Principal Full Stack Engineer

Fidelity Investments Inc.; Westlake (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

Fidelity Investments Inc. is seeking a Systems Thinking Engineer to join the Brokerage Authorization team as it moves from mainframe to cloud-native architectures.

You will design and implement scalable, secure authorization frameworks and RESTful services in Java/Spring, leveraging AWS services and DevOps practices. You will work in an agile environment, own performance metrics, incident response, and enable developer efficiency while balancing security and speed for customer-facing

Qualifications

• Bachelor’s degree in computer science or equivalent experience.
• 10+ years of experience designing and implementing full stack end-to-end customer-facing applications.
• 7+ years in complex architectural designs and technology initiatives.
• 5+ years in agile development (Scrum/Kanban).
• Experience with INC/Problem Management of Tier 0 platforms and 24x7 operations.
• Extensive knowledge of Java and Spring Framework(s).
• Hands-on with AWS: Lambda, EKS, S3, DynamoDB, Kinesis.
• Deep understanding of RBAC, ReBAC, JWT, OAuth2-based authorization.
• Experience with OpenFGA or similar ReBAC platforms desirable.
• RESTful services using Java/J2EE, Spring Boot, Swagger, Docker, YAML, JSON.
• DevOps CI/CD tools like Jenkins; monitoring and tuning for scalable cloud apps.
• Production support, incident management, and high availability practices.

Skills

Java

Spring Framework

Spring Boot

AWS

Cloud

RBAC

ReBAC

JWT/OAuth2

OpenFGA

RESTful services

Docker

Swagger

YAML

CI/CD (Jenkins)

Performance monitoring

Production support

Database proficiency

Incident management

Education

Bachelor’s degree in computer science or equivalent

Tools

Docker

Swagger

Kubernetes

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

The Team:

Fidelity’s Brokerage Authorization team builds and operates the core platform that enables secure, scalable access control for Brokerage Recordkeeping Technology. As part of Shared Services Engineering, the team is transforming authorization from mainframe to cloud‑native architectures, delivering platforms and frameworks that support public cloud adoption at scale.

Ideal candidates will have a background in Software Engineering with a strong desire to focus on building performant, high scale, highly available and resilient systems. We are looking for a Systems Thinking Engineer who, through extensive production insights, operational automation, developer guidance, real‑time metrics, and automation will guide the team.

The Expertise You Have and The Skills You Bring:

• Bachelor’s degree in computer science or equivalent experience.
• 10 plus years of experience in designing and implementing full stack end-to-end customer-facing applications, financial industry experience a plus.
• 7 plus years of experience working in complex architectural designs and technology initiatives.
• 5 plus years of experience working in agile development environment (Scrum/Kanban).
• Experience Handling INC management / Problem Management of Tier 0 platforms and driving 24x7 operational excellence
• Extensive Knowledge of Java and Spring Framework and Spring Boot
• Hands‑on application development experience with Public Cloud environments: AWS – Lambda, EKS, S3, Dynamo DB, Kinesis
• Deep understanding of modern authorization architectures, including RBAC, ReBAC, JWT‑based authorization, and OAuth 2.0.
• Proven track record of architecting fine‑grained access control frameworks, scalable entitlement models, and enterprise‑grade authorization systems that balance security, performance, and developer experience. Strong understanding of policy‑based authorization patterns and distributed access management. Experience with OpenFGA or comparable ReBAC platforms is highly desirable
• Designing and developing RESTful services using Java/J2EE, Spring Boot, Swagger, Docker, YAML, JSON.
• Solid Understanding of DevOps CI/CD tools like Jenkins/ Jenkins Core.
• Proven experience in maintaining scalability and resiliency in a complex environment.
• In‑depth understanding and experience with performance metrics, logging, monitoring, alerting, testing, and tuning for highly scalable cloud applications.
• Proven experience in maintaining scalability and resiliency in a complex environment.
• Proficient in working with Cloud Databases, creating and leading database objects like tables, views, indexes, Stored Procs and optimizing database performance through query tuning, indexing, analyzing performance reports.
• Demonstrated expertise in Production support, including incident management, root cause analysis, real‑time monitoring, and high availability and reliability of critical systems in a fast‑paced environment.
• Ability to triage, execute root cause analysis, and be decisive under pressure.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full‑time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement‑related financial activities and the rules and regulations of numerous self‑regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.