Software Engineer - Python

Seeking a Software Engineer with 3-5 years of hands-on experience building, deploying, and operating applications and platform capabilities on Kubernetes/OpenShift. The ideal candidate is proficient in Python, experienced with CI/CD pipeline development, bitbucket and can implement and maintain Policy as Code to enforce governance, security, and compliance across container platforms.

You will collaborate with engineering, platform, SRE, and security partners to automate delivery workflows, strengthen reliability and controls, and enable teams to ship software safely and efficiently.

Your future duties and responsibilities

o Design, develop, and maintain Python-based services, automation tools, and platform utilities supporting containerized workloads.

o Build and enhance CI/CD pipelines for automated build, test, security scanning, deployment, and release orchestration.

o Deploy, operate, and troubleshoot applications on Kubernetes/OpenShift, including configuration, scaling, upgrades, and runtime issues.

o Implement Policy as Code to enforce standards (security, networking, resource controls, image provenance, RBAC, etc.) and prevent configuration drift.

o Integrate DevSecOps controls: SAST/DAST, container image scanning, SBOM generation/validation, secrets detection, and compliance checks into pipelines.

o Create and maintain infrastructure/platform artifacts such as:

o Kubernetes manifests (Deployments, Services, Ingress/Routes, ConfigMaps, Secrets)

o Helm charts and/or Kustomize overlays

o OpenShift resources (Projects/Namespaces, Routes, SCCs, Operators as applicable)

o Improve platform reliability through monitoring/alerting integration and root cause analysis (RCA) for production issues.

o Contribute to engineering standards and documentation (runbooks, SOPs, onboarding guides).

o Participate in code reviews, design reviews, and agile ceremonies; communicate risks, tradeoffs, and implementation details clearly.

o 3-5 years of professional software engineering experience.

o Platform Maintenance Requirements

o Strong Python development experience (APIs, automation, scripting, packaging, unit testing).

o Experience administering Apache httpd, including mod_proxy, mod_rewrite, and OIDC authentication modules.

o Experience configuring Azure EntraID application registrations, client credentials, OAuth2/OIDC endpoint integration, and API permissions - including integrating EntraID as an identity provider into web applications via OIDC.

o Preferred - Familiarity with JupyterHub, Apache Airflow, and MLflow in a containerized environment.

o Preferred - Working knowledge of Apache Spark standalone cluster deployment and configuration

o Preferred Basic React/JavaScript familiarity for maintaining portal UI assets.

o Hands-on Kubernetes/OpenShift experience, including deploying and troubleshooting workloads.

o Experience building CI/CD pipelines (e.g., Jenkins, UDeploy).

o Experience with Policy as Code concepts and tooling, such as:

o Static Security Analysis (SAST), Interactive Security Testing (IAST)

o Policy testing/validation and policy lifecycle management

o Solid understanding of:

o Git-based workflows, branching strategies, and pull request reviews

o JIRA, Confluence

o Linux fundamentals, networking basics, and troubleshooting in distributed systems

o Working knowledge of security best practices: RBAC, least privilege, secrets management, and secure SDLC.

Required Skills:

• Bitbucket
• GIT
• Python Ref: #404-IT Pittsburgh

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.