Senior Infrastructure Systems Engineer

Job Overview

This position is part of the core Infrastructure team responsible for Arrowstreet managed core systems and platforms.  As an Infrastructure Systems Engineer, you will be responsible for designing, configuring, deploying, and maintaining Infrastructure systems leveraged by all teams.

While providing exceptional maintenance and support to Arrowstreet’s systems & platforms; you will develop/deploy solutions that will continue to progress Arrowstreet’s DevOps practice. As a hands-on member, you will aid the acceleration of the DevOps practice within the Infrastructure Systems team and to internal clients. The Infrastructure engineer will join a skilled team of engineers solving complex issues on a mixed Operating System hybrid cloud environment. As the Senior Infrastructure engineer, you will drive execution of disciplined and standardized processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency, especially within our Microsoft on-premise and M365/Azure ecosystems. You will help identify trade-offs in deployment plans and any key day-to-day operational decisions impacting Arrowstreet’s overall success.

Responsibilities

• Design, implement, and maintain internal infrastructure solutions (on-premise and cloud-based).
• Develop and manage Infrastructure as Code (IaC) using Terraform, PowerShell, Ansible, Python or similar.
• Provide Level 3 support to resolve escalated issues and as required in root cause analysis.
• Work with security, compliance, and developers to align design with regulatory requirements.
• Automate deployment, scaling, and maintenance of infrastructure resources, Windows and Unix.
• Ensure high availability, scalability, and security of internal platforms.
• Assist in-house development teams with application/platform integration such as authorization / permissions, service configuration, network, and performance related inquiries.
• M365 Administration: Maintain and enhance Microsoft 365 services (Exchange Online, SharePoint, Teams, Intune, and security controls)
• Extensive practical and applied experience in Active Directory, Microsoft Exchange, ADFS, SSO, Windows Server, M365, Entra, including backup and restore procedures and active testing of the same
• Identify virtual and physical infrastructure issues which impact the functionality of the application and hosting platform. A working knowledge of Active Directory, Docker, Kubernetes is desirable.
• Support internal teams in deploying and maintaining financial applications with high reliability.
• Technical representative for team managed services. E.g. Data Protection / Recovery, Identity services (AD, SAML, OAuth2), Windows, Linux, Storage, Virtualization, Secrets Mgmt., and etc.
• Implement security best practices in CI/CD pipelines (e.g., secrets mgmt.., compliance checks).
• Implement observability, performance, monitoring, logging, and alerting solutions.
• Ensure compliance with internal policies and industry regulations (e.g., SOC1).
• Develop and maintain technical documentation to support auditability and regulatory reviews.
• Provide cross training to other operations engineers as required.
• Occasional evening or weekend work required.  After hours on-call support team rotation.

Qualifications

• Bachelor's degree in Computer Science, Information Technology or a related discipline or equivalent work experience
• 3+ years’ working in a Hybrid Cloud, Windows, and Linux environment.
• 2+ years’ experience with automation and/or infrastructure as code tools, such as Ansible or Terraform.
• 3+ years’ experience with a scripting language such as Bash, Python, and/or PowerShell.
• Proven experience in Microsoft System Administration with a strong focus on PowerShell scripting.
• Expertise in supporting and debugging Kerberos authentication, including configuration, ticket management, and troubleshooting in an enterprise environment.
• Solid understanding of fundamental technologies like DNS, load balancing, SSL, TCP/IP, networking, security best practices, performance, high availability, disaster recovery, and business continuity.
• Experience with Enterprise Microsoft technologies (e.g. Windows Server, Active Directory, MDT).  
• Proficient with troubleshooting tools (Wireshark, Fiddler, Elastic, OpenSearch, and etc.)
• Hands-on ability to develop, support and debug applications leveraging Single Sign On Protocols (SAML, OAuth, OpenID) and Products (OneLogin, ADFS, EntraID)
• Strong working knowledge of Public Key Infrastructure (PKI), X.509 certificates, SSL/TLS, Certificate lifecycle management and tracking/rotation
• Ability to work independently, develop long term strategic Infrastructure enterprise goals.
• Working in an Agile environment.

Technical Plus

• AWS experience especially with AWS IAM, SSO and related technologies.
• Experience with any of the following platforms (Elasticsearch/Kibana, Artifactory, Anaconda/conda/pip)
• Experience with enterprise Linux distributions/Development, preferably RedHat as well as Active Directory integration: Centrify, SSSD, Samba, etc.

Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world. 

Arrowstreet Capital is an equal opportunity employment firm.  All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, gender identity, genetic information, age, sexual orientation, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.

Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.