Principal Cloud Security Engineer

About the role

DTCC’s Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The Cloud Security Engineering team provides outstanding and versatile cloud security services to the enterprise, securing workloads, applications, and data in AWS, Azure, and GCP. As a member of the CISO team, the Principal Cloud Security Engineer will help shape cloud security strategy, mentor a high‑performing team, and drive automation and compliance across the technology stack.

Responsibilities

• Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS.
• Identify deficiencies in cloud security services, propose improvement plans, and implement them.
• Find opportunities for automation and enhance AI/ML capabilities across the technology stack.
• Evaluate and create cloud security baselines and implement monitoring to assure compliance.
• Document security policies, controls, and processes; develop runbooks and how‑to guides for operational readiness.
• Mentor junior cybersecurity engineers focused on securing cloud workloads, containers, applications, and data.
• Partner closely with stakeholders to prepare new security technologies and functionalities for production implementation, including security standard methodologies.
• Note: Primary responsibilities are not limited to the items listed above.

Qualifications

• Minimum of 8 years of related experience.
• Bachelor’s degree and/or equivalent experience.

Skills

• Experience managing a team.
• 8+ years of proven experience with public cloud environments, specifically AWS.
• Additional cloud experience with Azure, GCP, and containerization (a plus).
• Experience with Wiz.
• Understanding of Terraform, CI/CD, and deployment architectures.
• Experience with vulnerability management, SIEM, compliance to security baselines, and Identity & Access Management in cloud and on‑prem (AD, Ping, ADFS, etc.).
• Familiarity with industry standards, guidelines, and regulatory compliance requirements (e.g., NIST 800‑53, ISO‑27001).
• Experience delivering reliable, available, and high‑performance enterprise‑scale solutions.
• Programming experience in one or more of the following: Python, C#, C++, PowerShell, Bash, Terraform, SQL; plus experience with Git version control (GitFlow, GitHub, BitBucket, etc.).
• One or more certifications: Cloud (AWS, Azure, Google Cloud Platform), CISSP.

Pay and Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well‑being benefits, based on location.
• Pension / retirement benefits.
• Paid Time Off and Personal/Family Care, plus other leaves of absence to support physical, financial, and emotional well‑being.

Schedule

DTCC offers a flexible/hybrid model of three days onsite and two days remote (onsite Tuesdays, Wednesdays, and a third day unique to each team or employee).