Systems Engineer

Job Description:

Systems Engineer Check Marx SAST Environment & Upgrades Role

Summary:

The Systems Engineer will be responsible for supporting, maintaining, and enhancing the Check Marx SAST environment within the organization. This role focuses on environment setup, configuration, and ongoing operational support, including version upgrades and integration with CI/CD pipelines. While direct experience with Check Marx upgrades is preferred, candidates with strong application security, Dev Sec Ops , or enterprise software upgrade experience and a willingness to learn Check Marx‑specific processes are encouraged to apply.

• Install, configure, and maintain Check Marx SAST environments across development and production systems.
• Plan, prepare, and execute Check Marx version upgrades, patches, and hotfixes while ensuring minimal service disruption.
• Troubleshoot environmental issues related to Check Marx architecture, including components such as SAST Engine, Manager, Database, Load Balancers, and Access Control.
• Work closely with Security, Dev Ops, and Development teams to ensure seamless integration of Check Marx into CI/CD pipelines.
• Develop and maintain documentation, including system diagrams, runbooks, upgrade guides, and operational procedures.
• Monitor system health, performance, and scalability; proactively identify opportunities for optimization.
• Manage user access, RBAC policies, and authentication integrations (AD/LDAP/SSO).
• Support application onboarding, project configurations, scanning policies, and scan troubleshooting.
• Participate in audit, compliance, and security review activities related to the SAST environment.

• Strong experience as a Systems Engineer, Dev Sec Ops  Engineer, or Application Security Engineer working with enterprise security or scanning platforms.
• Hands‑on experience with Check Marx SAST in setup, configuration, or operational support (upgrade experience a plus but not mandatory).
• Solid understanding of Windows Server or Linux administration, networking, and system architecture.
• Experience performing upgrades or patching for enterprise applications (e.g., application servers, security platforms, databases).
• Familiarity with CI/CD tools such as Jenkins, Azure Dev Ops, Git Lab, Bamboo, or similar.
• Ability to troubleshoot complex technical issues involving multiple system layers (application, database, OS, authentication).
• Strong documentation, communication, and analytical skills.
• Ability to work independently and collaboratively in a fast‑paced environment.

• Prior experience with Check Marx SAST upgrades, migrations, or cluster setup.
• Exposure to Dev Sec Ops  tools such as Sonar Qube, Veracode, Fortify, or similar SAST/DAST systems.
• Experience with containerization technologies (Docker, Kubernetes) and cloud environments.
• Understanding of secure development practices and application security principles.
• Knowledge of SQL Server administration and performance tuning (specific to Check Marx use cases).
• Experience integrating SAST tools with SDLC and security governance workflows.

• SAST Platforms:
  Check Marx SAST (required), Check Marx CxFlow, optional exposure to Sonar Qube / Fortify / Veracode
• Operating Systems:
  Windows Server, Linux
• CI/CD & Dev Ops:
  Azure Dev Ops, Jenkins, Git Lab CI, Git Hub Actions, Bamboo
• Databases:
  Microsoft SQL Server, Dala Lakes, Postgres
• Identity & Access Management:
  Active Directory, LDAP, SSO, OAuth/SAML
• Scripting & Automation:
  Power Shell, Bash, Python (optional)
• Infrastructure & Monitoring: IIS, NGINX, Docker/Kubernetes, Log monitoring tools
• Version Control:
  Git-based platforms