Job Description:

Position Description:

Deploys application builds according to Continuous Integration/Continuous Deployment (CI/CD) methodologies, using GIT, Maven, and Jenkins. Designs and develops 12 factor Cloud complaint backend applications, using Active Directory, JDBC, SCIM 2.0, and Azure Active Directory. Develops and builds Application Programming Interfaces (APIs) according to REST frameworks, using Java. Collaborates on an autonomous team and owns all aspects of delivery (coding, quality, and DevSecOps). Uses business knowledge to translate the vision for divisional initiatives into business solutions by developing complex or multiple software applications and conducting studies of alternatives. Analyzes and recommends changes in project development policies, procedures, standards, and strategies to development experts and management.

Primary Responsibilities:

• Participates in architecture design teams.
• Defines and implements application-level architecture.
• Develops applications on complex projects, components, and subsystems for the division.
• Recommends development testing tools and methodologies and reviews and validates test plans.
• Responsible for QA readiness of software deliverables.
• Develops comprehensive documentation for multiple applications or subsystems.
• Establishes full project life cycle plans for complex projects across multiple platforms.
• Responsible for meeting project goals on-time and on-budget.
• Advises on risk assessment and risk management strategies for projects.
• Plans and coordinates project schedules and assignments for multiple projects.
• Acts as a primary liaison for business units to resolve various project/technology issues.
• Provides technology solutions to daily issues and technical evaluation estimates on technology initiatives.
• Advises senior management on technical strategy.
• Mentors junior team members.
• Performs independent and complex technical and functional analysis for multiple projects supporting several divisional initiatives.
• Develops original and creative technical solutions to on-going development efforts.

Education and Experience:

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Textile Technology, or a closely related field (or foreign education equivalent) and five (5) years of experience as a Principal Software Engineer/Developer (or closely related occupation) designing, developing, and supporting Identity and Access Management (IAM) solutions within an enterprise or product environment.

Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Textile Technology, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Software Engineer/Developer (or closely related occupation) designing, developing, and supporting Identity and Access Management (IAM) solutions within an enterprise or product environment.

Skills and Knowledge:

Candidate must also possess:

• Demonstrated Expertise (“DE”) architecting and deploying enterprise-grade IAMsolutions, implementing robust entitlement management, and enforcing role-based access controls (RBAC) to align with comprehensive enterprise lifecycle governance and compliance frameworks.
• DE designing and developing applications using a modern Java stack—Spring Framework, Spring Boot, and Microservices—integrated with Hibernate, RESTful APIs, Maven, and Gradle; deploying scalable solutions on Tomcat and WebSphere, to manage data across Oracle, MySQL, and MongoDB; and querying and integrating user and group data from enterprise directories (Active Directory and Lightweight Directory Access Protocol (LDAP)) to support IAM workflows.
• DE modernizing legacy enterprise systems by reengineering monolithic Spring applications into modular, Cloud-native Spring Boot microservices; and automating CI/CD pipelines with Jenkins, Git, Docker, and Kubernetes, to drive production readiness and operational efficiency across development lifecycles.
• DE monitoring and troubleshooting production applications, and proactively identifying performance bottlenecks and access-related anomalies, using Splunk and Datadog; and optimizing authentication flows, entitlement processing, and directory integrations, to ensure high availability, security, and responsiveness of identity services in an enterprise environment.

#PE1M2

#LI-DNI

Certifications:

Category:

Information Technology

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.