Software Engineer (Python)

Software Engineer (Python) at CGI Group, Inc. in Pittsburgh, PA focuses on building Python based services and platform tooling on Kubernetes/OpenShift, implementing CI/CD pipelines, and Policy as Code to enforce governance, security, and compliance.

Responsibilities

• Design, develop, and maintain Python based services, automation tools, and platform utilities supporting containerized workloads.
• Build and enhance CI/CD pipelines to automate build, test, security scanning, deployment, and release orchestration.
• Deploy, operate, and troubleshoot applications on Kubernetes/OpenShift, including configuration, scaling, upgrades, and runtime issue resolution.
• Implement Policy as Code to enforce standards for security, networking, resource controls, image provenance, RBAC, and to prevent configuration drift.
• Integrate DevSecOps controls into pipelines, including SAST/DAST, container image scanning, SBOM generation and validation, secrets detection, and compliance checks.
• Manage Kubernetes manifests such as Deployments, Services, Ingress/Routes, ConfigMaps, and Secrets.
• Develop and manage Helm charts and/or Kustomize overlays to configure deployments.
• Work with OpenShift resources including Projects/Namespaces, Routes, SCCs, and Operators as applicable.
• Improve platform reliability through monitoring and alerting integrations, plus conducting root cause analysis for production issues.
• Contribute to engineering standards and documentation, including runbooks, SOPs, and onboarding guides.
• Participate in code reviews, design reviews, and agile ceremonies, clearly communicating risks, tradeoffs, and implementation details.

Requirements

• 35 years of professional software engineering experience.
• Strong Python development experience encompassing APIs, automation, scripting, packaging, and unit testing.
• Experience administering Apache HTTP Server, including mod_proxy, mod_rewrite, and OIDC authentication modules.
• Experience configuring Azure EntraID application registrations, client credentials, OAuth2/OIDC endpoints, and API permissions; including integrating EntraID as an identity provider via OIDC.
• Hands-on Kubernetes/OpenShift experience with deploying and troubleshooting workloads.
• Experience building CI/CD pipelines with tools such as Jenkins or UDeploy.
• Experience with Policy as Code concepts and tooling, including static security analysis (SAST), interactive security testing (IAST), policy testing/validation and lifecycle management, and Git-based workflows.
• Familiarity with Jira and Confluence, Linux fundamentals, networking basics, and troubleshooting in distributed systems.
• Working knowledge of security best practices including RBAC, least privilege, secrets management, and secure SDLC.

Technologies

• Python
• Bitbucket
• Git
• Kubernetes
• OpenShift
• Helm
• Kustomize
• Apache HTTP Server
• OIDC
• Azure EntraID
• Jenkins
• UDeploy
• Jira
• Confluence
• JupyterHub
• Apache Spark
• React
• JavaScript

Benefits

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the 401(k) plan and the share purchase plan
• Paid time off for vacation, holidays, and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and Well-being programs