Senior Vice President, Infrastructure Solution Engineer

BNY Mellon; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

BNY Mellon is seeking a Senior Vice President, Infrastructure Solution Engineer in New York to lead vulnerability remediation programs and build secure, automated pipelines. You will own end-to-end platform improvements, coordinate across AIM teams, and drive rapid, compliant deployments through CI/CD tooling.

The role emphasizes hands-on engineering, security focus, and collaboration with cross-functional teams to minimize risk while accelerating delivery.

Qualifications

• 5+ years in platform, DevSecOps, or infrastructure engineering with ownership of security remediation programs at scale.
• Hands-on experience building and operating CI/CD pipelines for automated testing and deployment.
• Proficiency in at least two of: Java/JVM, Go, Python.
• Experience with Kubernetes operations including cluster lifecycle management.
• Familiarity with OS-level patch management tooling (Ansible, Chef).
• Strong understanding of CVE scoring, exploit maturity, and risk-based prioritization.

Responsibilities

• Monitor VMAD vulnerability intelligence to identify CVEs and policy violations affecting managed applications and infrastructure.
• Design CI/CD-integrated remediation pipelines that automate scoping, testing, release certification, change control, and deployment across nonprod/prod.
• Build pipelines for three remediation surfaces: application dependencies, host patching, and cluster upgrades.
• Identify bottlenecks in processes and eliminate them through automation, tooling, or redesign.
• Serve as embedded remediation partner for application teams, providing automation tooling and advisory support for high-risk scenarios.

Skills

CI/CD pipelines

Java/JVM

Go

Python

Kubernetes

Ansible/Chef

Security remediation

Tools

GitLab CI

Jenkins

GitHub Actions

Job description

We're seeking a future team member for the role of Senior Vice President, Infrastructure Solution Engineer to join our controls hub team. This role is located in New York.

In this role, you'll make an impact in the following ways:

• Vulnerability Detection & Triage : Continuously monitor the VMAD vulnerability intelligence system to identify newly disclosed CVEs and policy violations affecting managed applications and infrastructure
• Design and implement CI/CD-integrated remediation pipelines that automates the steps from scoping the change, running tests, certify for release, manage change controls and deploys components through stages of nonprod/prepprod/prod with sufficient controls and approvals.
• Build pipelines that handle three distinct remediation surfaces independently for application dependencies, host patching, cluster upgrades.
• Platform Improvement & Speed of Migration: Identify systemic bottlenecks - manual approval gates, flaky tests, environment provisioning lag - and eliminate them through automation, tooling, or process re-design
• Cross-Application Collaboration: Serve as the embedded vulnerability remediation partner for application teams across AIM, providing both automation tooling and advisory support for complex or high-risk remediation scenarios

To be successful in this role, we're seeking the following:

• 5+ years in platform, DevSecOps, or infrastructure engineering with demonstrated ownership of security remediation programs at scale
• Hands-on experience building and operating CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, or equivalent) for automated testing and deployment
• Working proficiency in at least two of: Java/JVM ecosystem, Go, Python - specifically around dependency management, build tooling, and vulnerability scanning
• Experience with Kubernetes operations including cluster lifecycle management, node pool upgrades, and workload disruption budgeting
• Familiarity with OS-level patch management tooling and host configuration management (Ansible, Chef, or equivalent)
• Strong understanding of the vulnerability lifecycle: CVE scoring (CVSS/EPSS), exploit maturity, and risk-based prioritization