Automation Lead

Automation Lead

We're standing up a dedicated vulnerability management practice at one of the largest banks in the US, automating what two vendor teams currently do by hand, and building the AI layer that takes it further. The work is hands-on, the impact is visible, and you'll have a delivery team ready to execute behind you from day one. This position is located at our client site in Cleveland, OH, Pittsburgh, PA, or Dallas, TX. For this role on this particular client engagement, employer sponsorship of immigration related visa and/or green card status as part of the PERM process will not be available.

Future Duties and Responsibilities

• Automation Pipeline Development & Maintenance
• Build, maintain, and enhance the runbook library for L1 and L2 vulnerability remediation
• Develop and maintain automation scripts for vulnerability intake, deduplication, and routing across scan sources
• Implement and maintain CI/CD pipeline integrations per architecture specifications
• Build and maintain automated PR generation pipelines for container base image updates and library version bumps across application mnemonics
• Develop and maintain the automated RITM generation integration with ServiceNow
• Ensure automation pipeline health through proactive monitoring, alerting, and self-healing mechanisms
• Policy-as-Code & Security Automation
• Implement policy-as-code rules using OPA/Conftest per framework specifications defined by the Solution Architect
• Build automated policy enforcement and risk-based gating mechanisms within CI/CD pipelines
• Develop and maintain automated vulnerability scanning integrations
• Build feedback loop mechanisms to flag and retest vulnerabilities prior to production deployment
• Implement and maintain compliance automation rules and audit-ready evidence generation
• AI & Intelligent Automation
• Collaborate with AI/ML Engineers to build and maintain the AI triage engine integration
• Build the deduplication layer that normalizes and cross-references vulnerability data across multiple scan sources
• Implement automated vulnerability routing logic based on risk scores, asset criticality, and remediation pathway classification
• Build and maintain AI co-pilot integrations for L3 simple fix PR generation
• Develop feedback loop mechanisms that feed closure data back into the triage model for continuous accuracy improvement
• Reporting & Dashboard Development
• Build and maintain the unified SLA compliance dashboard in Archer
• Develop weekly automated SLA burn-down reports and monthly executive summaries per specifications defined by the Solution Architect
• Build Jira-based tracking integrations unifying WS1 and WS2 reporting into a single view
• Implement automated data pipelines that aggregate vulnerability status across Archer, ServiceNow, Jira, and scan sources into the reporting layer
• Develop and maintain operational metrics dashboards
• Continuous Improvement
• Identify opportunities to automate recurring manual tasks across all three execution crews and implement solutions
• Monitor runbook execution performance and tune scripts to improve throughput and reduce failure rates
• Contribute execution-level insights to the Solution Architect for continuous improvement of the automation framework
• Document all automation scripts, runbooks, and integration patterns in Confluence
• Support knowledge transfer of automation frameworks to execution crew members as new capabilities are deployed

Required Qualifications

8+ years of hands-on experience in DevSecOps, automation engineering, or infrastructure automation

Strong Python scripting, Ansible and Terraform experience

Hands-on Jenkins and GitHub Actions experience

Experience building and maintaining CI/CD security integrations

ServiceNow API integration experience

Docker and container operations experience

OPA/Conftest or equivalent policy-as-code implementation experience

Experience with GRC or vulnerability management platforms

Strong REST API development and integration experience

Jira administration and workflow automation experience

Strong communications (verbal and written) skills and solid technical writing experience

Strong attention to detail to spot discrepancies in transactions or customer information

What You Can Expect From Us

Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team—one of the largest IT and business consulting services firms in the world.