Principal DevOps Engineer (Digital Assets)

Serves as a dedicated technology resource for advancing DTCC’s business opportunities and providing industry thought leadership for leveraging new technology. The goal of this new department is to partner internally with IT, our business and regulatory divisions and externally with clients, regulators, and fintech vendors, to help build new platforms and business models to advance DTCC’s mission to support the financial markets.

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that reflects the world we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact You Will Have in This Role

As the Principal DevOps Engineering Manager within DTCC’s Technology Research & Innovation (TRI) team, you will play a critical role in Web3 infrastructure by designing, scaling, and operationalizing secure-by-default cloud platforms and delivery pipelines that enable teams to move fast without compromising controls. You will lead the strategy and execution for building automated, resilient, and compliant cloud environments while valuing multi-cloud perspective by partnering with cloud engineering, application teams, architecture, risk, and security stakeholders to define clear standards, embed security automation into the software delivery lifecycle, and drive adoption of infrastructure-as-code (IaC) and cloud-native patterns. In this role, you will help TRI accelerate delivery by implementing repeatable, policy-aligned automation across provisioning, identity, monitoring, and vulnerability management, strengthening DTCC’s cloud posture while enabling scalable innovation and reliable execution.

Your Primary Responsibilities

• Design, implement, and manage secure, automated Azure environments using Terraform, Bicep, and DevSecOps best practices
• Build and deploy workloads to Azure subscriptions, leveraging services such as Azure Resource Manager, Azure Policy, and Microsoft Defender for Cloud
• Integrate security controls into CI/CD pipelines and automate infrastructure provisioning and policy enforcement
• Collaborate with development, security, and operations teams to implement security by design across all stages of the SDLC
• Conduct regular system audits and security reviews, ensuring compliance with best practices.
• Develop and maintain comprehensive technical documentation and best practices.
• Develop and maintain reusable infrastructure modules and tooling in at least one popular programming language (e.g., Python, Go, TypeScript, Java)
• Provide subject matter expertise on core Azure services, including compute, networking, storage, identity, and governance
• Support and enhance landing zones such as Azure Landing Zones or custom-built governance frameworks
• Evaluate and integrate Cloud-Native Application Protection Platforms (CNAPP) such as Wiz, as part of the security toolchain
• Collaborate using GitHub for source control and automation workflows (e.g., GitHub Actions)
• Work cross-functionally with teams operating in hybrid or multi-cloud environments including AWS and Microsoft Entra ID
• Contribute to incident response, security auditing, and compliance initiatives as needed
• Leverage Azure DevOps for pipeline orchestration, release management, and integrated development workflows
• Identify and mitigate risks by adhering to established procedures and controls
• Engage with external vendors for support, architecture reviews, licensing, and issue resolution
• Identify and mitigate risks by adhering to established procedures and controls

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

Qualifications

• Minimum 8 years of experience in DevOps, Cloud Engineering, or related roles with a focus on Azure or AWS
• Bachelor's degree (preferred) or equivalent experience
• Strong hands-on experience with Terraform and Bicep (or CloudFormation for Azure or AWS)
• Proficiency in at least one modern programming language (e.g., Python, Go, TypeScript, or Java)
• Deep understanding of Azure core services (e.g., Azure VMs, VNet, Azure AD, Key Vault, Storage, Functions) and/or AWS equivalents
• Experience with CI/CD tools and secure software development practices
• Strong knowledge of networking, IAM policies, and cloud-native security controls
• Familiarity with Git-based workflows and DevOps tooling (e.g., GitHub Actions, GitLab CI/CD)
• Experience with Azure DevOps for build/release pipelines and integrated project tracking
• Demonstrated ability in people management leading a team of high performing engineers with proven hands-on staff performance management and mentoring

Talents Needed for Success

• Hands-on experience with Azure Landing Zones, Azure Policy, and Microsoft Entra ID (Azure AD)
• Exposure to AWS Control Tower, Landing Zones, and AWS Organizations
• Experience with CNAPP tools such as Wiz, Palo Alto Prisma Cloud, or Orca Security
• Azure Certifications (e.g., Azure Solutions Architect, Security Engineer, DevOps Engineer) are a strong plus
• Familiarity with compliance frameworks (e.g., CIS, NIST, ISO 27001) as applied in cloud environments
• Experience with Distributed Ledger Technology (DLT) platforms or blockchain frameworks is a plus

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.