DevSecOps Engineering Senior Associate
Depository Trust & Clearing Corporation (DTCC)2 days ago
Jersey City, NJ, USASenior
Responsibilities
- Operate and extend the production Azure environment supporting Digital Assets and additional migrating workloads.
- Implement and operate Azure landing zones, including subscription and resource group structures, tagging, cost allocation, governance, and hybrid connectivity.
- Implement Azure Policy and Management Groups as code and remediate compliance drift.
- Configure and operate Entra ID, including identity translation for workloads migrating from on-premises or AWS.
- Operate production compute and networking infrastructure, including private endpoints and DNS resolution, and diagnose network faults.
- Maintain the estate’s security posture by managing Wiz findings, driving vulnerability remediation, and operating privileged access through PIM.
- Own Terraform code and the pipelines that deploy it, applying application-code-level rigor.
- Participate in on-call rotations, conduct root cause analysis, and automate recurring fixes.
Requirements
- Minimum six years of related experience.
- Bachelor’s degree preferred or equivalent experience.
- Production experience deploying and operating Azure landing zones, including subscription structures, policy baselines, and hybrid connectivity.
- Experience migrating workloads into Azure from identity translation through network validation and production cutover.
- Experience implementing Azure Policy at scale in code and remediating resulting issues.
- Production AKS experience, including upgrades, pod identity failures, scaling behavior, and networking faults.
- Experience configuring and operating Entra ID across multi-application and multi-tenant environments, including Conditional Access and PIM.
- Production cloud security posture management experience, including Wiz, vulnerability assessment and remediation, and threat detection in regulated environments.
- Working KQL fluency across Log Analytics and Application Insights.
- Knowledge of Azure Management Groups, Subscriptions, ARM hierarchy, and Cloud Adoption Framework.
- Networking knowledge covering VNets, ExpressRoute, Private Link, Azure DNS, Virtual WAN, NSG/ASG, firewalls, NAT, and VPN.
- Terraform fluency, including modules, state management, and CI/CD pipeline integration.
- Experience with infrastructure-as-code pipelines using GitHub Actions or Azure DevOps.
- Strong knowledge of Python or Go plus scripting proficiency in PowerShell, YAML, and JSON.
- Experience with observability and alerting platforms such as Azure Monitor, Log Analytics, Application Insights, Datadog, PagerDuty, and OpsGenie.
- AWS experience, regulated or financial services experience, and professional certifications such as Certified DevSecOps Professional, CISSP, or Certified Ethical Hacker are preferred.
- Sound judgment regarding automation, escalation, and returning manual changes to code.
Benefits
- Competitive compensation including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal and family care, and other leaves of absence.
- Flexible hybrid work model with three days onsite and two days remote, with onsite days including Tuesdays, Wednesdays, and a third team- or employee-specific day.
- Professional training and development opportunities.
About Depository Trust & Clearing Corporation (DTCC)
Depository Trust & Clearing Corporation (DTCC) runs global post-trade market infrastructure, delivering clearing, settlement, securities depository, trade reporting, and data services for broker-dealers, banks, and asset managers. It provides these services through subsidiaries such as DTC, NSCC, FICC, and the Global Trade Repository, with revenue primarily from transaction and service fees. Founded in 1973 and headquartered in Jersey City, NJ, DTCC is industry-owned and privately held, serving markets across multiple regions.