teams to understand their administrative pain points, analyze workflows, and translate their needs into technical requirements and effective software solutions.
Generate and distribute clear and concise status reports to keep Application Managers and other stakeholders informed of progress, potential risks, and upcoming deadlines.