Lead Zero Trust Network Engineer

Are you ready to explore a world of possibilities?

Join our DTCC family, and you’ll grow your expertise and become the best version of you. As you embark on a new journey, you’ll be supported and surrounded by other professionals as you learn new skills, advance your career, and see the impact of your efforts every day.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Retirement benefits
• Paid Time Off and other leave of absence
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (Onsite Tuesdays, Wednesdays and a third day of your choosing)

Why you'll love this job:

The Platform Hosting & Engineering role specializes in the development, implementation, and support of all distributed, mainframe, and network hosting services across the firm. Responsible for the installation, configuration, programming, and support of operating systems, complex networks, and distributed environments, deploying solutions to increase overall system reliability across the firm.

The Lead Platform Engineer (Zero Trust SASE Services) provides technical leadership at the enterprise level in defining processes, technical infrastructure support, and adhere to architectural standards for the Proxy, VPN, DLP, Network Infrastructure and other systems.

Your Primary Responsibilities:

• Analyze and evaluate anomalous network and system activity as it relates to Network Security, Zero Trust.
• Responsible for the installation and configuration of selected technologies
• Collaborate with various groups and team members to design required solutions that meet DTCC standards for security, resiliency, and reusability
• Provide immediate support for production issues related to areas of expertise: zScaler Products ZIA, ZPA and ZDX
• Provide support for off-hour / weekend implementation and Disaster Recovery tests as required
• Author system documentation and supporting documents for all Zero Trust solutions to ensure clarity of design to minimize future maintenance costs
• Deliver targeted business outcomes by participating in the technical decision-making process
• Analyze changing business requirements to resolve impact and optimal solution regarding defining the future state technical architecture
• Follow established DTCC requirements, principles and models that guide technology decisions for the enterprise (standard methodologies)
• Applies knowledge of technology trends and the practical application of existing, new, and emerging technologies to supply to the decision-making process
• Monitor metrics to ensure system performance meets requirements
• Ensure alignment to the governance, standards and best practices established by DTCC
• Ensure delivered solutions enable infrastructure agility, scalability, and resilience to support required product needs throughout product lifecycle.
• Assists with training other employees on a periodic basis
• Aligns risk and control processes into day to day responsibilities to supervise and mitigate risk; advances appropriately

NOTE: The Primary Responsibilities of this role are not limited to the details above.

Talents Needed For Success:

• Minimum of 6 years of related experience
• Bachelor's degree preferred

Additional Qualifications:

• Expertise in Zero Trust Network Access (ZTNA), with a strong preference for implementing zScaler solutions.
• Expertise Layer 1-7 knowledge
• Demonstrable experience in implementing and handling Zero Trust Security Models.
• Familiarity with Identity and Access Management (IAM), Role Based Access Control (RBAC) and multi-factor authentication systems (MFA)
• Experience with Network Security
• Migration experience from Legacy Proxy/Firewall Infrastructure to zScaler Zero Trust solution would be a plus.
• Strong knowledge of TCP/IP, HTTP, FTP, cookies, authentication, web filtering, virus scanning, web servers, SSL/encryption, and reporting packages
• The ability to use scripting languages.
• PAC file experience is required.
• Complete SSL Interception with an integrated internal environment.
• Assist in monitoring, configuration changes, and software updates.
• Analyze and evaluate anomalous network and system activity.
• Experience with the management of public SSL certificates.

Who We Are:

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.