JOB DESCRIPTION
Are you ready to make an impact at DTCC
Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.
Pay and Benefits:
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
- DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).
The Impact you will have in this role:
Work with modern PAM technologies in a supportive, learning-focused environment.
Knowledge Sharing: Collaborate with IT, risk, and cybersecurity teams, contribute to documentation, and participate in technical workshops and team reviews to expand your expertise Be part of a team committed to innovation, operational excellence, and professional development.
Over time, you will have the opportunity to cross-train in other IAM tools and technologies, including Active Directory, HashiCorp Vault, Terraform, Ansible, PKI/HSM, and Identity Governance platforms.
We're seeking a hands-on, detail-oriented Senior/Lead PAM Systems Engineer who combines technical expertise with operational leadership.
You'll also have opportunities to cross-train and guide adoption across complementary IAM technologies.
you will also be building PQC inventory dashboards that turn raw cryptographic metadata into actionable insights for decision-makers.
Implement data quality controls, refresh schedules, rowlevel security, and audit-ready export (CSV/PDF) for governance and reporting.
Key Responsibilities
- Design and implement systems that discover, classify, and track certificates, keys, and cryptographic protocols across endpoints, servers, and network paths.
- Develop certificate lifecycle management processes for accurate tracking of issuance, renewal, and expiration.
- Integrate with endpoint detection and network topology data to identify ingress/egress points and crypto exposure.
- Build robust data pipelines aggregating telemetry from PKI systems, network scans, EDR, and cloud APIs.
- Model and analyze data using SQL and BI dashboards for leadership and auditors.
- Collaborate with platform and security teams to align inventory outputs with risk assessments and PQC migration plans.
- Define standards for crypto asset discovery and data quality metrics.
- Continuously improve inventory coverage and reporting automation.
Required Skills
- Leadership experience managing technical teams.
- Strong PKI concepts (certificate structures, trust chains, lifecycle principles).
- Data engineering and pipeline development experience.
- SQL and BI dashboarding proficiency.
- Scripting for data collection and transformation (Python, PowerShell).
- Networking fundamentals: topology, ingress/egress, endpoint detection.
- Security mindset: cryptographic protocols, crypto agility, PQC readiness.
- Work experience in any of the cloud platform is preferable.
KPIs & Success Metrics
- Inventory Coverage:% of endpoints, servers, and network segments scanned and tracked.
- Certificate Lifecycle Compliance:SLA adherence for renewal and expiration alerts.
- Data Quality:Accuracy and completeness of crypto asset records (target 95%).
- Dashboard Adoption:Number of stakeholders actively using BI dashboards for decision-making.
- Reporting Timeliness:Ability to produce audit-ready inventory reports within defined timeframes.
- Risk Reduction:Measurable decrease in expired or weak certificates across the environment.
Qualifications:
- Minimum of 8 years of related experience
- Bachelor's degree preferred or equivalent experience
ABOUT THE TEAM
IT Risk and Data Services department seeks to meet our clients needs by capitalizing on the progress made in both the Risk Technology Program and the Data Analytics work and driving adoption of these capabilities across the enterprise. Important initiatives like the Modernization and Resiliency Programs count on these foundational capabilities to succeed.
