Apply on Employer Site

Jobs via Dice · 2 weeks ago

Associate Director Platform Engineering

Tampa, FL

Full-time

Hybrid

Lead/Staff, Director/Executive

8+ years exp

DTCC is at the forefront of innovation in the financial markets, and they are seeking an Associate Director of Platform Engineering to lead security engineering initiatives. The role involves designing, developing, and deploying security solutions to enhance DTCC's global network security posture while collaborating with various teams to ensure effective policy implementation and risk management.

Computer Software

Responsibilities

Design, deploy, and manage network security solutions using Palo Alto Firewalls, Guardicore Centra microsegmentation, and Zscaler Zero-Trust across campus, datacenter, and cloud environments

Develop and enforce Guardicore microsegmentation policies: analyze network traffic flows, identify critical assets, create and optimize segmentation rules to protect applications and workloads

Administer Palo Alto firewalls, including rule base management, VPN setup, NAT, upgrades, troubleshooting, and routine maintenance

Configure Zscaler ZIA, ZPA, and ZDX, including PAC file management and SSL interception

Work with IT, architecture, and business teams to design secure network architectures, integrate security controls, and ensure seamless delivery of solutions

Monitor for anomalous activity, conduct packet captures and traffic analysis, and respond to incidents using advanced troubleshooting and microsegmentation insights

Produce technical documentation, policies, runbooks, and visual diagrams for all deployed security solutions

Train and mentor IT and security teams on microsegmentation, firewall administration, and Zero Trust principles

Stay up-to-date with emerging security trends and technologies; recommend ongoing improvements to DTCC's security posture

Serve as a key escalation point for critical network security issues, production service outages, and advanced problem solving with vendors

Secure multiple cloud platforms (Google Cloud Platform, Azure, private cloud) by designing VPCs, subnets, security groups, and access controls, and integrating robust engineering approaches

Participate in cross-functional meetings and project teams, collaborating with stakeholders to deliver resilient security solutions

Handle configuration changes, software updates, compliance requirements, and proactively identify risks and opportunities for better security

Qualification

Palo Alto FirewallsGuardicore CentraZscaler Zero-TrustCloud SecurityCISSP CertificationPCNSA CertificationNetwork Security EngineeringScripting SkillsAnalytical SkillsTroubleshooting SkillsDocumentation Skills

Required

Minimum of 8 years of related experience

Bachelor's degree preferred or equivalent experience

Minimum 7 years' experience in network security engineering or network administration roles

Deep expertise in Palo Alto Firewall administration, configuration, troubleshooting, and policy management

Proven hands-on experience with Guardicore Centra microsegmentation and Zscaler Zero-Trust platforms, including ZIA, ZPA, and ZDX

Good knowledge in cloud security for Azure, AWS, and Google Cloud Platform; experience designing and securing VPCs, subnets, and controls

Familiarity with monitoring and observability tools such as Netscout, NetBrain, and SolarWinds

Understanding and/or working knowledge of VBlock, Nutanix, CaaS, IaaS, network as a service, storage solutions, and mainframe environments

Scripting skills (Python, PowerShell) and deep knowledge of network protocols (TCP/IP, HTTP, SSL, etc.)

Experience influencing senior leadership, business and technical collaborators, and peer groups, while driving enterprise-scale portfolios or programs in large organizations

Prior financial services experience is highly preferred; alternatively, must have prior experience working in a regulated environment, managing or partnering with industry regulators, and leading and maintaining a very strong control environment

Familiarity with regulatory and industry security frameworks; prior experience in financial services or regulated environments is highly desirable

Excellent analytical, troubleshooting, and documentation skills, inclusive of written and visual diagrams

Preferred

Palo Alto certifications preferred

CISSP certifications are a plus

Certifications preferred: PCNSA (Palo Alto Networks Certified Network Security Administrator), CISSP, and cloud certifications (Azure, AWS, Google Cloud Platform) is a plus