Software Engineer (Python) - Local to Pittsburgh, Dallas, or Cleveland

CGI•Pittsburgh, PA

3d•Onsite

About The Position

CGI is seeking a Software Engineer with 3–5 years of hands-on experience building, deploying, and operating applications and platform capabilities on Kubernetes/OpenShift. The ideal candidate is proficient in Python, experienced with CI/CD pipeline development, bitbucket and can implement and maintain Policy as Code to enforce governance, security, and compliance across container platforms. You will collaborate with engineering, platform, SRE, and security partners to automate delivery workflows, strengthen reliability and controls, and enable teams to ship software safely and efficiently.

Requirements

3–5 years of professional software engineering experience.
Strong Python development experience (APIs, automation, scripting, packaging, unit testing).
Experience administering Apache httpd, including mod_proxy, mod_rewrite, and OIDC authentication modules.
Experience configuring Azure EntraID application registrations, client credentials, OAuth2/OIDC endpoint integration, and API permissions — including integrating EntraID as an identity provider into web applications via OIDC.
Hands-on Kubernetes/OpenShift experience, including deploying and troubleshooting workloads.
Experience building CI/CD pipelines (e.g., Jenkins, UDeploy).
Experience with Policy as Code concepts and tooling, such as: Static Security Analysis (SAST), Interactive Security Testing (IAST), Policy testing/validation and policy lifecycle management.
Solid understanding of: Git-based workflows, branching strategies, and pull request reviews, JIRA, Confluence, Linux fundamentals, networking basics, and troubleshooting in distributed systems.
Working knowledge of security best practices: RBAC, least privilege, secrets management, and secure SDLC.

Nice To Haves

Familiarity with JupyterHub, Apache Airflow, and MLflow in a containerized environment.
Working knowledge of Apache Spark standalone cluster deployment and configuration.
Basic React/JavaScript familiarity for maintaining portal UI assets.

Responsibilities

Design, develop, and maintain Python-based services, automation tools, and platform utilities supporting containerized workloads.
Build and enhance CI/CD pipelines for automated build, test, security scanning, deployment, and release orchestration.
Deploy, operate, and troubleshoot applications on Kubernetes/OpenShift, including configuration, scaling, upgrades, and runtime issues.
Implement Policy as Code to enforce standards (security, networking, resource controls, image provenance, RBAC, etc.) and prevent configuration drift.
Integrate DevSecOps controls: SAST/DAST, container image scanning, SBOM generation/validation, secrets detection, and compliance checks into pipelines.
Create and maintain infrastructure/platform artifacts such as: Kubernetes manifests (Deployments, Services, Ingress/Routes, ConfigMaps, Secrets), Helm charts and/or Kustomize overlays, OpenShift resources (Projects/Namespaces, Routes, SCCs, Operators as applicable).
Improve platform reliability through monitoring/alerting integration and root cause analysis (RCA) for production issues.
Contribute to engineering standards and documentation (runbooks, SOPs, onboarding guides).
Participate in code reviews, design reviews, and agile ceremonies; communicate risks, tradeoffs, and implementation details clearly.