Engineer

Senior Software And Systems Engineer

BNY is seeking two senior software and systems engineers to accelerate modernization of the Secrets Management System (SMS) and Responsibility and Entitlements (RME) platforms. These engineers will own work across the full delivery lifecycle—from requirements and architecture through implementation, testing, deployment, and production support. The initial priorities are expected to include a Java 25 uplift and secure AI enablement through Model Context Protocol (MCP) services, with flexibility to support other high-value SMS and RME initiatives.

Key Responsibilities

• Lead or materially contribute to the upgrade of enterprise Java applications to Java 25.
• Assess code, frameworks, third-party libraries, build tooling, runtime dependencies, interfaces, and operational impacts.
• Define and execute unit, integration, regression, performance, security, and release-validation strategies.
• Translate business and technical needs into clear requirements, designs, implementation plans, acceptance criteria, and support documentation.
• Design and deliver scalable, resilient, secure, and maintainable enhancements across SMS and RME.
• Evaluate, design, and potentially implement MCP services connecting approved SMS and RME capabilities to BNY's AI ecosystem.
• Apply enterprise controls for identity, authorization, secrets, least privilege, auditability, logging, data protection, and vulnerability management.
• Support production applications through incident analysis, root-cause investigation, code fixes, controlled changes, and operational handoff.
• Partner with architecture, security, cloud, AI, product, testing, operations, and distributed engineering teams.
• Provide technical guidance, surface risks early, and help the team navigate unfamiliar or evolving technology areas.

Required Qualifications

• Senior-level experience designing, building, testing, deploying, and supporting enterprise Java applications.
• Hands-on experience completing major Java/JDK upgrades or comparable platform modernization efforts.
• Strong understanding of dependency compatibility, build pipelines, automated testing, regression analysis, secure coding, and release management.
• Experience with Angular or another modern front-end framework and the ability to troubleshoot integrated full-stack applications.
• Strong systems-engineering mindset and understanding of the complete software delivery lifecycle.
• Experience with REST APIs, service integration, source control, CI/CD, observability, defect management, and controlled production change.
• Understanding of authentication, authorization, entitlement models, secrets management, and security-first application design.
• Ability to work independently in an ambiguous environment, develop structure, and drive assignments to measurable completion.
• Clear written and verbal communication, effective collaboration, and a proactive, accountable work style.

Preferred Qualifications

• Experience designing, building, securing, or operating MCP servers or similar AI-to-enterprise integration layers.
• Understanding of enterprise AI architecture, knowledge integration, retrieval patterns, evaluation, guardrails, and AI-assisted development.
• Experience with public cloud platforms, particularly Azure; AWS or GCP exposure is also valuable.
• Experience in highly regulated financial-services environments.
• Knowledge of identity and access management, policy services, segregation of duties, secrets rotation, or credentials migration.
• Experience with container platforms and secure application deployment.
• Background in vulnerability remediation, audit evidence, and security/compliance controls.

What Success Looks Like

• Rapidly understands the SMS and RME application landscape and begins contributing with limited hand-holding.
• Produces an actionable Java 25 modernization assessment and executes the uplift with complete regression and release evidence.
• Clarifies MCP use cases and delivers a secure, supportable design or implementation aligned with BNY's AI and security standards.
• Improves delivery capacity without diverting existing team members from other priority work.
• Leaves behind maintainable code, clear documentation, repeatable testing, and operationally ready solutions.