Associate Director Platform Engineering

Join to apply for the Associate Director Platform Engineering role at The Depository Trust & Clearing Corporation (DTCC)

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact.

We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Mainframe Security Engineering team manages the RACF (security) databases and their settings and interrelationships, manages cryptography hardware, settings and keys, provides automation for security administration (via utilities and developed code), manages mainframe‑resident certificates, works with vendors and DTCC support teams to track and remediate security software defects, provides strategic security administration to advance mainframe security objectives, performs tactical security administration for infrastructure‑related objects, attributes and permissions, works with Operations and Technology Risk and area management to prioritize security objectives, provides security assistance and education to mainframe support areas, supports data and processing interactions with non‑mainframe security infrastructure, executes changes in support of new security policies on weekends, and tests established controls to ensure security rules are properly functioning.

• Understand and implement RACF administration in a highly granular SYSPLEX and monoplex environments.
• Perform analysis, design, documentation, testing, implementation and on‑going support for the infrastructure mainframe security environment.
• Plan and implement assignments by due dates, without detailed supervision.
• Maintain high quality and consistency for security settings, rules and procedures.
• Provide recommendations for the security settings of mainframe software products and features.
• Provide input and follow‑through for continuous improvement to mainframe security.
• Configure zSecure, develop reporting, and enhance automation using REXX, SQL, SAS, and CARLa.
• Participate in team on‑call coverage rotation, which includes tactical security administration and provide support on weekends.
• Align risk and control processes into day‑to‑day responsibilities to monitor and mitigate risk; advances appropriately.
• Participate in disaster recovery tests on weekends.
• Participate in audits and penetration testing.

• Minimum of 8 years of related experience
• Bachelor's degree preferred or equivalent experience

• Thorough familiarity with RACF on z/OS, including both administration and technical support (answering inquiries, resolving incidents, debugging problems, etc.)
• In‑depth knowledge of one or more of: RACF certificate management, Integrated Cryptographic Service Facility, RACF Remote Sharing Facility, RACF security for CICS, RACF security for MQ, RACF security for Web Sphere Application Server, RACF security for IP networks, RACF security for Unix System Services, zSecure, Linux
• Knowledge of…