PHP Developer/Software Engineer

Position :: PHP Developer/Software Engineer

Location(s): Covington, KY.















CANDIDATE PROFILE:




This req was built today and has already been approved in Prosource. This req requires onsite participation, so subject to the additional req audit at extension but seems likely to be approved faster than other positions as of late.




Fidelity's updated Mend security scanning policy will require proactive daily scanning of all GitHub repositories. As a result, we are sourcing for PHOP developers with Mend/security experience.




Legacy applications developed by 3rd party vending teams did not meet Fidelity standards. Legacy Migration from PHP to Angular/Node.js has begun. Until all PHP apps have been converted (years from now) Mend standards will require maintenance and updates.




The hiring manager is prepared to hire a PHP developer with Mend experience and train on everything else listed below. With limited reqs to recruit on we have seen quality of submission skyrocket.




The ideal candidate is a PHP developer who has experience providing Mend support to active legacy applications in the environment, while providing support to the migration to Angular/Node.js. These typescript competencies, along with Kubernetes and experience deploying applications on their own to Azure would greatly support the staff.







The Role
This role is focused on maintaining and securing legacy PHP applications while supporting a long-term modernization effort to Angular and Node.js. The position requires at least 5 years of software engineering experience, with strong hands-on PHP development skills and experience using Mend.io or similar security scanning tools to identify and remediate vulnerabilities, particularly higher-severity issues. Responsibilities include reducing security exposure across PHP applications, troubleshooting and enhancing legacy systems, following secure coding practices, addressing OWASP vulnerabilities, and helping migrate PHP and jQuery functionality to modern Angular and Node.js architectures.








The ideal candidate brings PHP 8, Angular 17+, Node.js, TypeScript, JavaScript, REST APIs, MySQL, Git, automated testing, and TDD experience. Knowledge of CodeIgniter, Mend, CodeQL, SonarQube, Docker, Kubernetes, Helm, Azure or AWS, CI/CD, and enterprise authentication technologies is beneficial. Day-to-day work includes application development, security remediation, automated testing, technical design, code reviews, collaboration with architects and developers, and participation in Agile ceremonies. Strong PHP and Mend/security experience are the primary priorities, while experience with Angular, Node.js, Kubernetes, and independently deploying applications to Azure would be especially valuable.







Must Have:

• 5+ years' experience
• Mend vulnerability experience with ratings of 8.0 and above
• Reducing security exposure across PHP applications
• Supporting the modernization of applications by converting PHP and jQuery-based functionality to Angular where appropriate
• Mend.IO

Nice to Have:

• Angular
• Node.js
• Typescript
• jQuery
• JavaScript
• CodeIgniter
• Kubernetes and the cloud
• Azure deployments