Title: Lead Cloud DevSecOps Engineer - Job Identification 213365 - Job Category Information Technology - Locations 570 Washington Blvd, Jersey City, NJ, 07310, US 1315 S Belt Line Road, Coppell, TX, 75019, US - Job Schedule Full time - Salary Range Senior Associate-75,000-150,000-USD - FLSA Status Exempt Job Description: Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve. The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance. Pay and Benefits: - Competitive compensation, including base pay and annual incentive - Comprehensive health and life insurance and well-being benefits, based on location - Pension / Retirement benefits - Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. - DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). The Impact you will have in this role: As a Lead DevOps Engineer within DTCC's Technology Research & Innovation (TRI) team, you will drive the delivery and operations of DTCC's Web3 Platform by partnering with engineering teams to implement and sustain core DevOps practices, CI/CD automation, infrastructure reliability, observability, and secure deployment patterns while contributing to platform design and technical guidance to ensure solutions are scalable, resilient, and secure. In this role, you will work across in-house teams and external vendor partners to integrate platform components and deliver production-ready capabilities, support globally distributed teams through hands-on troubleshooting and continuous improvements to environments, tooling, and automation, and collaborate with architecture, risk, and security partners to ensure the platform meets DTCC's compliance, reliability, and operational standards for stable, secure production workloads. Your Primary Responsibilities: - Design, implement, and maintain the infrastructure and deployment pipelines to support the development and deployment of our applications - Collaborate with software engineers, system administrators, and other team members to identify and implement efficient and reliable solutions - Automate processes and tasks to improve efficiency and scalability - Implement continuous integration and continuous deployment (CI/CD) processes - Provide technical support and assistance to the development team - Monitor, analyze, and optimize system performance, ensuring high availability, scalability, and security - Define and implement appropriate monitoring and alerting systems for timely identification and resolution of incidents - Maintain and enhance the security of our infrastructure, applications, and systems, ensuring compliance with industry best practices and regulatory requirements - Provide On-call Weekly/Weekend off-hour L3-4 support on a rotational schedule with other team members - Develop and maintain system documentation - Stay up-to-date with the latest trends, technologies, and best practices in DevSecOps and cybersecurity - Aligns risk and control processes into day to day responsibilities to monitor and mitigate risk; escalates appropriately NOTE: The Primary Responsibilities of this role are not limited to the details above. Qualifications: - Minimum 6 years of experience in Infrastructure as a Code Development (IAC) skills using DevSecops pipeline - Bachelor's degree (preferred) or equivalent experience - Azure (e.g., Azure VMs, VNet, Azure AD, Key Vault, Storage, Functions) - Strong experience with Kubernetes and Helm Charts Talents Needed for Success - Proven experience in DevSecOps or a similar role - Strong hands-on experience with Terraform and Bicep (or CloudFormation for AWS) - Strong knowledge of cloud platforms such as Azure, GCP or AWS</li> - DevOps (Strong experience with CI/CD tools and secure software development practices) - Proficiency in at least one modern programming language (e.g., Python, Go, TypeScript, or Java) - Git-based workflows and DevOps tooling (e.g., GitHub Actions, GitLab CI/CD) - Strong hands-on experience with Terraform and Bicep (or CloudFormation for AWS) - Networking, IAM Policies, cloud-native security controls The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

• responsible for entire lifecycle of Continuous Integration/Continuous Deployment pipelines and Infrastructure as Code approaches • defines automated configuration management, release management, build, test and deployment activities • Provides prototypes and concepts for further automation • Designs, develops, tests and implements infrastructure for CI/CD pipelines and IaC • Support of complex projects with regard to drafting, development, deployment & quality assurance up to production • Develop and implement strategies for automated integration and delivery of cloud-related security requirements • Work closely with our cloud landing zones with DevOps teams as stakeholders to innovate process efficiency and performance • Conducts performance analyses and tunings, as well as error analyses and troubleshooting • Consults and implements new innovative technologies to satisfy innovation strategy • Creates concepts for further automation of services, processes and/or operating models • Continuously optimizes the development and system infrastructure • Provides consulting to project teams on areas of expertise also Prototypes/Proof of Concept solutions

• Define and implement SLIs, SLOs, and error budgets for critical CloudBlue services to ensure reliability and performance • Influence system architecture with a strong focus on reliability, scalability, and operability, designing systems for fault tolerance, graceful degradation, and self-healing • Reduce operational toil by identifying opportunities for automation and process improvement • Design and operate CloudBlue’s observability stack across metrics, logs, and traces using tools such as Datadog, Grafana, and Elastic Stack • Develop actionable alerting strategies and dashboards that provide clear insight into platform and business health • Design and maintain high-availability architectures, implementing redundancy, failover, and disaster recovery strategies across regions and availability zones • Conduct capacity planning, load testing, and performance optimization to ensure platform stability and scalability • Act as a senior responder during production incidents, leading incident coordination, communication, and service restoration • Own blameless postmortems and drive improvements that reduce incident frequency, MTTR, and customer impact • Improve reliability of Kubernetes-based platforms through health checks, autoscaling strategies, rollout safety, and resilience testing • Partner with engineering and DevOps teams to improve deployment safety, rollback strategies, and platform reliability • Maintain runbooks and operational documentation, and promote SRE best practices across engineering teams • Support other tasks or projects as assigned to meet team and business needs

• Partner with customers to shape their cloud adoption journey, providing both technical and strategic guidance • Design, plan, and implement secure cloud architectures aligned with business and compliance requirements • Serve as a trusted advisor and deep technical resource to customers • Design and implement automated security and compliance solutions in AWS • Develop and maintain Infrastructure-as-Code (IaC) solutions using Terraform • Build and operate CI/CD pipelines (GitHub Actions, Jenkins, CircleCI) for security automation • Develop Python-based automation for provisioning, compliance enforcement, and remediation • Implement AWS Control Tower guardrails and Service Control Policies (SCPs) • Configure AWS Config rules with automated remediation workflows • Develop and enforce policy-as-code frameworks (preventative, detective, responsive controls) • Align implementations with industry standards such as CIS AWS Foundations • Design and deploy centralized security monitoring and analytics frameworks • Implement AWS-native security services, including: Security Hub (centralized findings aggregation), GuardDuty (threat detection), Macie (sensitive data discovery), Inspector (vulnerability management) • Enable observability and auditing via CloudTrail, VPC Flow Logs, and CloudWatch • Build self-service account provisioning frameworks using CI/CD pipelines • Develop scalable landing zone and account baseline architectures • Create reusable Terraform modules and automation frameworks • Design reference architectures and implementation playbooks • Create high-quality technical content (playbooks, runbooks, white papers, reference architecture)