Principal Platform Engineer

Job Description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

About this Opportunity

The Network Security Services team provides security to the production environment - automation, policy optimization, process improvement and product ownership/life-cycle management in the firewall space and is responsible for driving modifications, automation and/or process improvement through advising partners and product ownership of NextGen Firewalls, Intrusion Prevention Systems and Network Security Analytics. The Principal Platform Engineer is a network firewall SME in operations and project delivery, stabilization and reliability to the organization and supports and implements network security technologies and practices. This role requires attention to detail, collaboration and the ability to share knowledge and mentor others in network security, analytics, telemetry, and security standard methodologies.

What You'll Do

• Provide third level support in the firewall project and operations arena.
• Solve sophisticated Network/Collaboration/Security technology issues and troubleshoot network incidents, when needed
• Provide comprehensive technical consultation to IT leadership and on all phases of the project development cycle.
• Implement new systems, upgrades and modification. Will also participate in planning, testing, coordinating and scheduling.
• Ensure that change management and defined security procedures for all assigned systems are executed in accordance with policies and procedures
• Minimize client service interruptions through early identification and resolution of problems.
• Analyze monitoring and maintenance data and implements changes as required to achieve optimum performance. Makes and implements recommendations for resources required to maintain and/or expand service levels.
• Extensive interfacing, collaboration, and coordination of efforts with vendors and other departments in the company.
• Provide training to 1st Level NOC staff and Level 1-2 Engineers as needed.
• Must be available to provide off-hours support when required and in some cases, be a part of 24/7 on-call rotation.
• Mitigates risk by following established procedures and monitoring controls, spotting key errors and demonstrating strong ethical behavior.

Sound Like You?

• Minimum of 8 years of related IT experience in complex high reliability global environments
• Minimum of 8 years of experience in networking or network security on the following technologies: routing protocols (OSPF, BGP), VLANS, High Availability architect, VRF's, IPSEC, policy enforcement IPS, DNS, Network Segmentation and DDOS. Private/Public is a plus.
• Minimum of 5 years of experience in Palo Alto's firewall and 3 years of experience in Checkpoint firewalls. Equivalent of vendor certification is accepted provided that other firewall experience has also been contained (ie. Fortinet/Cisco/Juniper)
• Hands-on experience in migrating Checkpoint firewalls to Palo Alto will minimal interruption and high availability and reliability architect.
• Experience of Palo Alto technologies is a plus: Identity Base, XSOAR, Panorama, Minemeld and Threat Prevention, DNS Security, URL Filtering or Wildfire.
• Knowledge of Cisco ISE, ASA Firewalls, Palo Alto and Checkpoint Firewalls
• Good understanding of 802.1x Protocols and Encryption technologies.
• Strong VLAN, routing protocols, policy enforcement and security analysis
• Working knowledge of the ITIL framework
• Knowledge and expertise in disaster recovery exercises
• Bachelor's degree or equivalent experience

Who We Are:

DTCC is the heart of the post-trade market infrastructure for the global financial services industry. From 21 locations all over the world, DTCC, through its subsidiaries, automates, centralizes and standardizes the processing of financial transactions, mitigating risk, increasing transparency and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. In 2020, DTCC's subsidiaries processed securities transactions valued at more than U.S. $2.3 quadrillion.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.