This role pays less than
72%
of similar roles. Most pay
$142,300–$214,000
— the shaded band above.
At the midpoint, this role pays about
$142k
versus about
$178k
for comparable roles.
Based on 240 similar postings.
Employer
About Citi
Citi is one of the world’s most trusted financial institutions, proudly serving millions of customers across the United States.
Citi currently has
276 open roles
on FindRole.
Listed pay typically runs
$125,760–$188,640
across 259 roles with salary data.
The Engineering Lead Analyst – SonarQube & Code Quality Engineering is a senior-level role focused on leading static code analysis, automated quality governance, and security vulnerability remediation across enterprise software delivery pipelines. You will manage and enhance platforms like SonarQube, DeepSource, Codacy, and Semgrep while integrating automated quality gates into CI/CD orchestrators such as Tekton, Harness, Jenkins, GitLab CI, and GitHub Actions. The role involves building robust features using Behavior-Driven Development frameworks like Cucumber and Behave, alongside architecting Agentic AI workers and Model Context Protocol architectures to improve developer experience. You will utilize Java, Python, JavaScript/TypeScript, or Go within Docker and Kubernetes environments. This position addresses the critical challenge of ensuring software reliability and security by enforcing clean-coding standards, performing root cause analysis on defects, and automating complex code governance workflows for large-scale enterprise systems.
Manage the architecture, deployment, and maintenance of enterprise static analysis and code quality platforms like SonarQube.
Configure automated quality gates, technical debt models, and code coverage baselines across multi-language repositories.
Integrate automated code scanning and gating into CI/CD pipelines using tools like Jenkins, Harness, or GitHub Actions.
Develop and maintain containerized scanning tools and agents within Docker and Kubernetes environments.
Implement Behavior-Driven Development (BDD) frameworks to ensure high quality and reliability in all delivered software components.
Architect and operationalize Agentic AI workers and Model Context Protocol (MCP) tools to enhance developer productivity.
Triage and remediate security vulnerabilities, CVEs, and OWASP risks in collaboration with cybersecurity teams.
Provide technical leadership and mentorship on clean coding standards and AI-enabled engineering practices to internal teams.
What we're looking for
13+ years of experience in Software Engineering, DevOps, or Code Quality Engineering within a large-scale enterprise (Financial Services experience preferred).
Proven hands-on administration and engineering experience with SonarQube and related static analysis tools like Semgrep, Codacy, or DeepSource.
Strong development or scripting skills in Java, Python, JavaScript/TypeScript, or Go.
Deep knowledge of CI/CD automation tools including Jenkins, Harness, Tekton, or GitHub Actions.
Practical experience with container technologies such as Docker, Podman, OpenShift, or Kubernetes.
Experience using BDD frameworks like Cucumber or Behave and testing suites like JUnit, PyTest, Playwright, or Cypress.
Familiarity or hands-on experience with Agentic AI architectures, Model Context Protocol (MCP), and LLM-based coding assistants.
Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or equivalent practical experience; Master's degree preferred.