Oliver Wyman - Lead DevSecOps Engineer

Marsh & McLennan Companies, Inc.•Boston, MA

44d•Hybrid

About The Position

Oliver Wyman Digital is a ground-breaking division within Oliver Wyman delivering world-class solutions to give our clients a competitive edge. We work across the full technology stack from databases and analytics to APIs and web and mobile applications. With a mixture of over 700 consultants, specialists, and support professionals in 16 major cities across the world, we are committed to growth that retains our start-up agility while expanding our opportunities for world-class work. Oliver Wyman is a global leader in management consulting. With a staff of over 4000 across 30 countries, Oliver Wyman combines deep industry knowledge with specialized expertise in strategy, operations, risk management, and organization transformation. No two OW Digital projects are the same. You'll be working with varied and diverse teams to deliver unique and unprecedented solutions across industries. The Lead DevSecOps Engineer is not a Sys Admin or Site Reliability Engineer, though many of those skills will be useful in the role. Our DevSecOps team lives under our Engineering Capability, the team responsible for conceiving, designing and delivering breakthrough solutions for clients and other Oliver Wyman teams. You will join teams staffed to client projects and must constantly invent new things, not maintain an existing platform. This role "plays well with cloud" but is more like a software engineer with a DevSecOps specialization. Conceiving, designing and delivering the project infrastructure is paramount. This might include working directly with client IT teams to understand and advise around their own infrastructure. You also need some familiarity with how the major application frameworks (Node, Java, Python) operate. And while some coding experience is extremely helpful, the main thing is you are part of the dynamic staffing team. We expect the person in this role to: Craft technical solutions to challenging problems Partner with OWG practice groups (e.g., Retail, Health & Life Sciences, etc.) and client teams to understand business and client infrastructure needs and opportunities Advise on and support secure infrastructure solutions for teams, whether building on our internal hosting solution or with our clients seeking in-house digital transformations Drive the DevSecOps role on technical projects (as a leader or contributor), rarely missing opportunities for good solution design and promoting clarity, robustness, security, performance and scalability Define engineering goals for clients from non-technical briefings, act as the go-to for infrastructure solutions on a project and technically lead that workstream Communicate technical ideas clearly to any audience and write documentation for an entire solution or program of work Objectively and fairly assess and influence technology decisions based on an understanding of the project's objectives and goals Contribute significantly to a discovery phase, run estimation sessions with teams and provide estimates on complex solutions Recognize, execute or direct refactoring opportunities across complex or interdependent systems Actively build trust and credibility with both technical and non-technical stakeholders within OW

Requirements

Building things using different tools and technologies
Adapting to evolving technical trends
Working across varying facets of the technology stack
Public cloud environments (e.g., AWS, Azure, GCP)
Versatility around technology and an ability to apply the appropriate technology to problem-solving
Handling multiple workstreams and prioritizing accordingly
Enterprise-scale delivery of full-stack systems with security, extensibility, and robustness at the forefront
Being fungible and flexible to work on a variety of technologies, including those that are new or unfamiliar to you
Client relationship building and ongoing client relationship management
A genuine passion for technology and solving problems
A pragmatic approach to solutioning and delivery
Excellent communication skills, both verbal and written
A clear commitment to creating impactful solutions that solve our clients' problems
The willingness to work fluidly and respectfully with our incredibly talented team

Nice To Haves

DevSecOps tools: Docker, Rancher, Kubernetes, Jenkins, Terraform
Cloud Platforms: AWS, Azure
Infrastructure-as-Code/Platform-as-Code cloud-native tooling: Serverless, EKS, AKS
Operating Systems: Windows Server, Linux (Ubuntu)
Scripting: Python, Bash, PowerShell, AWS CLI, Azure RM
Web application capabilities: Node.js, Express, REST APIs
Cloud-native tooling on Amazon (e.g., RDS, Aurora) and Azure (e.g., Azure Managed Instances, Azure SQL Database)
Progression and implementation against the OWASP DevSecOps Maturity Model
Monitoring and logging: Prometheus, CheckMK, Nagios, Grafana, Fluentd, Splunk
Python

Responsibilities

Craft technical solutions to challenging problems
Partner with OWG practice groups (e.g., Retail, Health & Life Sciences, etc.) and client teams to understand business and client infrastructure needs and opportunities
Advise on and support secure infrastructure solutions for teams, whether building on our internal hosting solution or with our clients seeking in-house digital transformations
Drive the DevSecOps role on technical projects (as a leader or contributor), rarely missing opportunities for good solution design and promoting clarity, robustness, security, performance and scalability
Define engineering goals for clients from non-technical briefings, act as the go-to for infrastructure solutions on a project and technically lead that workstream
Communicate technical ideas clearly to any audience and write documentation for an entire solution or program of work
Objectively and fairly assess and influence technology decisions based on an understanding of the project's objectives and goals
Contribute significantly to a discovery phase, run estimation sessions with teams and provide estimates on complex solutions
Recognize, execute or direct refactoring opportunities across complex or interdependent systems
Actively build trust and credibility with both technical and non-technical stakeholders within OW