Principal DevOps Engineer

Principal DevOps Engineering ManagerAre you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that reflects the world we serve.The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.Pay and Benefits:Competitive compensation, including base pay and annual incentiveComprehensive health and life insurance and well-being benefits, based on locationPension / Retirement benefitsPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).The Impact You Will Have in This RoleAs the Principal DevOps Engineering Manager within DTCC's Technology Research & Innovation (TRI) team, you will play a critical role in Web3 infrastructure by designing, scaling, and operationalizing secure-by-default cloud platforms and delivery pipelines that enable teams to move fast without compromising controls. You will lead the strategy and execution for building automated, resilient, and compliant cloud environments while valuing multi-cloud perspective by partnering with cloud engineering, application teams, architecture, risk, and security stakeholders to define clear standards, embed security automation into the software delivery lifecycle, and drive adoption of infrastructure-as-code (IaC) and cloud-native patterns. In this role, you will help TRI accelerate delivery by implementing repeatable, policy-aligned automation across provisioning, identity, monitoring, and vulnerability management, strengthening DTCC's cloud posture while enabling scalable innovation and reliable execution.Your Primary ResponsibilitiesDesign, implement, and manage secure, automated Azure environments using Terraform, Bicep, and DevSecOps best practicesBuild and deploy workloads to Azure subscriptions, leveraging services such as Azure Resource Manager, Azure Policy, and Microsoft Defender for CloudIntegrate security controls into CI/CD pipelines and automate infrastructure provisioning and policy enforcementCollaborate with development, security, and operations teams to implement security by design across all stages of the SDLCConduct regular system audits and security reviews, ensuring compliance with best practices.Develop and maintain comprehensive technical documentation and best practices.Develop and maintain reusable infrastructure modules and tooling in at least one popular programming language (e.g., Python, Go, TypeScript, Java)Provide subject matter expertise on core Azure services, including compute, networking, storage, identity, and governanceSupport and enhance landing zones such as Azure Landing Zones or custom-built governance frameworksEvaluate and integrate Cloud-Native Application Protection Platforms (CNAPP) such as Wiz, as part of the security toolchainCollaborate using GitHub for source control and automation workflows (e.g., GitHub Actions)Work cross-functionally with teams operating in hybrid or multi-cloud environments including AWS and Microsoft Entra IDContribute to incident response, security auditing, and compliance initiatives as neededLeverage Azure DevOps for pipeline orchestration, release management, and integrated development workflowsIdentify and mitigate risks by adhering to established procedures and controlsEngage with external vendors for support, architecture reviews, licensing, and issue resolutionIdentify and mitigate risks by adhering to established procedures and controls**NOTE: The Primary Responsibilities of this role are not limited to the details above. **QualificationsMinimum 8 years of experience in DevOps, Cloud Engineering, or related roles with a focus on Azure or AWSBachelor's degree (preferred) or equivalent experienceStrong hands-on experience with Terraform and Bicep (or CloudFormation for Azure or AWS)Proficiency in at least one modern programming language (e.g., Python, Go, TypeScript, or Java)Deep understanding of Azure core services (e.g., Azure VMs, VNet, Azure AD, Key Vault, Storage, Functions) and/or AWS equivalentsExperience with CI/CD tools and secure software development practicesStrong knowledge of networking, IAM policies, and cloud-native security controlsFamiliarity with Git-based workflows and DevOps tooling (e.g., GitHub Actions, GitLab CI/CD)Experience with Azure DevOps for build/release pipelines and integrated project trackingDemonstrated ability in people management leading a team of high performing engineers with proven hands-on staff performance management and mentoringTalents Needed for SuccessHands-on experience with Azure Landing Zones, Azure Policy, and Microsoft Entra ID (Azure AD)Exposure to AWS Control Tower, Landing Zones, and AWS OrganizationsExperience with CNAPP tools such as Wiz, Palo Alto Prisma Cloud, or Orca SecurityAzure Certifications (e.g., Azure Solutions Architect, Security Engineer, DevOps Engineer) are a strong plusFamiliarity with compliance frameworks (e.g., CIS, NIST, ISO 27001) as applied in cloud environmentsExperience with Distributed Ledger Technology (DLT) platforms or blockchain frameworks is a plusThe salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.