Software Engineer - Cloud and DevOps

Zions Bancorporation•Midvale, UT

1d•Hybrid

About The Position

Zions Bancorporation’s Enterprise Technology and Operations (ETO) team is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients and colleagues the best experience possible for over 150 years. Help us transform our workforce of the future, today. We are looking for a Software Engineer who brings a strong focus on DevSecOps and cloud platforms, while staying grounded in how full-stack applications run. In this role, you won't just be writing isolated application features or running manual deployment checklists, you’ll be building the pipelines, cloud environments, and automated guardrails that let our engineering teams ship secure, resilient code quickly. Our platforms span modern front-end interfaces, microservices, and complex data layers, full-stack literacy is essential. While your day-to-day will heavily revolve around automated security, infrastructure, and CI/CD reliability, you should feel right at home opening up application code, troubleshooting API integrations, diagnosing bottlenecks, and working side-by-side with developers across the stack. Visa Sponsorship: This position is currently not eligible for employment visa sponsorship (e.g., H-1B visa). This includes, for example, situations where a candidate may have temporary work authorization while enrolled in school or upon graduation (e.g., CPT, OPT) but would need H-1B visa sponsorship within a few years of employment in order to maintain employment eligibility.

Requirements

Cloud Engineering: Firsthand experience building, deploying, and operating services in the cloud—GCP experience is a big plus, but strong AWS or Azure experience works just as well.
DevSecOps & Automation: Practical experience with CI/CD tools (GitHub Actions, Azure DevOps, Jenkins, etc.) and direct experience baking security tools and automated checks into those pipelines.
Containers & Orchestration: Solid working experience with Docker containerization and Kubernetes orchestration.
Full-Stack Awareness & Coding: A real software engineering foundation. You are comfortable reading, debugging, and writing code in languages like Java, Python, C#, or Go, and understand how modern back-end services connect with front-end frameworks (React, Angular) and databases (SQL/NoSQL).
Infrastructure as Code: Experience managing infrastructure programmatically through tools like Terraform.
Security Mindset: A practical grasp of common vulnerabilities, credential and secret management, least-privilege access, and defensive architecture.
Clear, Collaborative Communication: You can talk through technical trade-offs with developers, product managers, and operational teams without relying on jargon.
Bachelor’s degree in Computer Science, Computer Engineering, or a related field (or equivalent practical experience).
4+ years of professional engineering experience across software development, cloud computing platforms, and DevOps/DevSecOps practices.

Nice To Haves

Experience in banking, financial services, or similarly regulated environments where compliance and data protection are top priorities.
Familiarity with API gateways, web application firewalls (WAF/CDN telemetry), or edge routing.
Direct experience with modern observability platforms (e.g., Splunk, Grafana, Datadog, Prometheus) and synthetic health monitoring.

Responsibilities

Bake Security into the Pipeline (DevSecOps): Embed automated security checkpoints into our CI/CD workflows—including SAST, dependency/vulnerability scanning (SCA), container image inspection, secret detection, and policy-as-code enforcement.
Build & Maintain CI/CD Pipelines: Design and maintain fast, reliable build and release pipelines that make continuous delivery safe and predictable for our development teams.
Design & Manage Cloud Infrastructure: Provision, monitor, and scale cloud workloads using Infrastructure-as-Code (IaC), with an eye toward network boundaries, least-privilege IAM, and cost efficiency.
Bridge Applications and Infrastructure: Partner with engineering teams across the stack (React/Angular front-ends, Java/Python/.NET back-ends, and relational/NoSQL data stores) to troubleshoot issues, optimize performance, and design secure software solutions.
Observability & Operational Health: Implement meaningful logging, metrics, alerting, and telemetry so that application performance and security issues are flagged long before users notice them.
Pragmatic Automation & AI: Leverage smart automation, scripting, and emerging AI tools to reduce operational friction and help engineers move faster without compromising safety.
Shape Engineering Practices: Take part in design and architecture reviews, advocating for resilient architecture, sensible security defaults, and maintainable systems.