DevSecOps Engineering Senior Associate

DTCC • Jersey City, NJ

1d • Hybrid

About The Position

As a member of DTCC’s Cloud Platform Engineering team, the DevSecOps Engineering Senior Associate helps deliver and operate the secure, reliable Azure platform supporting DTCC’s global capital markets infrastructure. The role includes supporting the Azure platform behind production trades using tokenized securities and helping establish the foundation for additional workloads migrating to Azure. The position works with a skilled engineering team to design, secure, and operate mission-critical cloud environments, including landing zones, networking, governance, and Kubernetes, using Terraform and automation-first practices.

The role is focused on production operations, security, resiliency, governance, and migration. It includes operating Azure services and identity, implementing policies and infrastructure as code, troubleshooting compute and network issues, remediating security findings, and participating in on-call response and root-cause analysis. DTCC describes a flexible hybrid model with three days onsite and two days remote.

Requirements

• At least 6 years of related experience.
• Production experience deploying and operating an Azure landing zone, including subscription structure, policy baseline, and hybrid connectivity.
• Experience migrating workloads into Azure, including identity translation, network path validation, and production cutover.
• Experience implementing Azure Policy at scale in code and carrying out resulting remediation.
• Production experience operating AKS, including upgrades, pod identity failures, scaling behavior, and networking faults.
• Experience configuring and operating Entra ID across multi-application and multi-tenant patterns, including Conditional Access and PIM edge cases.
• Experience managing cloud security posture in production, including Wiz, vulnerability assessment and remediation, and threat detection in a regulated estate.
• Working fluency in KQL across Log Analytics and Application Insights, and experience with posture management through Wiz.
• Azure platform knowledge, including Management Groups, Subscriptions, ARM hierarchy, and Cloud Adoption Framework.
• Networking knowledge covering VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, and security controls such as NSG/ASG, firewalls, NAT, and VPN.
• Terraform fluency, including modules, state management, and CI/CD pipeline integration.
• Experience with infrastructure-as-code pipelines using GitHub Actions or Azure DevOps.
• Strong knowledge of at least one programming language, Python or Go, plus scripting proficiency in PowerShell, YAML, and JSON.
• Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, and OpsGenie.
• Sound judgment about when to automate, escalate, or ensure a manual change is returned to code.

Nice To Haves

• Bachelor’s degree or equivalent experience.
• AWS experience; cross-cloud operational patterns are applicable because the broader team operates a multi-cloud estate.
• Experience operating in a regulated or financial services environment.
• Professional certifications in DevSecOps or information security, such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker.

Responsibilities

• Operate and extend the Azure environment supporting Digital Assets and establish the foundation for additional workloads migrating to Azure.
• Implement and operate the Azure landing zone according to established standards, including subscription and resource group structure, tagging, and cost allocation.
• Implement governance through Azure Policy and Management Groups, and remediate compliance drift.
• Configure and operate Entra ID in production and handle identity translation for workloads moving from on-premises or AWS without reducing security at cutover.
• Operate production compute and networking and diagnose faults across the service path, including private endpoints and DNS resolution.
• Maintain the cloud estate’s security posture by managing Wiz findings, driving vulnerability remediation to closure, and operating privileged access through PIM in line with regulatory requirements.
• Own Terraform code and deployment pipelines for the assigned area, applying application-code standards.
• Participate in the on-call rotation, perform root-cause analysis, and automate fixes to prevent recurring issues.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off and personal/family care, along with other leaves of absence.
• Training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior