Platform Engineering Senior Associate
Depository Trust & Clearing Corporation (DTCC)3 days ago
Tampa, FL, USASenior
Responsibilities
- Guide application teams in deploying and operating containerized workloads securely on Kubernetes and OpenShift.
- Remediate vulnerabilities, insecure configurations, exposed secrets, weak access patterns, dependency risks, and platform findings.
- Establish controls for image scanning, signing, provenance, approved registries, image immutability, API security, workload identity, RBAC, secrets, and network policy.
- Integrate security checks into CI/CD and GitOps workflows and maintain centralized policy controls using RHACM, RHACS, admission controllers, and policy-as-code.
- Define and enforce Kubernetes and OpenShift governance standards for configuration, access, workload isolation, and compliance.
- Translate regulatory and internal control requirements into measurable technical controls and evidence, and support audits, validation, risk acceptance, and remediation.
- Develop compliance, vulnerability, exception, remediation-aging, and platform-risk dashboards and metrics.
- Contribute to cluster lifecycle activities, configuration validation, patch readiness, production support, onboarding, migrations, and incident response.
- Investigate complex application and platform issues using logs, Kubernetes events, metrics, traces, deployment manifests, and audit data.
- Create runbooks, troubleshooting guides, reference implementations, documentation, automation, and preventive controls while mentoring engineers and application teams.
Requirements
- At least 6 years of related experience.
- At least 5 years of experience in application development, application support, site reliability, DevSecOps, or application security.
- At least 3 years of experience with Kubernetes, OpenShift, or another cloud-native application platform.
- Bachelor's degree preferred or equivalent experience.
- Hands-on experience troubleshooting distributed applications in Linux and containerized environments.
- Ability to read and troubleshoot application code or scripts in Java, Python, Go, JavaScript/TypeScript, or shell.
- Working proficiency with YAML, Git, CI/CD pipelines, REST APIs, and infrastructure or policy as code.
- Experience diagnosing issues through logs, metrics, traces, events, and deployment or configuration artifacts.
- Strong understanding of container images, networking, IAM/RBAC, secrets, certificates, and vulnerability remediation.
- Experience with Red Hat OpenShift, RHACS, RHACM, OpenShift GitOps, and Ansible Automation Platform.
- Experience with Aqua Security, Wiz, StackRox/RHACS, HashiCorp Vault, or comparable security platforms.
- Knowledge of service meshes, ingress/egress controls, observability platforms, software supply-chain security, CIS Kubernetes Benchmarks, NIST guidance, OWASP practices, and financial-services control environments.
- Experience building reusable automation, diagnostic tooling, or self-service platform capabilities.
- Strong communication, systems thinking, ownership, collaboration, problem-solving, continuous-improvement, and mentoring skills.
Benefits
- Competitive compensation including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal and family care, and other leaves of absence.
- Flexible hybrid work model with 3 days onsite and 2 days remote; onsite days are Tuesdays, Wednesdays, and a third team- or employee-specific day.
Tech Stack
About Depository Trust & Clearing Corporation (DTCC)
Depository Trust & Clearing Corporation (DTCC) runs global post-trade market infrastructure, delivering clearing, settlement, securities depository, trade reporting, and data services for broker-dealers, banks, and asset managers. It provides these services through subsidiaries such as DTC, NSCC, FICC, and the Global Trade Repository, with revenue primarily from transaction and service fees. Founded in 1973 and headquartered in Jersey City, NJ, DTCC is industry-owned and privately held, serving markets across multiple regions.