Principal Full Stack Engineer

Fidelity Investments; Roanoke (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

Fidelity Investments seeks a senior systems engineer to design and operate scalable authorization platforms for Brokerage Recordkeeping Technology. You will build cloud-native services in AWS, champion RBAC/ReBAC and JWT-based security, and guide developers with real-time metrics and automation.

Ideal candidates bring 10+ years designing customer-facing apps, 7+ years with complex architectures, and 5+ years in agile environments.

Qualifications

• Bachelor’s degree in computer science or equivalent experience.
• 10+ years of designing and implementing full stack end-to-end customer-facing applications.
• 7+ years in complex architectural designs and technology initiatives.
• 5+ years in agile development (Scrum/Kanban).
• Experience with INC management / Problem Management of Tier 0 platforms and 24x7 operational excellence.
• Extensive knowledge of Java, Spring Framework and Spring Boot.
• Hands-on development in AWS: Lambda, EKS, S3, DynamoDB, Kinesis.
• Understanding of modern authorization architectures: RBAC, ReBAC, JWT, OAuth 2.0.
• Proven ability to architect fine-grained access control and enterprise-grade authorization systems.

Responsibilities

• Architect and implement scalable authorization systems balancing security and performance.
• Develop RESTful services using Java/J2EE, Spring Boot, Swagger; ensure robust APIs.
• Lead DevOps with CI/CD tooling (Jenkins) and cloud-native deployment.
• Monitor, log, and tune highly scalable cloud applications with real-time metrics.
• Drive production incidents analysis, root cause, and continuous improvement.

Skills

Java

Spring Framework

Spring Boot

AWS

RBAC

ReBAC

JWT/OAuth2

RESTful services

Docker

Jenkins/CI-CD

OpenFGA

Performance monitoring

Cloud databases

Education

Bachelor’s degree in computer science or equivalent experience

Tools

Swagger

Docker

Kubernetes

YAML/JSON

Job description

Job Description

Note: Fidelity will not provide immigration sponsorship for this position

The Team: Fidelity’s Brokerage Authorization team builds and operates the core platform that enables secure, scalable access control for Brokerage Recordkeeping Technology. As part of Shared Services Engineering, the team is transforming authorization from mainframe to cloud‑native architectures, delivering platforms and frameworks that support public cloud adoption at scale.

Ideal candidates will have a background in Software Engineering with a strong desire to focus on building performant, high scale, highly available and resilient systems. We are looking for a Systems Thinking Engineer who, through extensive production insights, operational automation, developer guidance, real-time metrics, and automation will guide the team.

• Bachelor’s degree in computer science or equivalent experience.
• 10 plus years of experience in designing and implementing full stack end-to-end customer-facing applications, financial industry experience a plus.
• 7 plus years of experience working in complex architectural designs and technology initiatives.
• 5 plus years of experience working in agile development environment (Scrum/Kanban).
• Experience Handling INC management / Problem Management of Tier 0 platforms and driving 24x7 operational excellence
• Extensive Knowledge of Java and Spring Framework and Spring Boot
• Hands-on application development experience with Public Cloud environments: AWS – Lambda, EKS, S3, Dynamo DB, Kinesis
• Deep understanding of modern authorization architectures, including RBAC, ReBAC, JWT-based authorization, and OAuth 2.0.
• Proven track record of architecting fine-grained access control frameworks, scalable entitlement models, and enterprise-grade authorization systems that balance security, performance, and developer experience. Strong understanding of policy-based authorization patterns and distributed access management. Experience with OpenFGA or comparable ReBAC platforms is highly desirable
• Designing and developing RESTful services using Java/J2EE, Spring Boot, Swagger, Docker, YAML, JSON.
• Solid Understanding of DevOps CI/CD tools like Jenkins/ Jenkins Core.
• Proven experience in maintaining scalability and resiliency in a complex environment.
• In-depth understanding and experience with performance metrics, logging, monitoring, alerting, testing, and tuning for highly scalable cloud applications.
• Proven experience in maintaining scalability and resiliency in a complex environment.
• Proficient in working with Cloud Databases, creating and leading database objects like tables, views, indexes, Stored Procs and optimizing database performance through query tuning, indexing, analyzing performance reports.
• Demonstrated expertise in Production support, including incident management, root cause analysis, real-time monitoring, and high availability and reliability of critical systems in a fast-paced environment.
• Ability to triage, execute root cause analysis, and be decisive under pressure.

Fidelity’s Onsite Working Model

Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement‑related financial activities and the rules and regulations of numerous self‑regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.