Senior Infrastructure Systems Engineer

Job Overview

This position is part of the core Infrastructure team responsible for Arrowstreet managed core systems and platforms.  As an Infrastructure Systems Engineer, you will be responsible for designing, configuring, deploying, and maintaining Infrastructure systems leveraged by all teams.

While providing exceptional maintenance and support to Arrowstreet’s systems & platforms; you will develop/deploy solutions that will continue to progress Arrowstreet’s M365 and Azure practice. The Senior Infrastructure Engineer will join a skilled team of engineers solving complex issues on a mixed Operating System hybrid cloud environment. As the Senior Infrastructure Engineer, you will drive execution of disciplined and standardized processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency, especially within our Microsoft on-premise and M365/Azure ecosystems. You will help identify trade-offs in deployment plans and any key day-to-day operational decisions impacting Arrowstreet’s overall success.

Responsibilities

• Design, implement, and maintain internal infrastructure solutions (on-premise and cloud-based).

• M365 Administration: Maintain and enhance Microsoft 365 services (Exchange Online, SharePoint, Teams, Intune, Purview, One Drive and security controls)

• Design, implement and manage secure Azure cloud infrastructure, collaborating with teams to ensure appropriate security configuration for Azure Services

• Collaborate on efforts to manage Azure Policy as code by providing directional strategy and guidance

• Design and deploy Microsoft Purview configuration and policies for M365 and Azure platforms to meet compliance and data governance objectives

• Provide Level 3 support to resolve escalated issues and as required in root cause analysis.

• Work with security, compliance, and developers to align design with regulatory requirements

• Automate deployment, scaling, and maintenance of infrastructure resources, Windows and Unix.

• Assist in-house development teams with application/platform integration such as authorization / permissions, service configuration, network, and performance related inquiries.

• Identify virtual and physical infrastructure issues which impact the functionality of the application and hosting platform. A working knowledge of Active Directory, Docker, Kubernetes is desirable.

• Technical representative for team managed services. E.g. Data Protection / Recovery, Identity services (AD, SAML, OAuth2), Windows, Linux, Storage, Virtualization, Secrets Mgmt., and etc.

• Implement security best practices in CI/CD pipelines (e.g., secrets mgmt.., compliance checks).

• Implement observability, performance, monitoring, logging, and alerting solutions.

• Ensure compliance with internal policies and industry regulations (e.g., SOC1).

• Develop and maintain technical documentation to support auditability and regulatory reviews.

  Provide cross training to other operations engineers as required.

• Occasional evening or weekend work required.  After hours on-call support team rotation.

Qualifications

• 3+ years’ working in a Hybrid Cloud, Windows, and Linux environment

• Extensive practical and applied experience in Active Directory, Microsoft Exchange, ADFS, Entra, M365 Services,  including backup and restore procedures and active testing of the same

• Proficiency with Azure Services, including Azure Storage, Azure Virtual Machines, Azure Networking and Azure AD

• 3+ years’ experience with a scripting language such as Bash, Python, and/or PowerShell.

• Proven experience in Microsoft System Administration with a strong focus on PowerShell scripting.

• Expertise in supporting and debugging Kerberos authentication, including configuration, ticket management, and troubleshooting in an enterprise environment.

• Proficient with troubleshooting tools (Wireshark, Fiddler, Elastic, OpenSearch, and etc.)

• Hands-on ability to develop, support and debug applications leveraging Single Sign On Protocols (SAML, OAuth, OpenID) and Products (OneLogin, ADFS, EntraID)

• Strong working knowledge of Public Key Infrastructure (PKI), X.509 certificates, SSL/TLS, Certificate lifecycle management and tracking/rotation

• Ability to work independently, develop long term strategic Infrastructure enterprise goals.

• Working in an Agile environment.

Technical Plus

• Experience with automation and/or infrastructure as code tools, such as Ansible, Terraform or Python

The base salary range for this position is $130,000 - $290,000 per year.

Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate’s base salary placement within the listed range will vary based on the candidate’s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.  

Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world. 

All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.

Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.