Engineering Lead Analyst – SonarQube & Code Quality Engineering - VP

Citi; Tampa (FL); On-site; USD 114,000 - 171,000; Full time

Job summary

Citi in Tampa, FL is seeking an Engineering Lead Analyst for SonarQube and Code Quality Engineering. You will own static analysis platforms, enforce quality gates, and drive AI-augmented developer enablement across enterprise delivery pipelines.

You will integrate with CI/CD tools, containerize tooling, and mentor teams on clean coding and automated testing. This leadership role requires deep reliability, security governance, and strong collaboration across engineering disciplines.

Qualifications

• 13+ years of experience in software engineering, DevOps, or code quality in large-scale enterprise environments.
• Hands-on administration of SonarQube and related static analysis tools.
• Strong development or scripting skills in Java, Python, JavaScript/TypeScript, or Go.

Responsibilities

• Own architecture, deployment, and continuous improvement of enterprise code quality platforms (on-prem and cloud).
• Integrate automated quality gates and tests into CI/CD pipelines (Tekton, Harness, Jenkins, GitHub Actions).
• Containerize scanning tools with Docker/OpenShift/Kubernetes and manage agents.
• Lead automated BDD testing and ensure high coverage and production readiness.
• Architect AI-enabled developer tooling using Agentic AI and MCP to boost DevEx and velocity.
• Partner with security and architecture teams to remediate CVEs and OWASP risks.

Skills

Java

Python

JavaScript/TypeScript

Go

CI/CD tooling

BDD

AI tooling

Code quality

SAST tools

Docker

Education

Bachelor’s Degree in Computer Science or equivalent

Master’s Degree preferred

Tools

SonarQube

Semgrep

Codacy

DeepSource

Checkmarx

Jenkins

Harness

Tekton

GitHub Actions

OpenShift

Kubernetes

Docker

Podman

Cucumber

Behave

JUnit

PyTest

Playwright

Cypress

MCP

Job description

Engineering Lead Analyst – SonarQube & Code Quality Engineering

is a senior-level engineering role responsible for leading static code analysis, automated code quality governance, security vulnerability remediation, and AI-augmented developer enablement across enterprise software delivery pipelines.

In this role, you will champion software reliability, maintainability, clean-coding standards, and automated quality gates. You will partner with development teams, system architects, and platform engineering to integrate and manage enterprise-scale code quality platforms (such as SonarQube) both on-premises and in cloud/SaaS environments. Additionally, you will drive modern engineering practices by embedding Behavior-Driven Development (BDD) within your own software delivery and leveraging Agentic AI workers and Model Context Protocol (MCP) architectures to optimize developer experience, streamline code governance, and boost engineering velocity.

Key Responsibilities

• Code Quality & Static Analysis Platform Ownership
• Lead the architecture, deployment, administration, and continuous enhancement of enterprise Static Application Security Testing (SAST) and Code Quality platforms (e.g., SonarQube, DeepSource, Codacy, Semgrep).
• Configure, calibrate, and enforce automated Quality Gates, code rulesets, technical debt calculation models, and code-coverage baselines across multi-language enterprise repositories.
• Oversee version upgrades, patching, high availability, and operational maintenance for on-premises and SaaS/cloud-hosted code quality infrastructure.
• CI/CD & Pipeline Integration
• Embed automated code quality scanning and gating into modern CI/CD orchestration platforms (e.g., Tekton, Harness, Jenkins, GitLab CI, GitHub Actions).
• Standardize build-time and pull-request scanning workflows, ensuring seamless developer feedback loops, fast pipeline execution, and automated branch policy validation.
• Containerize and maintain scanning tools and quality agents using Docker, Podman, and OpenShift/Kubernetes environments.
• Automated BDD Testing & Robust Engineering Delivery
• Leverage existing automated Behavior-Driven Development (BDD) testing frameworks (e.g., Cucumber, Behave) within own day-to-day software development lifecycle to ensure all platform features, integrations, and automation scripts promoted to production are of the highest quality.
• Build reliability, robustness, and fault tolerance into all delivered engineering components, maintaining high test coverage and rigorous functional/regression verification prior to release.
• Ensure automated test suites run seamlessly as mandatory validation gates within CI/CD pipelines before promotion to production environments.
• Agentic AI & Model Context Protocol (MCP) Enablement
• Architect, configure, and operationalize Agentic AI workers and Model Context Protocol (MCP) tool ecosystems to enhance developer productivity and modernize code review workflows.
• Integrate AI-driven agents into development environments and CI/CD pipelines to assist engineers with automated quality triage, intelligent remediation suggestions, boilerplate generation, and static analysis interpretation.
• Continuously evaluate and implement emerging AI tools and MCP servers that improve Developer Experience (DevEx), reduce manual toil, and accelerate engineering velocity across the firm.
• Technical Governance, Security Remediation & Root Cause Analysis
• Partner with Cyber Security, Architecture, and Application teams to triage, track, and remediate static code vulnerabilities, Common Vulnerabilities and Exposures (CVEs), and OWASP Top 10 risks.
• Conduct deep-dive root cause analyses (RCA) on recurring defect patterns, code smells, architectural bottlenecks, and pipeline failures.
• Provide subject matter expertise (SME) on clean coding standards, refactoring strategies, and design patterns across languages including Java, Python, JavaScript/TypeScript, and Go.
• Leadership, Mentorship & Stakeholder Management
• Serve as the technical authority on code quality, static analysis, and AI-enabled engineering practices for internal stakeholders and engineering leadership.
• Advise, mentor, and upskill junior engineers and development teams on best practices for clean code, unit testing, BDD execution, and leveraging AI developer tools safely.
• Collaborate with Product Managers, Solution Architects, and Release Engineering to define quality roadmaps, KPIs, and engineering velocity metrics.
• Risk, Compliance & Governance
• Appropriately assess risk during technical decision-making, demonstrating strict consideration for the firm’s reputation and safeguarding Citi’s assets.
• Ensure all quality tools, pipelines, AI agents, and processes adhere to Citi compliance policies, internal audit standards, information security guidelines, and regulatory requirements.

Qualifications & Competencies

Experience & Technical Background

• 13+ years of relevant experience in a Software Engineering, DevOps, or Code Quality Engineering role within a large-scale, complex, or global enterprise (Financial Services experience strongly preferred).
• Static Analysis Platforms: Proven hands-on administration and engineering experience with SonarQube(Enterprise/Data Center edition preferred) and related static analysis/linter tooling (Semgrep, Codacy, DeepSource, Checkmarx, SonarLint).
• Programming Proficiency: Strong development or scripting skills in one or more core languages: Java, Python, JavaScript/TypeScript, or Go.
• CI/CD & DevOps: Deep working knowledge of CI/CD pipeline automation tools such as Jenkins, Harness, Tekton, or GitHub Actions.
• Containers & Cloud: Practical experience with container technologies (Docker, Podman, OpenShift, or Kubernetes).
• BDD & Automated Testing: Proven experience leveraging existing BDD frameworks (Cucumber, Behave) and unit/functional test suites (JUnit, PyTest, Playwright, Cypress) within personal software development workflows to deliver production-grade, highly reliable code.
• Agentic AI & Tooling: Familiarity or hands-on experience with Agentic AI architectures, Model Context Protocol (MCP) server integration, LLM-based coding assistants, or AI-augmented developer tooling.
• Cybersecurity & Compliance: Demonstrated experience in vulnerability management, static security scanning, and automated gating for security compliance.

Soft Skills & Leadership Capabilities

• Exceptional written and verbal communication skills with the ability to convey complex technical concepts to non-technical stakeholders.
• Strong analytical and diagnostic problem-solving skills with a proactive approach to continuous improvement.
• Proven track record of driving operational process improvements and reducing technical debt.
• Ability to thrive in a global matrixed organization, managing tight deadlines and competing priorities independently.

Education

• Bachelor’s Degree / University Degree in Computer Science, Computer Engineering, Information Technology, or equivalent practical experience.
• Master’s Degree in a related technical discipline is preferred.

Job Family Group

Technology

Job Family

Systems & Engineering

Time Type

Full time

Primary Location

Tampa Florida United States

Primary Location Full Time Salary Range

$113,840.00 - $170,760.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards.

Citi offers competitive employee benefits, including:

• medical, dental & vision coverage
• 401(k)
• life, accident, and disability insurance
• wellness programs
• paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays.

Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

Automated Processing and AI We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi. Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details. Illinois residents – AI Notice and Right

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.