Principal Technology Engineer

Job description

Position Title Principal Technology Engineer Location Troy, MI 48098 Job Summary The Principal Technology Engineer is a hands-on technical expert who is responsible for the backend compute environment including M365, Microsoft Azure, Amazon Web Services (AWS), operating systems, Microsoft Security Suite (Purview), Entra, Microsoft Defender, backup, certificate management systems, end-user compute devices, and automation and DevOps frameworks. This technical engineer coordinates with cross-functional partners to ensure full lifecycle, compliance, and disaster recovery readiness. This role also owns system documentation, standards, procedures and alignment with FFIEC regulatory guidance. This role works closely with cross-functional teams to ensure infrastructure reliability, audit readiness, and compliance. Job Responsibilities: JOB RESPONSIBILITIES Manage Systems, configurations, and system stability Technical engineer overseeing development of M365, Azure, and AWS platform solutions to protect company assets Provides monitoring and resolution support for alerts generated by Microsoft Purview, DLP, cloud security services, and certificate management related systems Provides certificate management and maintenance to enterprise systems leveraging enterprise certificate lifecycle and secrets management platforms. Provides final oversight on high-risk platform upgrades, migrations, and cloud deployments. DevOps and automation Builds and maintains CI/CD pipelines used to deploy infrastructure and platform changes across on-premises and cloud environments Delivers infrastructure as code and configuration management to standardize builds and reduce manual effort Integrates automated testing, secrets management, and policy enforcement into deployment pipelines Establishes logging, monitoring, and alerting standards that support platform reliability and incident response Compliance and audit Owns overall compliance posture for backend and cloud systems, ensuring full adherence to FFIEC guidelines, audit requirements, and IT risk management policies. Coordinates with internal audit, risk, and compliance teams to deliver accurate evidence and remediation plans. Drives continuous improvement of compliance processes to reduce audit findings and enhance security posture. Daily requests, new builds, cross-team collaboration Monitors and maintain Microsoft Purview, Microsoft Defender, cloud native security services, and corporate certificate systems Acts as escalation point for major incidents and coordinate with leadership during crisis events. Delivers and collaborates with infrastructure teams to ensure technology decisions align with enterprise goals. Champions disaster recovery planning, test execution, and after-action review improvements. Documentation and Reporting Ensures all backend, cloud, and pipeline documentation is accurate, current, and meets audit standards. Reviews and approve daily/weekly/monthly operational and compliance reports before submission to leadership. Promotes documentation as a core operational discipline across the team, setting expectations and accountability for quality. Reports team performance metrics and operational health to IT leadership. Business and Technology Alignment Ensure we are aligning IT solutions with the needs of the business ADDITIONAL ACCOUNTABILITIES Performs special projects, and additional duties and responsibilities as required. Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance trainings. Accountable to maintain compliance with applicable federal, state and local laws and regulations. JOB REQUIREMENTS Required Qualifications: Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent Computer Science or related field. Minimum experience required: 10+ Years managing large scale technology. Minimum experience required: 8+ Years of technical expertise in one or more domain platforms 1+ years of coaching/mentoring experience with technology professionals Proficient with Microsoft and Linux operating systems. Proficient with certificate management Strong knowledge related to Microsoft 365 environments including Entra, Defender and Purview. Strong knowledge related to Microsoft Azure and Amazon Web Services (AWS) core services including compute, storage, networking, identity, and monitoring. Strong knowledge related to cloud identity and access management, including Entra ID and AWS IAM. Strong knowledge of Data Governance specifically data classification, data retention, data lifecycle management and data labeling within Microsoft Purview Strong knowledge related to data loss prevention policies and governance. Strong knowledge of Intune managed devices, MDM, MAM, and zero touch deployments. Working knowledge of Disaster Recovery execution. Familiarity with infrastructure as code and automation workflows such as Terraform, Ansible, Bicep, or CloudFormation. Familiarity with CI/CD pipelines, source control, and DevOps toolchains. Familiarity with containers and orchestration such as Docker and Kubernetes. Demonstrated understanding of system lifecycle, patching, and EOL remediation. Awareness of FFIEC, SOX, HIPAA, NIST or similar compliance frameworks. Strong documentation and cross-functional communication skills. Preferred Qualifications: Education level preferred: Undergraduate Degree (4 years or equivalent) Technical certifications such as: Microsoft Certified Professional - Windows Server Hybrid Administrator Associate Microsoft Certified: Azure Administrator Associate AWS Certified Solutions Architect or AWS Certified SysOps Administrator CompTIA Server+ Certified Information Systems Auditor (CISA) Job Competencies: Strong expertise related to Microsoft 365 environments including Entra, Defender and Purview. Strong expertise related to Microsoft Azure and Amazon Web Services (AWS) platform engineering, workload deployment, and migration. Strong expertise of Data Governance specifically data classification, data retention, data lifecycle management and data labeling within Microsoft Purview. Strong knowledge related to data loss prevention policies and governance. Strong knowledge of certificate management, both public key infrastructure and on-premises Microsoft certificate stores. Enterprise certificate management leveraging enterprise certificate lifecycle and secrets management platforms. Strong knowledge of MECM administrators and distribution points. Strong knowledge of DevOps practices including CI/CD, infrastructure as code, and release automation. Familiarity with Intune Managed devices MDM, M365, Bitlocker, and other standard business tools required. Strong communication skills and customer service orientation. Understanding of hardware lifecycle principles, asset management Oversee patching, upgrades, and system lifecycle compliance to prevent EOL exposure across platforms. Ensure audit readiness and documentation quality in alignment with FFIEC and internal compliance policies. Serve as liaison between infrastructure, application, cloud, and security teams for shared projects and incident resolution. Delegate project work, set priorities, and track execution while contributing technically. Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights. Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results. Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience. Fosters or supports a positive work culture and productive work environment, displaying importance of effective relationships with customers and stakeholders. Occasional travel for team collaboration, datacenter and colocation work Physical demands (ADA): The job requires a moderate degree of physical exertion and stamina such as standing, sitting, walking, driving or infrequent lifting. Flagstar is an Equal Opportunity Employer We are committed to providing clear and accurate compensation information in accordance with applicable laws. Actual starting base pay will be determined based on location, experience, and other non-discriminatory factors permitted by law. Total compensation may also include variable incentives, bonuses, commissions, or other awards as outlined in the offer of employment. Flagstar provides teammates access to a variety of benefits including medical, dental, vision, life, and disability insurance, as well as a comprehensive leave program. Please click the following link for detailed information: Benefits | Flagstar Bank Pay Range $108,171.00 - $173,367.00