DevSecOps Engineering Senior Associate

DTCC • Tampa, NJ

2d • Hybrid

About The Position

As a member of DTCC’s Cloud Platform Engineering team, the DevSecOps Engineering Senior Associate helps deliver and operate the secure, reliable Azure platform supporting DTCC’s global capital-markets infrastructure. The role includes operating the Azure environment supporting Digital Assets and building a foundation for additional workloads migrating to Azure. The position involves designing, securing, and operating mission-critical cloud environments—including landing zones, networking, governance, and Kubernetes—using Terraform and automation-first practices. The engineer also supports platform resiliency and security and participates in an on-call rotation.

DTCC’s Information Technology group delivers secure, reliable technology solutions, infrastructure capabilities, and data standards and governance. DTCC describes its work model as flexible/hybrid, with three days onsite and two days remote; onsite days include Tuesdays, Wednesdays, and a third day determined by the team or employee. The posting offers competitive compensation, an annual incentive, benefits, and training and development.

Requirements

• At least 6 years of related experience.
• Bachelor’s degree or equivalent experience; a bachelor’s degree is preferred.
• Experience deploying and operating a production Azure landing zone, including subscription structure, policy baseline, and hybrid connectivity.
• Experience migrating workloads into Azure, including identity translation, network-path validation, and production cutover.
• Experience implementing Azure Policy at scale in code and handling resulting remediation.
• Experience operating AKS in production, including upgrades, pod identity failures, scaling behavior, and networking faults.
• Experience configuring and operating Entra ID across multi-application and multi-tenant patterns, including Conditional Access and PIM edge cases.
• Experience managing cloud security posture in production, including Wiz, vulnerability assessment and remediation, and threat detection in a regulated estate.
• Working fluency in KQL across Log Analytics and Application Insights, and experience with posture management through Wiz.
• Azure platform knowledge, including Management Groups, Subscriptions, ARM hierarchy, and the Cloud Adoption Framework.
• Networking knowledge, including VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, and controls such as NSG/ASG, firewalls, NAT, and VPN.
• Terraform fluency, including modules, state management, and CI/CD pipeline integration.
• Experience with infrastructure-as-code pipelines such as GitHub Actions or Azure DevOps.
• Strong knowledge of at least one programming language, Python or Go, and scripting proficiency in PowerShell, YAML, and JSON.
• Sound judgment about when to automate, when to escalate, and when a manual change must be returned to code.

Nice To Haves

• AWS experience; cross-cloud operational patterns apply, and the broader team operates a multi-cloud estate.
• Experience operating in a regulated or financial-services environment.
• Professional certifications in DevSecOps or information security, such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker.
• Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, and OpsGenie.

Responsibilities

• Operate and extend the Azure environment supporting Digital Assets and build the foundation for additional workloads migrating to Azure.
• Implement and operate Azure landing zones to established standards, including subscription and resource-group structure, tagging, and cost allocation.
• Implement governance in code using Azure Policy and Management Groups, and remediate compliance drift.
• Configure and operate Entra ID in production and handle identity translation for workloads moving from on-premises or AWS without reducing security at cutover.
• Operate production compute and networking and diagnose faults across the path, including private endpoints and DNS resolution for migrated workloads.
• Maintain the cloud estate’s security posture by managing Wiz findings, driving vulnerability remediation to closure, and operating privileged access through PIM in line with regulatory requirements.
• Own Terraform code and deployment pipelines for the assigned area, applying rigor comparable to application code.
• Participate in the on-call rotation, conduct root cause analysis, and automate fixes to prevent recurrence.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off and personal/family care, as well as other leaves of absence.
• Training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior