Lead Forward Deployment Engineer: Security & Modernization
Lead Forward Deployment Engineer: Security & Modernization
Posted today
SENIORITY
Manager
About the role
- Lead targeted technical engagements addressing security, testing, release, resilience, and legacy technology challenges with development teams.- Assess application code, dependencies, runtime environment, test coverage, deployment architecture, CI/CD pipelines, observability, and operational risks.- Write, debug, review, and enhance production-quality code and configuration throughout engagements.- Define and implement practical modernization and remediation plans with clear priorities, dependencies, risks, and measurable outcomes.- Develop or improve unit, integration, component, contract, and deployment smoke tests using Test-Driven Development practices.- Select appropriate automation-testing approaches per application and drive implementation, including the use of AI coding assistance.- Source suitable test data and implement secure data masking for lower environments.- Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation prioritization, secure code changes, and regression testing.- Upgrade Java, JVM, NPM, Spring, open-source libraries, internal dependencies, installed software, base images, and operating systems to supported versions.- Establish sustainable dependency-management processes with continuous library updates using Renovate or equivalent tools.- Modernize legacy applications and middleware stacks, including those deployed on WebSphere or WebLogic.- Containerize applications using Docker and support deployment to OpenShift.- Improve source control, branch management, pull-request, and code-review practices.- Design, implement, and optimize CI/CD pipelines to ensure safe, repeatable, automated, and easy releases.- Automate database changes using Liquibase or equivalent migration tools.- Automate installed software and environment changes using Ansible or equivalent configuration management tools.- Implement secure coding patterns, secrets management, authentication, authorization, and least-privilege controls.- Introduce standard observability patterns, including structured logging, application metrics, tracing, dashboards, alerting, and actionable health checks.- Enhance exception handling, operational diagnostics, rollback procedures, and production-validation controls.- Design or improve resilient deployment architectures, including hot-hot cross-datacenter deployments where required.- Lead technical workshops and effectively communicate technical decisions, risks, blockers, trade-offs, and progress to engineering, security, architecture, operations, project management, and stakeholders.- Provide technical leadership through code reviews, coaching, reusable standards, documentation, and knowledge transfer to development teams.- Take ownership from initial assessment through implementation, production deployment, stabilization, and handover. SKILLS
- Experience modernizing or migrating applications hosted on IBM WebSphere or Oracle WebLogic, demonstrating familiarity with these platforms.- Experience with major-version upgrades and migration from older versions of Spring or Spring Boot, indicating proficiency in framework transitions.- Experience configuring continuous dependency-update tools such as Renovate or Dependabot, showing capability in automating dependency management.- Experience with dependency reachability analysis, Software Composition Analysis, CVE assessment, and remediation of transitive dependencies, reflecting knowledge of software security and compliance.- Experience automating database changes using Liquibase or Flyway, indicating skills in database migration automation.- Experience using Ansible or equivalent configuration-management and deployment-automation tools, demonstrating proficiency in infrastructure automation.- Strong experience in TypeScript, Node.js, and the npm ecosystem, highlighting development expertise in these technologies.- Experience with Kubernetes in addition to OpenShift, showing understanding of container orchestration platforms.- Experience designing hot-hot, active-active, multi-region, or cross-datacenter deployment architectures, denoting knowledge of high-availability systems.- Experience with resilience testing, disaster recovery, controlled failover, and production-recovery exercises, highlighting skills in system reliability and continuity planning.- Experience with enterprise observability tools such as Splunk, ELK, Grafana, Prometheus, Open Telemetry, AppDynamics, or Dynatrace, reflecting proficiency in monitoring and diagnostics.- Experience modernizing monolithic or legacy enterprise applications into maintain
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
