DevSecOps Engineering Senior Associate

DTCC • Tampa, FL

7h • Hybrid

About The Position

As a member of DTCC’s Cloud Platform Engineering team, the DevSecOps Engineering Senior Associate helps deliver and operate the secure, reliable Azure platform supporting Digital Assets and other workloads migrating to Azure. The role designs, secures, and operates mission-critical cloud environments—including landing zones, networking, governance, and Kubernetes—using Terraform and automation-first practices. It contributes to platform resilience and security and supports the growth of DTCC’s U.S. engineering presence. The position includes participation in an on-call rotation, root cause analysis, and automation of fixes to prevent recurring issues.

Requirements

• At least 6 years of related experience.
• Bachelor’s degree preferred, or equivalent experience.
• Experience deploying and operating a production Azure landing zone, including subscription structure, policy baseline, and hybrid connectivity.
• Experience migrating workloads into Azure, including identity translation, network-path validation, and production cutover.
• Experience implementing Azure Policy at scale as code and handling the resulting remediation.
• Experience operating AKS in production, including upgrades, pod identity failures, scaling behavior, and networking faults.
• Experience configuring and operating Entra ID across multi-application and multi-tenant patterns, including Conditional Access and PIM edge cases.
• Experience managing cloud security posture in production, including Wiz, vulnerability assessment and remediation, and threat detection in a regulated estate.
• Working KQL fluency across Log Analytics and Application Insights, and posture management through Wiz.
• Azure platform knowledge, including Management Groups, Subscriptions, ARM hierarchy, and Cloud Adoption Framework.
• Networking knowledge, including VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, and security controls such as NSG/ASG, firewalls, NAT, and VPN.
• Terraform fluency, including modules, state management, and CI/CD pipeline integration.
• Experience with infrastructure-as-code pipelines such as GitHub Actions or Azure DevOps.
• Strong knowledge of at least one programming language, Python or Go, and scripting proficiency in PowerShell, YAML, and JSON.
• Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, and OpsGenie.
• Sound judgment about when to automate, escalate, or ensure a manual change is returned to code.

Nice To Haves

• AWS experience; cross-cloud operational patterns apply, and the broader team operates a multi-cloud estate.
• Experience operating in a regulated or financial services environment.
• Professional certifications in DevSecOps or information security, such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker.

Responsibilities

• Operate and extend the Azure environment supporting Digital Assets and build the foundation for additional workloads migrating to Azure.
• Implement and operate the Azure landing zone to established standards, including subscription and resource group structures, tagging, and cost allocation.
• Implement governance as code through Azure Policy and Management Groups, and remediate compliance drift.
• Configure and operate Entra ID in production, translating identities for workloads moving from on-premises or AWS without reducing security at cutover.
• Operate production compute and networking and diagnose faults across the network path, including private endpoints and DNS resolution for migrated workloads.
• Maintain the estate’s security posture by managing Wiz findings, driving vulnerability remediation to closure, and operating privileged access through PIM in line with regulatory requirements.
• Own Terraform for the assigned area and the pipelines that deploy it, applying application-code-level rigor.
• Participate in the on-call rotation, conduct root cause analysis, and automate fixes to prevent recurring conditions.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence.
• Top-class training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior