Senior Cloud Engineer (New York)

DV Trading•New York, NY

3h•$210,000 - $260,000•Onsite

About The Position

Founded 20 years ago and headquartered in Chicago, the DV Group of financial services firms has grown to more than 600 people operating throughout North America, Europe and Asia. Since spinning out of a large brokerage firm in 2016, DV Trading has rapidly scaled as an independent proprietary trading firm utilizing its own capital, trading strategies, and risk management methodologies to provide liquidity to worldwide financial markets and hedging opportunities to commodity producers and users. Now, DV group affiliates include two broker dealers, a cryptocurrency market making firm, and a bourgeoning investment adviser. DV Trading is seeking a Senior Cloud Infrastructure Engineer to lead the design, buildout, and operation of firm-wide cloud infrastructure supporting all trading desks and research platforms. This role owns core shared cloud capabilities across the firm while also providing specialized infrastructure support to the crypto desk. It requires deep expertise in cloud networking, distributed systems, and infrastructure placement, with strong engineering judgment in environments where latency, operational risk, and security posture directly impact PnL.

Requirements

At least 5+ years of experience in a similar role in the industry
Extensive hands-on experience with both AWS and GCP in performance-sensitive environments
Deep, hands-on expertise in cloud networking: VPC design, hybrid connectivity, routing, and traffic control across AWS and GCP
Extensive experience with Terraform at scale
Direct experience supporting electronic trading or low-latency systems
Demonstrated ability to build shared platform capabilities and drive adoption across engineering teams
Experience migrating latency-sensitive workloads to GCP; familiarity with Compute Engine, GKE, and sole-tenant nodes
Working knowledge of GCP IAM, Organization Policies, and multi-project governance
Understanding of multi-cloud networking patterns and cross-cloud security posture management
Familiarity with exchange API security models, crypto key custody patterns, and WebSocket-based market data infrastructure
Awareness of crypto-specific threat landscape: API key theft, BGP hijacking, and chain reorganization events

Responsibilities

Own the architecture and operation of cloud infrastructure supporting latency-sensitive trading systems across all desks.
Design VPC and network topologies with explicit routing, isolation, and traffic control; partner with the network team to build a robust, highly available, and latency-optimized global network, including Direct Connect to DV office locations and hybrid connectivity across cloud providers (Cloud Interconnect, VPN, Transit Gateway).
Define compute placement strategies, including cluster placement groups and locality-aware scheduling.
Build and maintain shared platform capabilities that enable engineering teams across the firm to self-serve reliably and safely.
Own FinOps visibility and cost optimization frameworks across all trading and research workloads.
Serve as the primary escalation point for cloud infrastructure incidents firm-wide, owning issues from detection through resolution.
Define firm-wide observability standards and own the cloud layer of the monitoring and alerting stack.
Mentor engineers and establish infrastructure standards that raise the engineering bar across teams.
Lead infrastructure planning and execution for the migration of CME colocation workloads to GCP, maintaining continuity of latency-sensitive trading operations throughout.
Design hybrid connectivity between colocation environments and GCP (Cloud Interconnect, Cloud VPN).
Architect GCP VPC topology, IAM, and Organization Policy to mirror the security posture enforced on AWS.
Define GCP compute strategy (Compute Engine, GKE, sole-tenant nodes) with trading-appropriate placement and locality considerations.
Extend Terraform IaC standards to GCP; establish cross-cloud observability using Cloud Monitoring, Cloud Logging, and Cloud Trace.
Design secure, low-latency connectivity to cryptocurrency exchanges via private peering or dedicated API gateways.
Build DDoS-resilient perimeter for crypto-facing infrastructure and enforce strict network segmentation from other trading desks.
Establish WebSocket connection management infrastructure for real-time market data feeds with redundant failover and feed health observability.