Principal Technology Engineer

Flagstar Bank; Troy (MI); On-site; USD 108,000 - 173,000; Full time

Job summary

Flagstar Bank seeks a Principal Technology Engineer to own backend compute environments including M365, Azure, AWS, and security suites. The role aligns infrastructure with FFIEC policies, manages certificates, automation, and DR readiness, and collaborates with cross‑functional teams to maintain audit readiness.

The engineer will drive CI/CD pipelines, IaC, and policy enforcement while ensuring monitoring, logging, and incident response across on-prem and cloud platforms.

Qualifications

• Experience in managing large-scale technology environments.
• Familiarity with FFIEC, SOX, HIPAA, NIST or similar compliance frameworks.
• Strong documentation and cross-functional communication skills.

Responsibilities

• Manage Systems, configurations, and system stability
• Technical engineer overseeing development of M365, Azure, and AWS platform solutions to protect company assets
• Provides monitoring and resolution support for alerts generated by Microsoft Purview, DLP, cloud security services, and certificate management related systems
• Provides certificate management and maintenance to enterprise systems leveraging enterprise certificate lifecycle and secrets management platforms
• Drives continuous improvement of compliance processes to reduce audit findings and enhance security posture
• DevOps and automation Builds and maintains CI/CD pipelines used to deploy infrastructure and platform changes across on-premises and cloud environments
• Delivers infrastructure as code and configuration management to standardize builds and reduce manual effort
• Establishes logging, monitoring, and alerting standards that support platform reliability and incident response
• Compliance and audit Owns overall compliance posture for backend and cloud systems, ensuring full adherence to FFIEC guidelines, audit requirements, and IT risk management policies

Skills

Microsoft 365

Entra

Purview

Azure

AWS

Security

DevOps

CI/CD

Terraform

Ansible

Bicep

CloudFormation

Docker

Kubernetes

Certificates

Powershell

Education

High School / GED / foreign equivalent

Undergraduate Degree (4 years)

Tools

Terraform

Ansible

Bicep

CloudFormation

Job description

Position Title

Principal Technology Engineer

Location

Troy, MI 48098

Job Summary

The Principal Technology Engineer is a hands‑on technical expert who is responsible for the backend compute environment including M365, Microsoft Azure, Amazon Web Services (AWS), operating systems, Microsoft Security Suite (Purview), Entra, Microsoft Defender, backup, certificate management systems, end‑user compute devices, and automation and DevOps frameworks. This technical engineer coordinates with cross‑functional partners to ensure full lifecycle, compliance, and disaster recovery readiness. This role also owns system documentation, standards, procedures and alignment with FFIEC regulatory guidance. This role works closely with cross‑functional teams to ensure infrastructure reliability, audit readiness, and compliance.

Job Responsibilities

• Manage Systems, configurations, and system stability
• Technical engineer overseeing development of M365, Azure, and AWS platform solutions to protect company assets
• Provides monitoring and resolution support for alerts generated by Microsoft Purview, DLP, cloud security services, and certificate management related systems
• Provides certificate management and maintenance to enterprise systems leveraging enterprise certificate lifecycle and secrets management platforms.
• Provides final oversight on high‑risk platform upgrades, migrations, and cloud deployments.
• DevOps and automation Builds and maintains CI/CD pipelines used to deploy infrastructure and platform changes across on‑premises and cloud environments
• Delivers infrastructure as code and configuration management to standardize builds and reduce manual effort
• Integrates automated testing, secrets management, and policy enforcement into deployment pipelines
• Establishes logging, monitoring, and alerting standards that support platform reliability and incident response
• Compliance and audit Owns overall compliance posture for backend and cloud systems, ensuring full adherence to FFIEC guidelines, audit requirements, and IT risk management policies.
• Coordinates with internal audit, risk, and compliance teams to deliver accurate evidence and remediation plans.
• Drives continuous improvement of compliance processes to reduce audit findings and enhance security posture.
• Daily requests, new builds, cross‑team collaboration
• Monitors and maintain Microsoft Purview, Microsoft Defender, cloud native security services, and corporate certificate systems
• Acts as escalation point for major incidents and coordinate with leadership during crisis events.
• Delivers and collaborates with infrastructure teams to ensure technology decisions align with enterprise goals.
• Champions disaster recovery planning, test execution, and after‑action review improvements.
• Documentation and Reporting Ensures all backend, cloud, and pipeline documentation is accurate, current, and meets audit standards.
• Reviews and approve daily/weekly/monthly operational and compliance reports before submission to leadership.
• Promotes documentation as a core operational discipline across the team, setting expectations and accountability for quality.
• Reports team performance metrics and operational health to IT leadership.
• Business and Technology Alignment Ensure we are aligning IT solutions with the needs of the business
• ADDITIONAL ACCOUNTABILITIES Performs special projects, and additional duties and responsibilities as required.
• Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance trainings.
• Accountable to maintain compliance with applicable federal, state and local laws and regulations.

Job Requirements

• Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent Computer Science or related field.
• Minimum experience required: 10+ Years managing large scale technology.
• Minimum experience required: 8+ Years of technical expertise in one or more domain platforms
• 1+ years of coaching/mentoring experience with technology professionals
• Proficient with Microsoft and Linux operating systems.
• Proficient with certificate management
• Strong knowledge related to Microsoft 365 environments including Entra, Defender and Purview.
• Strong knowledge related to Microsoft Azure and Amazon Web Services (AWS) core services including compute, storage, networking, identity, and monitoring.
• Strong knowledge related to cloud identity and access management, including Entra ID and AWS IAM.
• Strong knowledge of Data Governance specifically data classification, data retention, data lifecycle management and data labeling within Microsoft Purview Strong knowledge related to data loss prevention policies and governance.
• Strong knowledge of Intune managed devices, MDM, MAM, and zero touch deployments.
• Working knowledge of Disaster Recovery execution.
• Familiarity with infrastructure as code and automation workflows such as Terraform, Ansible, Bicep, or CloudFormation.
• Familiarity with CI/CD pipelines, source control, and DevOps toolchains.
• Familiarity with containers and orchestration such as Docker and Kubernetes.
• Demonstrated understanding of system lifecycle, patching, and EOL remediation.
• Awareness of FFIEC, SOX, HIPAA, NIST or similar compliance frameworks.
• Strong documentation and cross‑functional communication skills.
• Education level preferred: Undergraduate Degree (4 years or equivalent)
• Technical certifications such as: Microsoft Certified Professional - Windows Server Hybrid Administrator Associate Microsoft Certified: Azure Administrator Associate AWS Certified Solutions Architect or AWS Certified SysOps Administrator CompTIA Server+ Certified Information Systems Auditor (CISA)

Job Competencies

• Strong expertise related to Microsoft 365 environments including Entra, Defender and Purview.
• Strong expertise related to Microsoft Azure and Amazon Web Services (AWS) platform engineering, workload deployment, and migration.
• Strong expertise of Data Governance specifically data classification, data retention, data lifecycle management and data labeling within Microsoft Purview.
• Strong knowledge related to data loss prevention policies and governance.
• Strong knowledge of certificate management, both public key infrastructure and on‑premises Microsoft certificate stores.
• Enterprise certificate management leveraging enterprise certificate lifecycle and secrets management platforms.
• Strong knowledge of MECM administrators and distribution points.
• Strong knowledge of DevOps practices including CI/CD, infrastructure as code, and release automation.
• Familiarity with Intune Managed devices MDM, M365, Bitlocker, and other standard business tools required.
• Strong communication skills and customer service orientation.
• Understanding of hardware lifecycle principles, asset management Oversee patching, upgrades, and system lifecycle compliance to prevent EOL exposure across platforms.
• Ensure audit readiness and documentation quality in alignment with FFIEC and internal compliance policies.
• Serve as liaison between infrastructure, application, cloud, and security teams for shared projects and incident resolution.
• Delegate project work, set priorities, and track execution while contributing technically.
• Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights.
• Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results.
• Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.
• Fosters or supports a positive work culture and productive work environment, displaying importance of effective relationships with customers and stakeholders.
• Occasional travel for team collaboration, datacenter and colocation work

Physical demands (ADA)

The job requires a moderate degree of physical exertion and stamina such as standing, sitting, walking, driving or infrequent lifting.

Equal Opportunity Employer

Flagstar is an Equal Opportunity Employer

We are committed to providing clear and accurate compensation information in accordance with applicable laws.

Actual starting base pay will be determined based on location, experience, and other non‑discriminatory factors permitted by law.

Compensation

Pay Range $108,171.00 - $173,367.00

Company Information

Flagstar Bank, N.A. is based in Hicksville, NY, and at December 31, 2025, had $87.5 billion in assets, $60.7 billion in loans, $66 billion in deposits, and $8.1 billion in total stockholder equity. We are a leading regional bank with approximately 340 locations, and strong footholds in the greater New York/New Jersey metropolitan region and in the upper Midwest, along with a significant presence in fast‑growing markets in Florida and the West Coast. We are driven by our commitment to partner with our clients to set and reach goals together, helping them to take charge and thrive. Our focus is on four core lines of business that include Personal, Private, Small Business and Corporate & Commercial Banking.

Flagstar Bank is committed to ensuring that you can successfully engage in our recruiting process.

Equal Opportunity Employer For more Information: EEOC_KnowYourRights Member FDIC/Equal Housing Lender