{"id":1155238,"url":"https://alion.io/job/citi-engineering-lead-analyst-sonarqube-code-quality-engineering-vp","title":"Engineering Lead Analyst – SonarQube & Code Quality Engineering - VP","company":{"id":7841,"name":"Citi","domain":"citi.com","url":"https://alion.io/company/citi","size_band":"5000+","is_staffing_agency":false,"is_intermediary":false,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":249,"ghost_share":0,"stale_share":0,"repost_share":0.08,"time_to_fill_p50_days":11,"computed_at":"2026-09-24T05:45:00Z"}},"role":"Analytics","role_family":"Analytics","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"hiring_geo_confidence":"structured","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":113840,"max":170760,"currency":"USD","period":"year","gross":null,"usd_annual":170760},"salary_estimate":null,"experience_years_min":13,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Cypress","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"JUnit","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Playwright","optional":false},{"name":"Podman","optional":false},{"name":"Pytest","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"SonarQube","optional":false},{"name":"Tekton","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-09-23T19:59:19Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-09-24T05:46:51Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Engineering Lead Analyst - SonarQube & Code Quality Engineering is a senior-level engineering role responsible for leading static code analysis, automated code quality governance, security vulnerability remediation, and AI-augmented developer enablement across enterprise software delivery pipelines.\nIn this role, you will champion software reliability, maintainability, clean-coding standards, and automated quality gates. You will partner with development teams, system architects, and platform engineering to integrate and manage enterprise-scale code quality platforms (such as SonarQube) both on-premises and in cloud/SaaS environments. Additionally, you will drive modern engineering practices by embedding Behavior-Driven Development (BDD) within your own software delivery and leveraging Agentic AI workers and Model Context Protocol (MCP) architectures to optimize developer experience, streamline code governance, and boost engineering velocity.\nKey Responsibilities\n1. Code Quality & Static Analysis Platform Ownership\nLead the architecture, deployment, administration, and continuous enhancement of enterprise Static Application Security Testing (SAST) and Code Quality platforms (e.g., SonarQube, DeepSource, Codacy, Semgrep).\nConfigure, calibrate, and enforce automated Quality Gates, code rulesets, technical debt calculation models, and code-coverage baselines across multi-language enterprise repositories.\nOversee version upgrades, patching, high availability, and operational maintenance for on-premises and SaaS/cloud-hosted code quality infrastructure.\n2. CI/CD & Pipeline Integration\nEmbed automated code quality scanning and gating into modern CI/CD orchestration platforms (e.g., Tekton, Harness, Jenkins, GitLab CI, GitHub Actions).\nStandardize build-time and pull-request scanning workflows, ensuring seamless developer feedback loops, fast pipeline execution, and automated branch policy validation.\nContainerize and maintain scanning tools and quality agents using Docker, Podman, and OpenShift/Kubernetes environments.\n3. Automated BDD Testing & Robust Engineering Delivery\nLeverage existing automated Behavior-Driven Development (BDD) testing frameworks (e.g., Cucumber, Behave) within own day-to-day software development lifecycle to ensure all platform features, integrations, and automation scripts promoted to production are of the highest quality.\nBuild reliability, robustness, and fault tolerance into all delivered engineering components, maintaining high test coverage and rigorous functional/regression verification prior to release.\nEnsure automated test suites run seamlessly as mandatory validation gates within CI/CD pipelines before promotion to production environments.\n4. Agentic AI & Model Context Protocol (MCP) Enablement\nArchitect, configure, and operationalize Agentic AI workers and Model Context Protocol (MCP) tool ecosystems to enhance developer productivity and modernize code review workflows.\nIntegrate AI-driven agents into development environments and CI/CD pipelines to assist engineers with automated quality triage, intelligent remediation suggestions, boilerplate generation, and static analysis interpretation.\nContinuously evaluate and implement emerging AI tools and MCP servers that improve Developer Experience (DevEx), reduce manual toil, and accelerate engineering velocity across the firm.\n5. Technical Governance, Security Remediation & Root Cause Analysis\nPartner with Cyber Security, Architecture, and Application teams to triage, track, and remediate static code vulnerabilities, Common Vulnerabilities and Exposures (CVEs), and OWASP Top 10 risks.\nConduct deep-dive root cause analyses (RCA) on recurring defect patterns, code smells, architectural bottlenecks, and pipeline failures.\nProvide subject matter expertise (SME) on clean coding standards, refactoring strategies, and design patterns across languages including Java, Python, JavaScript/TypeScript, and Go.\n6. Leadership, Mentorship & Stakeholder Management\nServe as the technical authority on code quality, static analysis, and AI-enabled engineering practices for internal stakeholders and engineering leadership.\nAdvise, mentor, and upskill junior engineers and development teams on best practices for clean code, unit testing, BDD execution, and leveraging AI developer tools safely.\nCollaborate with Product Managers, Solution Architects, and Release Engineering to define quality roadmaps, KPIs, and engineering velocity metrics.\n7. Risk, Compliance & Governance\nAppropriately assess risk during technical decision-making, demonstrating strict consideration for the firm’s reputation and safeguarding Citi’s assets.\nEnsure all quality tools, pipelines, AI agents, and processes adhere to Citi compliance policies, internal audit standards, information security guidelines, and regulatory requirements.\nQualifications & Competencies\nExperience & Technical Background\n 13+ years of relevant experience in a Software Engineering, DevOps, or Code Quality Engineering role within a large-scale, complex, or global enterprise (Financial Services experience strongly preferred).\nStatic Analysis Platforms: Proven hands-on administration and engineering experience with SonarQube (Enterprise/Data Center edition preferred) and related static analysis/linter tooling (Semgrep, Codacy, DeepSource, Checkmarx, SonarLint).\nProgramming Proficiency: Strong development or scripting skills in one or more core languages: Java, Python, JavaScript/TypeScript, or Go.\nCI/CD & DevOps: Deep working knowledge of CI/CD pipeline automation tools such as Jenkins, Harness, Tekton, or GitHub Actions.\n Containers & Cloud: Practical experience with container technologies (Docker, Podman, OpenShift, or Kubernetes).\nBDD & Automated Testing: Proven experience leveraging existing BDD frameworks (Cucumber, Behave) and unit/functional test suites (JUnit, PyTest, Playwright, Cypress) within personal software development workflows to deliver production-grade, highly reliable code.\nAgentic AI & Tooling: Familiarity or hands-on experience with Agentic AI architectures, Model Context Protocol (MCP) server integration, LLM-based coding assistants, or AI-augmented developer tooling.\nCybersecurity & Compliance: Demonstrated experience in vulnerability management, static security scanning, and automated gating for security compliance.\nSoft Skills & Leadership Capabilities\nExceptional written and verbal communication skills with the ability to convey complex technical concepts to non-technical stakeholders.\nStrong analytical and diagnostic problem-solving skills with a proactive approach to continuous improvement.\nProven track record of driving operational process improvements and reducing technical debt.\nAbility to thrive in a global matrixed organization, managing tight deadlines and competing priorities independently.\nEducation\nBachelor’s Degree / University Degree in Computer Science, Computer Engineering, Information Technology, or equivalent practical experience.\nMaster’s Degree in a related technical discipline is preferred.\n------------------------------------------------------\nJob Family Group:\nTechnology------------------------------------------------------\nJob Family:\nSystems & Engineering------------------------------------------------------\nTime Type:\nFull time------------------------------------------------------\nPrimary Location:\nTampa Florida United States------------------------------------------------------\nPrimary Location Full Time Salary Range:\n$113,840.00 - $170,760.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.\n------------------------------------------------------\nMost Relevant Skills\nPlease see the requirements listed above.------------------------------------------------------\nOther Relevant Skills\nFor complementary skills, please see above and/or contact the recruiter.------------------------------------------------------\nAnticipated Posting Close Date:\nSep 30, 2026------------------------------------------------------\nAutomated Processing and AI\nWe use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.\nImportantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.\nIllinois residents - AI Notice and Right\n------------------------------------------------------\nCiti is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.\nIf you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.\nView Citi’s EEO Policy Statement and the Know Your Rights poster.","description_format":"text","description_chars":9945,"description_truncated":false,"requirements":{"experience_years_min":13,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management","Lending","Payments","Capital Markets"],"lifecycle":[{"event":"open","at":"2026-09-23T19:59:19Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":11,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-09-24T05:45:00Z"},"pay":{"stated_usd_annual":170760,"is_top_pay":false},"html_url":"https://alion.io/job/citi-engineering-lead-analyst-sonarqube-code-quality-engineering-vp","json_url":"https://alion.io/job/citi-engineering-lead-analyst-sonarqube-code-quality-engineering-vp.json","meta":{"generated_at":"2026-09-24T07:59:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}