Senior Software Engineer - Backend (Cloud Architecture, Workflow Automation & Systems Integration)

Job ID: 14745

Business Unit: MTA Headquarters

Location: New York, NY, United States

Regular/Temporary: Regular

Department: Corporate IT Products

Date Posted: Mar 6, 2026

Description

JOB TITLE:

Senior Software Engineer

SALARY RANGE:

$126,745 - $149,600

DEPT/DIV:

Information Technology

SUPERVISOR:

Product Director, Legal, Safety, and Risk

LOCATION:

2 Broadway, New York, NY 10004

HOURS OF WORK:

9:00 am - 5:30 pm (7.5 hours/day) or as required

This position is eligible for telework which is currently 2 days per week. New hires are eligible to apply 30 days after their effective date of hire.

Opening

The Metropolitan Transportation Authority is North America's largest transportation network, serving a population of 15.3 million people across a 5,000-square-mile travel area surrounding New York City, Long Island, southeastern New York State, and Connecticut. The MTA network comprises the nation’s largest bus fleet and more subway and commuter rail cars than all other U.S. transit systems combined. MTA strives to provide a safe and reliable commute, excellent customer service, and rewarding opportunities.

About Us

The MTA transportation network has a very large system and infrastructure for financial, business, automated train, transportation, power, and physical security. The MTA IT Department is centrally responsible for providing a full range of Information and Operational Technology services to the MTA agencies and administrative units through its operating and support units. Services are provided on a 7/24/365 basis in support of the MTA organization and its ridership.

MTA IT’s Product Development group is empowered, multi-functional teams focused on the end-to-end management of development products from strategy to delivery. Using innovative processes and tools, the teams are responsible for developing and maintaining highly effective, secure, and innovative transportation, operational and back-end information systems to support MTA goals and priorities.

Summary

Leads requirements management, software design, and engineering, and testing activities across all stages and iterations of medium complexity software development. The role is responsible for using defined models, methods, and tools. May own medium impact/value services or products.

Critical Skills:

End-to-End Architecture & Development:

Ability to design, build, and scale workflow-driven, cloud-native backend systems, owning solutions from initial architecture through deployment and long-term support. Strong grounding in modular system design and domain-driven design, including:

• Serverless platforms (AWS Lambda, Azure Functions, Cloud Functions)
• Workflow automation engines (AWS Step Functions, Temporal, Durable Functions)
• Asynchronous event-driven systems (Pub/Sub, SQS/SNS, EventHub, Kafka)
• Containerization (ECS/Fargate, AKS, GKE, Cloud Run)
• Designing robust approval/state-machine logic for NOV review and supervisor workflows

Identity & Access Management:

Deep experience with enterprise IAM patterns, including AWS Cognito, Azure AD, GCP IAM, OAuth 2.0, OIDC, JWT, and token validation strategies across distributed systems.

API & Systems Integration:

Expertise in designing secure RESTful APIs and real-time/near–real-time integrations that connect cloud services, mobile systems, and legacy platforms. Strong ability to integrate with external and legacy systems such as TABIS via:

• Managed API gateways (AWS API Gateway, Azure APIM, GCP API Gateway)
• REST and SOAP endpoints
• Secure file exchanges (SFTP/PGP)
• Message queues or polling APIs
• Retry, deduplication, and idempotency patterns

Data Engineering & Modeling:

Experience designing schemas and data models for Notice of Violations (NOV), NOV documents, supervisor workflows, audit logs, access-control structures (RBAC), and workflow/state transitions. Skilled in:

• ETL/ELT pipeline development (Azure Data Factory, Dataflow tools)
• Enterprise data warehouse integrations
• Scheduled/batch jobs for TABIS reporting
• Event sourcing or immutable audit trails (preferred)
• Translating complex field workflows into maintainable system logic

Security, Authentication & Encryption:

Deep understanding of end-to-end security for sensitive law-enforcement data, including:

• Encryption in transit and at rest (SSL/TLS, AES)
• Secrets management (AWS Secrets Manager, Azure Key Vault, GCP Secrets Manager)
• Defensive coding against injection, spoofing, and replay attacks
• Familiarity with CJIS or similar compliance frameworks

Database Engineering & Optimization:

Advanced proficiency with relational databases (SQL Server, PostgreSQL) and NoSQL stores (DynamoDB, Firestore, Azure Cosmos DB), including:

• Query optimization and indexing
• Caching strategies
• Transaction integrity and consistency
• Data partitioning and performance tuning

Cloud, DevOps & Observability:

Strong operational discipline in deploying, securing, and monitoring cloud-based backend systems, including: