Principal DevSecOps Engineer; Web3

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact.

We foster a thriving internal community and are committed to creating a workplace that reflects the world we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

As the Principal Dev Sec Ops  Engineer within DTCC’s Technology Research & Innovation (TRI) team, you will play a critical role in Web3 infrastructure by designing, scaling, and operationalizing secure-by-default cloud platforms and delivery pipelines that enable teams to move fast without compromising controls. You will lead the strategy and execution for building automated, resilient, and compliant cloud environments while valuing multi-cloud perspective by partnering with cloud engineering, application teams, architecture, risk, and security stakeholders to define clear standards, embed security automation into the software delivery lifecycle, and drive adoption of infrastructure-as-code (IaC) and cloud-native patterns.

In this role, you will help TRI accelerate delivery by implementing repeatable, policy-aligned automation across provisioning, identity, monitoring, and vulnerability management, strengthening DTCC’s cloud posture while enabling scalable innovation and reliable execution.

• Design, implement, and manage secure, automated
  
  Azure environments using Terraform, Bicep, and Dev Sec Ops  best practices
• Build and deploy workloads to Azure subscriptions, leveraging services such as Azure Resource Manager, Azure Policy, and Microsoft Defender for Cloud
• Integrate security controls into CI/CD pipelines and automate infrastructure provisioning and policy enforcement
• Collaborate with development, security, and operations teams to implement security by design across all stages of the SDLC
• Conduct regular system audits and security reviews, ensuring compliance with best practices.
• Develop and maintain comprehensive technical documentation and best practices.
• Develop and maintain reusable infrastructure modules and tooling in at least one popular programming language (e.g., Python, Go, Type Script, Java)
• Provide subject matter expertise on core Azure services, including compute, networking, storage, identity, and governance
• Support and enhance landing zones such as Azure Landing Zonesor custom-built governance frameworks
• Evaluate and integrate Cloud-Native Application Protection Platforms (CNAPP) such as Wiz, as part of the security toolchain
• Collaborate using Git Hub for source control and automation workflows (e.g., Git Hub Actions)
• Work cross-functionally with teams operating in hybrid or multi-cloud environments including AWS and Microsoft Entra
• Contribute to incident response, security auditing, and compliance initiatives as needed
• Leverage Azure Dev Opsfor pipeline orchestration, release management, and integrated development workflows
• Identify and mitigate risks by adhering to established procedures and controls
• Engage with external vendors for support, architecture reviews, licensing, and issue resolution
• Identify…