Software Engineer (Python) - Local to Pittsburgh, Dallas, or Cleveland

Category: Software Development/ Engineering

Main location: United States, Pennsylvania, Pittsburgh

Alternate Location(s): United States, Texas, Dallas
United States, Ohio, Cleveland

Position ID:J0426-2218

Employment Type: Full Time

Position Description:

This role is located in our client office five days a week in Pittsburgh, PA.

For this role on this particular client engagement, employer sponsorship of immigration related visa and/or green card status as part of the PERM process will not be available.

CGI is seeking a Software Engineer with 3-5 years of hands-on experience building, deploying, and operating applications and platform capabilities on Kubernetes/OpenShift. The ideal candidate is proficient in Python, experienced with CI/CD pipeline development, bitbucket and can implement and maintain Policy as Code to enforce governance, security, and compliance across container platforms.

You will collaborate with engineering, platform, SRE, and security partners to automate delivery workflows, strengthen reliability and controls, and enable teams to ship software safely and efficiently.

Your future duties and responsibilities:

o Design, develop, and maintain Python-based services, automation tools, and platform utilities supporting containerized workloads.
o Build and enhance CI/CD pipelines for automated build, test, security scanning, deployment, and release orchestration.
o Deploy, operate, and troubleshoot applications on Kubernetes/OpenShift, including configuration, scaling, upgrades, and runtime issues.
o Implement Policy as Code to enforce standards (security, networking, resource controls, image provenance, RBAC, etc.) and prevent configuration drift.
o Integrate DevSecOps controls: SAST/DAST, container image scanning, SBOM generation/validation, secrets detection, and compliance checks into pipelines.
o Create and maintain infrastructure/platform artifacts such as:
o Kubernetes manifests (Deployments, Services, Ingress/Routes, ConfigMaps, Secrets)
o Helm charts and/or Kustomize overlays
o OpenShift resources (Projects/Namespaces, Routes, SCCs, Operators as applicable)
o Improve platform reliability through monitoring/alerting integration and root cause analysis (RCA) for production issues.
o Contribute to engineering standards and documentation (runbooks, SOPs, onboarding guides).
o Participate in code reviews, design reviews, and agile ceremonies; communicate risks, tradeoffs, and implementation details clearly.

Required qualifications to be successful in this role:

o 3-5 years of professional software engineering experience.
o Platform Maintenance Requirements
o Strong Python development experience (APIs, automation, scripting, packaging, unit testing).
o Experience administering Apache httpd, including mod_proxy, mod_rewrite, and OIDC authentication modules.
o Experience configuring Azure EntraID application registrations, client credentials, OAuth2/OIDC endpoint integration, and API permissions - including integrating EntraID as an identity provider into web applications via OIDC.
o Preferred - Familiarity with JupyterHub, Apache Airflow, and MLflow in a containerized environment.
o Preferred - Working knowledge of Apache Spark standalone cluster deployment and configuration
o Preferred Basic React/JavaScript familiarity for maintaining portal UI assets.
o Hands-on Kubernetes/OpenShift experience, including deploying and troubleshooting workloads.
o Experience building CI/CD pipelines (e.g., Jenkins, UDeploy).
o Experience with Policy as Code concepts and tooling, such as:
o Static Security Analysis (SAST), Interactive Security Testing (IAST)
o Policy testing/validation and policy lifecycle management
o Solid understanding of:
o Git-based workflows, branching strategies, and pull request reviews
o JIRA, Confluence
o Linux fundamentals, networking basics, and troubleshooting in distributed systems
o Working knowledge of security best practices: RBAC, least privilege, secrets management, and secure SDLC.

CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit-based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $58,000.00 - $123,800.00.

CGI's benefits are offered to eligible professionals on their first day of employment to include:
. Competitive compensation
. Comprehensive insurance options
. Matching contributions through the 401(k) plan and the share purchase plan
. Paid time off for vacation, holidays, and sick time
. Paid parental leave
. Learning opportunities and tuition assistance
. Wellness and Well-being programs

#LI-GA1

Skills:

• Bitbucket
• GIT
• Kubernetes
• OpenShift
• Python