Platform Engineering Senior Associate

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

Senior Associate - Container as a Service (CaaS) Governance & Security is a hands-on engineering and security role focused on helping application teams deploy and operate containerized workloads safely and reliably on DTCC's Kubernetes and OpenShift platforms. The ideal candidate brings a strong application development, application support, or application security background and uses that perspective to diagnose complex issues across application code, build pipelines, container images, platform controls, and runtime behavior.

This role is well suited for a tenacious problem solver who is curious, methodical, and willing to dig beyond the first symptom. Success requires following issues through logs, configurations, dependencies, policies, and team boundaries until the root cause is understood and a durable solution is implemented.

The Impact you will have in this role:

You will serve as a technical bridge between application teams, Platform Engineering, Cybersecurity, and Risk. You will help teams resolve difficult onboarding and runtime problems, translate application requirements into secure platform patterns, and ensure governance controls are practical, automated, and consistently applied.

Your work will improve developer experience, platform resilience, and security posture by reducing repeat incidents, accelerating root-cause analysis, and converting lessons learned into reusable standards, automation, documentation, and preventive controls.

Your Primary Responsibilities:

• Apply secure software development lifecycle practices to containerized applications and delivery pipelines
• Guide teams in remediating vulnerabilities, insecure configurations, exposed secrets, weak access patterns, and dependency risks
• Establish controls for image scanning, signing, provenance, approved registries, and image immutability
• Provide practical guidance on API security, workload identity, RBAC, secrets management, network policy, and cloud-native threat models
• Integrate security checks into CI/CD and GitOps workflows with clear feedback and actionable remediation paths
• Define and enforce Kubernetes and OpenShift governance standards for configuration, access, workload isolation, and compliance
• Implement and maintain centralized policy controls using RHACM, RHACS, admission controllers, and policy-as-code patterns
• Test policies against representative application workloads to minimize unintended disruption while maintaining control objectives
• Translate recurring incidents and findings into automated guardrails, validated platform patterns, and reusable documentation
• Translate internal control and regulatory requirements into measurable technical controls and evidence
• Support audits, control validation, finding remediation, risk acceptance, and vulnerability-management activities
• Develop dashboards and metrics for policy compliance, vulnerabilities, exceptions, remediation aging, and platform risk
• Contribute to cluster lifecycle activities, configuration validation, patch readiness, and production support
• Create runbooks, troubleshooting guides, reference implementations, and knowledge-transfer material; mentor engineers and application teams
• Investigate complex application and platform issues involving container startup, networking, routes, services, storage, identity, certificates, secrets, resource constraints, and CI/CD integrations
• Use application logs, Kubernetes events, metrics, traces, deployment manifests, and platform audit data to isolate root causes and validate corrective actions
• Partner directly with application teams during onboarding, migrations, production incidents, and recurring failure analysis
• Distinguish application defects from platform, security-control, infrastructure, and dependency issues, then coordinate resolution across the appropriate teams
• Drive issues to durable closure by documenting root cause, corrective action, preventive controls, and follow-up ownership

Qualifications:

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

• 5+ years of experience in application development, application support, site reliability, DevSecOps, or application security
• Hands-on experience troubleshooting distributed applications in Linux and containerized environments
• 3+ years of experience with Kubernetes, OpenShift, or another cloud-native application platform
• Ability to read and troubleshoot application code or scripts in at least one language such as Java, Python, Go, JavaScript/TypeScript, or shell
• Working proficiency with YAML, Git, CI/CD pipelines, REST APIs, and infrastructure or policy as code
• Experience diagnosing issues using logs, metrics, traces, events, and deployment/configuration artifacts
• Strong understanding of container images, networking, IAM/RBAC, secrets, certificates, and vulnerability remediation
• Experience with Red Hat OpenShift, RHACS, RHACM, OpenShift GitOps, and Ansible Automation Platform
• Experience with Aqua Security, Wiz, StackRox/RHACS, HashiCorp Vault, or comparable security platforms
• Experience supporting application modernization or migration from virtual machines to containers
• Familiarity with service meshes, ingress/egress controls, observability platforms, and software supply-chain security
• Knowledge of CIS Kubernetes Benchmarks, NIST guidance, OWASP practices, and financial-services control environments
• Experience building reusable automation, diagnostic tooling, or self-service platform capabilities
• Clear written and verbal communication, including the ability to explain root cause and remediation to both engineers and risk stakeholders
• Tenacious problem solving: persists through ambiguity, tests hypotheses, and follows evidence until the underlying cause is found
• Application-first thinking: understands how code, dependencies, configuration, pipelines, and runtime platforms interact
• Intellectual curiosity: asks effective questions, learns unfamiliar technologies quickly, and challenges incomplete explanations
• Systems thinking: recognizes cross-layer failure patterns and balances security, reliability, operability, and developer experience
• Ownership and follow-through: drives issues to verified resolution rather than stopping at handoff or workaround
• Collaboration and empathy: works constructively with developers, platform engineers, cybersecurity, operations, and risk teams
• Continuous improvement: converts investigations into automation, standards, documentation, and preventive controls
• Mentoring mindset: shares knowledge and raises the troubleshooting capability of the broader team

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.