SAST System Engineer

Role Summary:

The Systems Engineer will be responsible for supporting, maintaining, and enhancing the CheckMarx SAST environment within the organization. This role focuses on environment setup, configuration, and ongoing operational support, including version upgrades and integration with CI/CD pipelines. While direct experience with CheckMarx upgrades is preferred, candidates with strong application security, DevSecOps, or enterprise software upgrade experience-and a willingness to learn CheckMarx-specific processes are encouraged to apply.

Key Responsibilities:

Install, configure, and maintain CheckMarx SAST environments across development and production systems.

Plan, prepare, and execute CheckMarx version upgrades, patches, and hotfixes while ensuring minimal service disruption.

Troubleshoot environmental issues related to CheckMarx architecture, including components such as SAST Engine, Manager, Database, Load Balancers, and Access Control.

Work closely with Security, DevOps, and Development teams to ensure seamless integration of CheckMarx into CI/CD pipelines.

Develop and maintain documentation, including system diagrams, runbooks, upgrade guides, and operational procedures.

Monitor system health, performance, and scalability; proactively identify opportunities for optimization.

Manage user access, RBAC policies, and authentication integrations (AD/LDAP/SSO).

Support application onboarding, project configurations, scanning policies, and scan troubleshooting.

Participate in audit, compliance, and security review activities related to the SAST environment.

Required Qualifications & Skills:

Strong experience as a Systems Engineer, DevSecOps Engineer, or Application Security Engineer working with enterprise security or scanning platforms.

Hands-on experience with CheckMarx SAST in setup, configuration, or operational support (upgrade experience a plus but not mandatory).

Solid understanding of Windows Server or Linux administration, networking, and system architecture.

Experience performing upgrades or patching for enterprise applications (e.g., application servers, security platforms, databases).

Familiarity with CI/CD tools such as Jenkins, Azure DevOps, GitLab, Bamboo, or similar.

Ability to troubleshoot complex technical issues involving multiple system layers (application, database, OS, authentication).

Strong documentation, communication, and analytical skills.

Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications:

Prior experience with CheckMarx SAST upgrades, migrations, or cluster setup.

Exposure to DevSecOps tools such as SonarQube, Veracode, Fortify, or similar SAST/DAST systems.

Experience with containerization technologies (Docker, Kubernetes) and cloud environments.

Understanding of secure development practices and application security principles.

Knowledge of SQL Server administration and performance tuning (specific to CheckMarx use cases).

Experience integrating SAST tools with SDLC and security governance workflows.

Tools & Technologies:

SAST Platforms: CheckMarx SAST (required), CheckMarx CxFlow, optional exposure to SonarQube / Fortify / Veracode

Operating Systems: Windows Server, Linux

CI/CD & DevOps: Azure DevOps, Jenkins, GitLab CI, GitHub Actions, Bamboo

Databases: Microsoft SQL Server, DalaLakes, Postgres

Identity & Access Management: Active Directory, LDAP, SSO, OAuth/SAML

Scripting & Automation: PowerShell, Bash, Python (optional)

Infrastructure & Monitoring: IIS, NGINX, Docker/Kubernetes, Log monitoring tools

Version Control: Git-based platforms