DevSecOps Engineering Senior Associate

DTCC • Jersey City, NJ

9h • $75,000 - $150,000 • Hybrid

About The Position

As a member of DTCC’s Cloud Platform Engineering team, the DevSecOps Engineering Senior Associate helps deliver and operate a secure, reliable Azure platform supporting Digital Assets and future workloads migrating to Azure. The role designs, secures, and operates mission-critical cloud environments, including landing zones, networking, governance, and Kubernetes, using Terraform and automation-first practices. The position contributes to platform resilience and security and supports DTCC’s U.S. engineering presence.

Requirements

• At least 6 years of related experience.
• Bachelor’s degree or equivalent experience.
• Experience deploying and operating a production Azure landing zone, including subscription structure, policy baseline, and hybrid connectivity.
• Experience migrating workloads into Azure, including identity translation, network path validation, and production cutover.
• Experience implementing Azure Policy at scale in code and carrying out resulting remediation.
• Experience operating AKS in production, including upgrades, pod identity failures, scaling behavior, and networking faults.
• Experience configuring and operating Entra ID across multi-application and multi-tenant patterns, including Conditional Access and PIM edge cases.
• Experience managing cloud security posture in production, including Wiz, vulnerability assessment and remediation, and threat detection in a regulated estate.
• Working KQL fluency across Log Analytics and Application Insights, and experience with posture management through Wiz.
• Knowledge of Azure Management Groups, Subscriptions, ARM hierarchy, and Cloud Adoption Framework.
• Networking knowledge covering VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, and security controls such as NSG/ASG, firewalls, NAT, and VPN.
• Terraform fluency, including modules, state management, and CI/CD pipeline integration.
• Experience with infrastructure-as-code pipelines such as GitHub Actions or Azure DevOps.
• Strong knowledge of at least one programming language, Python or Go, and scripting proficiency in PowerShell, YAML, and JSON.
• Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, and OpsGenie.
• Sound judgment about when to automate, when to escalate, and when manual changes need to be returned to code.

Nice To Haves

• AWS experience; cross-cloud operational patterns apply, and the broader team operates a multi-cloud estate.
• Experience operating in a regulated or financial services environment.
• Professional certifications in DevSecOps or information security, such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker.

Responsibilities

• Operate and extend the Azure environment supporting Digital Assets and build the foundation for additional workloads migrating to Azure.
• Implement and operate the Azure landing zone to the established standard, including subscription and resource group structure, tagging, and cost allocation.
• Implement governance in code through Azure Policy and Management Groups, and remediate estate compliance drift.
• Configure and operate Entra ID in production and translate identities when workloads migrate from on-premises or AWS without reducing security at cutover.
• Operate production compute and networking, and diagnose faults across the path, including private endpoints and DNS resolution for migrated workloads.
• Maintain the estate’s security posture by managing Wiz findings, driving vulnerability remediation to closure, and operating privileged access through PIM in line with regulatory requirements.
• Own Terraform for the assigned area and its deployment pipelines, applying rigor comparable to application code.
• Participate in the on-call rotation, conduct root cause analysis, and automate fixes to prevent recurring conditions.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off, personal/family care, and other leaves of absence.
• Flexible/hybrid work model of three days onsite and two days remote.
• Training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior