Platform Engineering Senior Associate

DTCC • Tampa, FL

1d • Hybrid

About The Position

The Senior Associate - Container as a Service (CaaS) Governance & Security is a hands-on engineering and security role supporting application teams deploying and operating containerized workloads on DTCC’s Kubernetes and OpenShift platforms. The role applies an application-focused perspective to diagnose complex problems across application code, build pipelines, container images, platform controls, and runtime behavior. It serves as a technical bridge among application teams, Platform Engineering, Cybersecurity, and Risk, translating application needs into secure platform patterns and practical, automated governance controls.

The position supports secure and reliable containerized application delivery by improving developer experience, platform resilience, and security posture. It involves investigating issues through logs, configurations, dependencies, policies, and team boundaries; determining root causes; and implementing durable fixes. The role also turns recurring issues and findings into reusable standards, automation, documentation, and preventive controls.

Requirements

• At least 6 years of related experience.
• At least 5 years of experience in application development, application support, site reliability, DevSecOps, or application security.
• At least 3 years of experience with Kubernetes, OpenShift, or another cloud-native application platform.
• Hands-on experience troubleshooting distributed applications in Linux and containerized environments.
• Ability to read and troubleshoot application code or scripts in at least one language such as Java, Python, Go, JavaScript/TypeScript, or shell.
• Working proficiency with YAML, Git, CI/CD pipelines, REST APIs, and infrastructure or policy as code.
• Experience diagnosing issues using logs, metrics, traces, events, and deployment/configuration artifacts.
• Strong understanding of container images, networking, IAM/RBAC, secrets, certificates, and vulnerability remediation.
• Clear written and verbal communication, including ability to explain root cause and remediation to engineering and risk stakeholders.
• Demonstrated tenacious problem solving, application-first thinking, intellectual curiosity, systems thinking, ownership and follow-through, collaboration and empathy, continuous improvement, and a mentoring mindset.

Nice To Haves

• Bachelor’s degree or equivalent experience.
• Experience with Red Hat OpenShift, RHACS, RHACM, OpenShift GitOps, and Ansible Automation Platform.
• Experience with Aqua Security, Wiz, StackRox/RHACS, HashiCorp Vault, or comparable security platforms.
• Experience supporting application modernization or migration from virtual machines to containers.
• Familiarity with service meshes, ingress/egress controls, observability platforms, and software supply-chain security.
• Knowledge of CIS Kubernetes Benchmarks, NIST guidance, OWASP practices, and financial-services control environments.
• Experience building reusable automation, diagnostic tooling, or self-service platform capabilities.

Responsibilities

• Apply secure software development lifecycle practices to containerized applications and delivery pipelines.
• Guide teams in remediating vulnerabilities, insecure configurations, exposed secrets, weak access patterns, and dependency risks.
• Establish controls for image scanning, signing, provenance, approved registries, and image immutability.
• Provide guidance on API security, workload identity, RBAC, secrets management, network policy, and cloud-native threat models.
• Integrate security checks into CI/CD and GitOps workflows with clear feedback and actionable remediation paths.
• Define and enforce Kubernetes and OpenShift governance standards for configuration, access, workload isolation, and compliance.
• Implement and maintain centralized policy controls using RHACM, RHACS, admission controllers, and policy-as-code patterns.
• Test policies against representative application workloads to limit unintended disruption while maintaining control objectives.
• Convert recurring incidents and findings into automated guardrails, validated platform patterns, and reusable documentation.
• Translate internal control and regulatory requirements into measurable technical controls and evidence.
• Support audits, control validation, finding remediation, risk acceptance, and vulnerability-management activities.
• Develop dashboards and metrics for policy compliance, vulnerabilities, exceptions, remediation aging, and platform risk.
• Contribute to cluster lifecycle activities, configuration validation, patch readiness, and production support.
• Create runbooks, troubleshooting guides, reference implementations, and knowledge-transfer materials; mentor engineers and application teams.
• Investigate application and platform issues involving container startup, networking, routes, services, storage, identity, certificates, secrets, resource constraints, and CI/CD integrations.
• Use application logs, Kubernetes events, metrics, traces, deployment manifests, and platform audit data to isolate root causes and validate corrective actions.
• Partner with application teams during onboarding, migrations, production incidents, and recurring failure analysis.
• Distinguish application defects from platform, security-control, infrastructure, and dependency issues, and coordinate resolution across teams.
• Drive issues to durable closure by documenting root cause, corrective action, preventive controls, and follow-up ownership.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support physical, financial, and emotional well-being.
• Flexible/hybrid work model of 3 days onsite and 2 days remote.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior