Senior Software Engineer - Backend (Cloud Architecture, Workflow Automation & Systems Integration)

Description JOB TITLE: Senior Software Engineer Salary Range $126,745 - $149,600 Dept/Div Information Technology Supervisor Product Director, Legal, Safety, and Risk LOCATION: 2 Broadway, New York, NY 10004 Hours Of Work 9:00 am - 5:30 pm (7.5 hours/day) or as required This position is eligible for telework which is currently 2 days per week. New hires are eligible to apply 30 days after their effective date of hire. Opening The Metropolitan Transportation Authority is North America's largest transportation network, serving a population of 15.3 million people across a 5,000-square-mile travel area surrounding New York City, Long Island, southeastern New York State, and Connecticut. The MTA network comprises the nation’s largest bus fleet and more subway and commuter rail cars than all other U.S. transit systems combined. MTA strives to provide a safe and reliable commute, excellent customer service, and rewarding opportunities. About Us The MTA transportation network has a very large system and infrastructure for financial, business, automated train, transportation, power, and physical security. The MTA IT Department is centrally responsible for providing a full range of Information and Operational Technology services to the MTA agencies and administrative units through its operating and support units. Services are provided on a 7/24/365 basis in support of the MTA organization and its ridership. MTA IT’s Product Development group is empowered, multi-functional teams focused on the end-to-end management of development products from strategy to delivery. Using innovative processes and tools, the teams are responsible for developing and maintaining highly effective, secure, and innovative transportation, operational and back-end information systems to support MTA goals and priorities. Summary Leads requirements management, software design, and engineering, and testing activities across all stages and iterations of medium complexity software development. The role is responsible for using defined models, methods, and tools. May own medium impact/value services or products. Critical Skills End-to-End Architecture & Development: Ability To Design, Build, And Scale Workflow-driven, Cloud-native Backend Systems, Owning Solutions From Initial Architecture Through Deployment And Long-term Support. Strong Grounding In Modular System Design And Domain-driven Design, Including • Serverless platforms (AWS Lambda, Azure Functions, Cloud Functions) • Workflow automation engines (AWS Step Functions, Temporal, Durable Functions) • Asynchronous event-driven systems (Pub/Sub, SQS/SNS, EventHub, Kafka) • Containerization (ECS/Fargate, AKS, GKE, Cloud Run) • Designing robust approval/state-machine logic for NOV review and supervisor workflows Identity & Access Management Deep experience with enterprise IAM patterns, including AWS Cognito, Azure AD, GCP IAM, OAuth 2.0, OIDC, JWT, and token validation strategies across distributed systems. API & Systems Integration Expertise in designing secure RESTful APIs and real-time/near–real-time integrations that connect cloud services, mobile systems, and legacy platforms. Strong ability to integrate with external and legacy systems such as TABIS via: • Managed API gateways (AWS API Gateway, Azure APIM, GCP API Gateway) • REST and SOAP endpoints • Secure file exchanges (SFTP/PGP) • Message queues or polling APIs • Retry, deduplication, and idempotency patterns Data Engineering & Modeling Experience designing schemas and data models for Notice of Violations (NOV), NOV documents, supervisor workflows, audit logs, access-control structures (RBAC), and workflow/state transitions. Skilled in: • ETL/ELT pipeline development (Azure Data Factory, Dataflow tools) • Enterprise data warehouse integrations • Scheduled/batch jobs for TABIS reporting • Event sourcing or immutable audit trails (preferred) • Translating complex field workflows into maintainable system logic Security, Authentication & Encryption Deep understanding of end-to-end security for sensitive law-enforcement data, including: • Encryption in transit and at rest (SSL/TLS, AES) • Secrets management (AWS Secrets Manager, Azure Key Vault, GCP Secrets Manager) • Defensive coding against injection, spoofing, and replay attacks • Familiarity with CJIS or similar compliance frameworks Database Engineering & Optimization Advanced proficiency with relational databases (SQL Server, PostgreSQL) and NoSQL stores (DynamoDB, Firestore, Azure Cosmos DB), including: • Query optimization and indexing • Caching strategies • Transaction integrity and consistency • Data partitioning and performance tuning Cloud, DevOps & Observability Strong operational discipline in deploying, securing, and monitoring cloud-based backend systems, including: • CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps) • Infrastructure-as-Code (Terraform, CloudFormation, ARM/Bicep) • Logging & monitoring (CloudWatch, Azure Monitor, Google Cloud Logging) • Dashboards for uptime, API performance, load, audit activity, and user analytics Documentation, Reporting & Analytics Experience building data-driven reporting capabilities for executive staff and operations supervisors using BI tools such as Power BI, Looker, QuickSight, or Tableau. Ability to support real-time dashboards, compliance reporting, and operational visibility. Responsibilities • Leads requirements management, software design and engineering, and testing activities across all stages and iterations of medium complexity software development and integration initiatives, using agreed models, methods, and tools. Assists with the organization's selection, adaptation, and adoption of new models, methods, and tools. Collaborates across parties involved in product, systems, or service design. • May own medium impact/value services or products. Defines, documents, and executes medium-sized projects within business objectives and resource constraints, ensuring adherence to agreed enterprise architectures, and the application of effective change- release-, risk-, and quality-management processes. • Maintains software support processes and documentation and applies software management tools to investigate and resolve moderately complex issues, prioritize, and diagnose incidents, collect system statistics, and create reports. • Develops system and acceptance testing criteria related to functional and non-functional requirements, user stories, features, business processes, and business rules. Designs, specifies, and executes test cases and scenarios. • Adept in applying agreed tools and techniques to evaluate user experiences of programs and products, and validate that usability, accessibility and visual design requirements are satisfied. • Develops, maintains, and applies tools and documentation to track, log and maintain accurate and complete system information. Audits medium-complexity software systems for adherence to configuration standards. • Plans and conducts assigned assurance assessments and suggests opportunities for quality and safety improvement. Contributes to the identification, analysis, and documentation of software-related safety risks, and proposes corrective actions. • Monitors supplier performance and customer satisfaction. Engages proactively and collaboratively with suppliers to resolve incidents and problems. • Continuously develops and maintains adept knowledge of software engineering practices, emerging trends, and technologies. • Provides technical advice to project teams and mentors less experienced staff to foster talent development. • Travel may be required to other MTA locations or other external sites. • May need to work outside of normal work hours supporting 24/7 operations (i.e., evenings and weekends). • Performs other duties and tasks as assigned. • Provides technical advice to project teams and mentors less experienced staff to foster talent development. • Observing the work performe