Truist Bank-posted 2 days ago
Full-time • Mid Level
Charlotte, NC
5,001-10,000 employees

We are seeking a highly skilled and hands-on Senior Platform Engineer to help engineer and scale enterprise-grade platform services that power consistent, secure, and compliant software delivery. This role focuses on designing, building, and maintaining foundational platform capabilities—including change automation, asset lifecycle tracking, policy-as-code controls, and automated testing infrastructure—that enable high-velocity teams to deliver safely in regulated environments. The ideal candidate brings a software engineering mindset to platform problems, a deep understanding of declarative automation patterns, and experience working across platform domains to deliver reusable, standardized capabilities.

  • Design and build shared services and golden path tooling that standardize how teams manage change, track assets, and enforce policies across hybrid and cloud-native environments.
  • Engineer modular, reusable automation patterns that enable developer self-service while ensuring compliance with enterprise requirements.
  • Collaborate with architects and security stakeholders to translate platform governance requirements into codified controls and declarative enforcement logic.
  • Implement and maintain change automation pipelines that integrate with GitOps, CI/CD, and approval workflows, reducing friction while maintaining control integrity.
  • Contribute to the platform’s definition of done standards related to change visibility, audit trail completeness, rollback safety, and compliance readiness.
  • Contribute to the design and engineering of asset registration and classification systems for infrastructure, applications, APIs, secrets, and deployment artifacts.
  • Develop integration patterns with enterprise CMDBs or asset graphs to support traceability, policy enforcement, and cost attribution across the lifecycle.
  • Implement policy-as-code frameworks (e.g., OPA/Gatekeeper, Kyverno, Sentinel) to enforce runtime, provisioning, and configuration policies in code pipelines.
  • Build pre-commit and pre-deploy hooks to automate policy validation as part of SDLC, ensuring adherence to NIST, FFIEC, SOC2, and other regulatory standards.
  • Deliver actionable feedback loops and policy exemptions aligned with secure-by-design and audit-friendly expectations.
  • Contribute to the design and extension of automated test frameworks for both application and infrastructure components—unit, integration, compliance, contract, and drift detection.
  • Integrate testing standards into golden pipelines, templates, and platform scaffolding used by internal teams.
  • Lead, guide, educate, and provide thought leadership to our delivery teams as related to their optimum adoption of DevSecOps practices and framework.
  • Champion the use of DevSecOps as a strategic asset of culture change to enhance the flow of business value to our clients.
  • Make informed decisions and determine which tool best fits any given situation based on proficiencies with multiple vendor products based on each of the above capabilities.
  • Develop and recommend DevSecOps best practices.
  • Use sophisticated, analytical thought to exercise judgment and design innovative solutions for the most complex components of the DevSecOps lifecycle.
  • Works independently, with guidance in only the most complex situations.
  • Provide technical and process guidance to junior team members.
  • Build and maintain the automation and streamlining of software delivery and operations for new or existing software applications through advanced proficiency and subject matter expertise in vendor tools in the DevOps lifecycle including: a. Infrastructure as Code; Agile and Development Lifecycle Management; Source Code Management; Build Orchestration; Build Management; Artifact Repository Management; Behavior Driven Development; Test Driven Development; Automated Testing including Unit Testing, Integration Testing, Functional Testing, Smoke Testing, Regression Testing, Stress Testing, and Performance Testing; Static Code Analysis; Load and Performance Testing; Artifact Scanning; Database Schema Management, Orchestration and Recovery; Compliance Automation and Audit Trails; Configuration Management; Containers; Application Release Automation; Deployment Strategies and Patterns including Blue/Green Deployment, Canary Releases, and Rolling Releases; Logging and Log Analytics; and Performance Monitoring and Management.
  • Liaise with DevSecOps Center for Enablement (C4E) to ensure that Enterprise tools or practices are followed, and to share information about any team specific tools or practices that may benefit other teams.
  • Active participant with the Truist Agile Guild and Agile DevOps Communities of Practice.
  • Bachelor's degree in Business or Computer Science and ten+ years of experience in software engineering or IT including at least four years of experience in a role in which the primary responsibility is git based application code development and/or DevOps Engineering and/or the development, maintenance, and support of CI/CD pipelines or appropriate combination of industry related professional experience and education
  • Foundational cloud architecture knowledge
  • Must demonstrate ability to write code
  • Must demonstrate ability to construct basic application build pipeline
  • Hands-on experience with platform infrastructure tools such as: Terraform, Helm, ArgoCD, GitHub Actions, Jenkins, Backstage, Kustomize
  • Experience building automated workflows for change, asset, or compliance lifecycle management in regulated environments.
  • Demonstrated success implementing policy-as-code solutions in CI/CD pipelines (e.g., OPA, Kyverno, Sentinel).
  • Proficiency in at least one scripting or infrastructure language (e.g., Python, Go, TypeScript, Bash).
  • Understanding of audit and regulatory control requirements in industries like finance, healthcare, or insurance (e.g., SOX, FFIEC, NIST 800-53/137).
  • Strong communication and documentation skills, with a track record of collaborating across platform, security, and compliance domains.
  • Experience integrating with enterprise CMDBs, asset discovery tools, or telemetry-driven asset classification solutions.
  • Familiarity with ServiceNow Change & Asset modules, or similar ITSM platforms, and experience driving automation around them.
  • Experience developing or contributing to internal developer platforms (IDPs) or developer onboarding scaffolding.
  • Prior contributions to reusable platform scaffolding, controller patterns, or GitOps operator frameworks.
  • Experience with compliance-as-code, GRC tooling integration, or mapping code-based controls to enterprise risk frameworks.
  • Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
  • Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
  • Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service