Programmer Analyst II

Note: Applications will be accepted until 11:59 PM on the Posting End Date.

At UBC, we believe that attracting and sustaining a diverse workforce is key to the successful pursuit of excellence in research, innovation, and learning for all faculty, staff and students. Our commitment to employment equity helps achieve inclusion and fairness, brings rich diversity to UBC as a workplace, and creates the necessary conditions for a rewarding career. 

The Programmer Analyst II designs computer application solutions for existing complex or campus-wide computer systems.

The Programmer Analyst II is a key contributor to the planning, developing, integrating, and maintaining third-party and custom solutions to meet the business, security, and privacy needs of the UBC Cybersecurity team. These solutions are designed for both internal use and campus-wide distribution to address the business, security, and privacy requirements of the UBC Cybersecurity team.

While this position is eligible for remote work, on-campus attendance is required on a weekly basis.

Specific Duties

- Securely develops, integrates, and maintains security solutions, APIs, and micro services used for the protection of applications and systems across all UBC properties and networks, considering functional, security, privacy, availability, and scalability requirements.

- In collaboration with architects, developers, analysts and stakeholders, provides expert advice and makes recommendations on the various design elements associated with software development.

- Ensures designs are incorporated into technical specifications as required, that these specifications are updated as changes occur, and communicates to stakeholders.

- Provides input into the application architecture and technical architecture of Cybersecurity solutions.

- Makes decisions regarding the application of computing devices or programs to meet set requirements, and determines solutions to defined problems.

- Develops technical documentation including issues and user stories, ensuring that all relevant details are captured accurately and that they are understandable to both technical and non-technical stakeholders.

- Maintains a prioritized product backlog and ensures that priorities are communicated and understood by all members of the team.

- Works with Cybersecurity Architects to group work into releases by determining which user stories and issues will be included in each release based on factors such as priority, dependencies, and team capacity.

- Develops and maintains a release schedule that provides visibility into when releases are planned. Coordinates with other teams to manage dependencies and ensure that releases are delivered on time.

- Coordinates the activities required to deliver a release, including development work, testing, risk management, and deployment.

- Leads retrospectives and uses feedback to drive continuous improvement in the release management process.

Core Duties

- Designs, develops and programs custom software, defines detailed application specifications, standards, and diagrams and develops coding logic flowcharts.

- Develops overall systems design, researches and evaluates vendor supplied applications, provides customize or develop recommendations, and implements accordingly.

- Analyzes and reviews existing or proposed system features and integration, security, scalability and performance requirements with clients, business analysts, and team members.

- Manages small to medium sized projects and related budgets.

- Packages in house developed applications for production or integrates vendor supplied applications.

- Provides technical expertise, training, and consultation to other staff.

- Develops or modifies software application design and specific modules.

- Conducts testing of new or customized application modules to ensure application meets specifications.

- Documents functions and changes to new or modified modules, tests activities/results, error handling and backup/recovery procedures.

- Provides ongoing maintenance and operational support for applications.

- Supports software development lifecycle and applies and follows appropriate programming/development methodologies and best practices.

- Maintains appropriate professional designations and up-to-date knowledge of current information technology techniques and tools.

- Performs other related duties as required.

- An undergraduate degree in Computer Science is preferred.

- Preference will be given to candidates with demonstrated ongoing career development through active and self-motivated professional development, including secure development industry certifications such as CSSLP or GWEB.

- Demonstrated experience in some or all of the following areas: is required: requirements gathering, issue and demand management, release planning, data modeling, SSDLC, ORM concepts and frameworks, version control, CI/CD, secrets storage, encryption, authentication, SQL, object storage, message queuing, APIs, and JSON.

- Preference will be given to those with experience securing, designing, developing, integrating, and maintaining applications, APIs, and micro services in an enterprise multi-cloud environment.

- A strong working knowledge of OWASP security frameworks, models and standards is preferred.

- Experience with Python, PHP, SAST, DAST, SCA, SAML, OIDC, PostgreSQL, MariaDB, TDD, HTTP, TCP/IP, x509 certificates, network/systems inventories and architecture, DNS, containerization, virtualization, LDAP, or WordPress is an asset.

- This role demands experience with incident, demand, and change management in a large, complex environment. The Incumbent should be willing to raise security concerns regardless of ownership or potential impact.

- The incumbent must be able to adapt to changing priorities, manage multiple tasks and meet deadlines.

- Initiative-taking is valued but should be balanced with judgement about seeking input, advice from others.

- The ability to work independently, as part of a team, cross-functionally, collaboratively with staff at all organizational levels is crucial.

Collaboration - Actively solicits ideas and opinions from others to efficiently and effectively accomplish specific objectives targeted at defined business outcomes. Openly encourages other team members to voice their ideas and concerns. Shows respect for differences and diversity, and disagrees without personalizing issues. Utilizes strengths of team members to achieve optimal performance.

Communication for Results - Conducts discussions with and writes memoranda to all levels of colleagues and peer groups in ways that support troubleshooting and problem solving. Seeks and shares relevant information, opinions, and judgments. Handles conflict empathetically. Explains the context of interrelated situations, asks probing questions, and solicits multiple sources of advice prior to taking action when appropriate.

Problem Solving - Applies problem-solving methodologies and tools to diagnose and solve operational and interpersonal problems. Determines the potential causes of the problem and devises testing methodologies for validation. Shows empathy and objectivity toward individuals involved in the issue. Analyzes multiple alternatives, risks, and benefits for a range of potential solutions. Recommends resource requirements and collaborates with impacted stakeholders.

Accountability - Sets objectives that meet organizational needs. Provides recommendations to individuals and teams on ways to improve performance and meet defined objectives. Monitors and provides feedback on individual and team performance against defined standards.

Business Process Knowledge - Maps full business processes and designs operational process flow. Facilitates group input and drafts proposals for process improvements. Identifies resource implications. Implements process improvement recommendations within the context of overall business processes.

Information Systems Knowledge - Resolves escalated problems of technical support. Identifies root causes. Sets up and integrates new and enhanced information systems. Identifies customer needs and determines the appropriate approach to apply and ensure resolution. Solicits the input of appropriate technical experts and managers as required.