Principal DevSecOps Engineer
About The Position
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance. As the Principal DevSecOps Engineer within DTCC’s Technology Research & Innovation (TRI) team, you will play a critical role in Web3 infrastructure by designing, scaling, and operationalizing secure-by-default cloud platforms and delivery pipelines that enable teams to move fast without compromising controls. You will lead the strategy and execution for building automated, resilient, and compliant cloud environments while valuing multi-cloud perspective by partnering with cloud engineering, application teams, architecture, risk, and security stakeholders to define clear standards, embed security automation into the software delivery lifecycle, and drive adoption of infrastructure-as-code (IaC) and cloud-native patterns. In this role, you will help TRI accelerate delivery by implementing repeatable, policy-aligned automation across provisioning, identity, monitoring, and vulnerability management, strengthening DTCC’s cloud posture while enabling scalable innovation and reliable execution.
Requirements
- Minimum 8 years of experience in DevOps, Cloud Engineering, or related roles with a focus on Azure or AWS
- Bachelor's degree (preferred) or equivalent experience
- Strong hands-on experience with Terraform and Bicep (or CloudFormation for Azure or AWS)
- Proficiency in at least one modern programming language (e.g., Python, Go, TypeScript, or Java)
- Deep understanding of Azure core services (e.g., Azure VMs, VNet, Azure AD, Key Vault, Storage, Functions) and/or AWS equivalents
- Experience with CI/CD tools and secure software development practices
- Strong knowledge of networking, IAM policies, and cloud-native security controls
- Familiarity with Git-based workflows and DevOps tooling (e.g., GitHub Actions, GitLab CI/CD)
- Experience with Azure DevOps for build/release pipelines and integrated project tracking
- Demonstrated ability in people management leading a team of high performing engineers with proven hands-on staff performance management and mentoring
Nice To Haves
- Hands-on experience with Azure Landing Zones, Azure Policy, and Microsoft Entra ID (Azure AD)
- Exposure to AWS Control Tower, Landing Zones, and AWS Organizations
- Experience with CNAPP tools such as Wiz, Palo Alto Prisma Cloud, or Orca Security
- Azure Certifications (e.g., Azure Solutions Architect, Security Engineer, DevOps Engineer) are a strong plus
- Familiarity with compliance frameworks (e.g., CIS, NIST, ISO 27001) as applied in cloud environments
- Experience with Distributed Ledger Technology (DLT) platforms or blockchain frameworks is a plus
Responsibilities
- Design, implement, and manage secure, automated Azure environments using Terraform, Bicep, and DevSecOps best practices
- Build and deploy workloads to Azure subscriptions, leveraging services such as Azure Resource Manager, Azure Policy, and Microsoft Defender for Cloud
- Integrate security controls into CI/CD pipelines and automate infrastructure provisioning and policy enforcement
- Collaborate with development, security, and operations teams to implement security by design across all stages of the SDLC
- Conduct regular system audits and security reviews, ensuring compliance with best practices.
- Develop and maintain comprehensive technical documentation and best practices.
- Develop and maintain reusable infrastructure modules and tooling in at least one popular programming language (e.g., Python, Go, TypeScript, Java)
- Provide subject matter expertise on core Azure services, including compute, networking, storage, identity, and governance
- Support and enhance landing zones such as Azure Landing Zones or custom-built governance frameworks
- Evaluate and integrate Cloud-Native Application Protection Platforms (CNAPP) such as Wiz, as part of the security toolchain
- Collaborate using GitHub for source control and automation workflows (e.g., GitHub Actions)
- Work cross-functionally with teams operating in hybrid or multi-cloud environments including AWS and Microsoft Entra ID
- Contribute to incident response, security auditing, and compliance initiatives as needed
- Leverage Azure DevOps for pipeline orchestration, release management, and integrated development workflows
- Identify and mitigate risks by adhering to established procedures and controls
- Engage with external vendors for support, architecture reviews, licensing, and issue resolution
- Identify and mitigate risks by adhering to established procedures and controls
Benefits
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
Associate degree
