DevSecOps Engineering Senior Associate

DTCC • Coppell, TX

8h • Hybrid

About The Position

As a member of DTCC’s Cloud Platform Engineering team, the DevSecOps Engineering Senior Associate helps deliver and operate a secure, reliable Azure platform supporting DTCC’s global capital-markets infrastructure. The role operates the Azure environment supporting Digital Assets and builds the foundation for additional workloads migrating to Azure. It involves designing, securing, and operating mission-critical cloud environments—including landing zones, networking, governance, and Kubernetes—using Terraform and automation-first practices.

The position maintains the platform’s security and resiliency, including Azure governance, identity, networking, vulnerability remediation, and privileged access. The role also participates in on-call support, conducts root cause analyses, and automates fixes to prevent recurring issues. The position is part of a team growing DTCC’s U.S. engineering presence.

Requirements

• At least 6 years of related experience.
• Bachelor’s degree or equivalent experience; a bachelor’s degree is preferred.
• Experience deploying and operating a production Azure landing zone, including subscription structure, policy baseline, and hybrid connectivity.
• Experience migrating workloads into Azure, including identity translation, network path validation, and production cutover.
• Experience implementing Azure Policy at scale in code and carrying out subsequent remediation.
• Experience operating AKS in production, including upgrades, pod identity failures, scaling behavior, and networking faults.
• Experience configuring and operating Entra ID across multi-application and multi-tenant patterns, including Conditional Access and PIM edge cases.
• Experience managing cloud security posture in production, including Wiz, vulnerability assessment and remediation, and threat detection in a regulated estate.
• Working KQL fluency across Log Analytics and Application Insights, and experience with posture management through Wiz.
• Azure platform knowledge, including Management Groups, Subscriptions, ARM hierarchy, and Cloud Adoption Framework.
• Networking knowledge, including VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, and security controls such as NSG/ASG, firewalls, NAT, and VPN.
• Terraform fluency, including modules, state management, and CI/CD pipeline integration.
• Experience with infrastructure-as-code pipelines such as GitHub Actions or Azure DevOps.
• Strong knowledge of at least one programming language, Python or Go, and scripting proficiency in PowerShell, YAML, and JSON.
• Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, or OpsGenie.
• Sound judgment about when to automate, when to escalate, and when a manual change must be returned to code.

Nice To Haves

• AWS experience; the broader team operates a multi-cloud estate.
• Experience operating in a regulated or financial services environment.
• Professional certifications in DevSecOps or information security, such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker.

Responsibilities

• Operate and extend the Azure environment supporting Digital Assets and build a foundation for additional workloads migrating to Azure.
• Implement and operate the Azure landing zone according to established standards, including subscription and resource group structure, tagging, and cost allocation.
• Implement governance as code through Azure Policy and Management Groups, and remediate compliance drift.
• Configure and operate Entra ID in production, and carry out identity translation for workloads migrating from on-premises or AWS without weakening security at cutover.
• Operate production compute and networking, and diagnose faults across the network path, including private endpoints and DNS resolution for migrated workloads.
• Maintain the security posture of the cloud estate by managing Wiz findings, driving vulnerability remediation to closure, and operating privileged access through PIM in line with regulatory requirements.
• Own Terraform code and deployment pipelines for the assigned area, applying application-code rigor.
• Participate in the on-call rotation, conduct root cause analysis, and automate fixes to prevent recurrence.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off, personal/family care, and other leaves of absence to support physical, financial, and emotional well-being.
• Top-class training and development.
• Flexible/hybrid work model of three days onsite and two days remote.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior