Infrastructure Engineer

Princeton University•Princeton, NJ

63d•$135,000 - $150,000•Hybrid

About The Position

The Princeton DMIA Integration team is seeking an experienced Infrastructure Engineer to be the backbone of our Integration Services team. This role owns the provisioning, configuration, security, and ongoing maintenance of all infrastructure that supports our integration platforms — spanning API integrations, data pipelines, and the shared services that underpin them. You will work across our current on-premises Linux environment and be instrumental in building out the cloud infrastructure as we modernize our platform stack. This position is a hybrid role.

Requirements

Azure cloud infrastructure — compute, networking, storage, identity, security
Kubernetes and containerization — Docker, AKS or equivalent managed Kubernetes
Infrastructure-as-Code — Bicep, Terraform, or ARM; Bicep preferred
Linux / shell scripting
Python programming
SQL — sufficient for operational queries and platform tooling
Networking — DNS, HTTP/S, TCP/IP, load balancing, proxies, firewalls
IAM — Active Directory, LDAP, OAuth 2.0, SAML, certificate management
7+ years provisioning and managing cloud infrastructure on Azure, including network and security configuration
Demonstrated experience building or scaling a shared platform that hosts applications for multiple teams — including tenant isolation, resource governance, and self-service or templated onboarding
Experience establishing CI/CD pipelines for automated deployment of containerized workloads, using Azure DevOps, Jenkins, GitHub Actions, or equivalent
Experience embedding automated security controls into deployment pipelines — container image and vulnerability scanning, policy enforcement, compliance gating
Linux/Unix systems administration with RHEL/CentOS/Ubuntu — systemd, package management, performance tuning
Advanced shell and Python scripting for automation, monitoring, and operational tasks
Hands-on IAM experience — Active Directory, LDAP, certificate management, and SSO integration
Solid networking fundamentals — TCP/IP, DNS, HTTP/S, load balancing, firewall and configuration
Working knowledge of REST APIs for infrastructure automation and tool integration
Experience with infrastructure monitoring and observability tooling — Prometheus, Grafana, ELK, Azure Monitor, or equivalent
Ability to set technical direction and mentor engineers, including documenting standards and transferring knowledge to colleagues newer to modern cloud practice
Ability to work directly with application teams to translate hosting requirements into platform capabilities, and to communicate technical constraints to non-technical stakeholders
Bachelor's degree in computer science, information technology, engineering, or a related field; or equivalent professional work experience

Nice To Haves

Experience with GitOps deployment practices — ArgoCD, Flux — and Helm chart authoring
Experience administering WSO2 platform infrastructure (API Manager, Micro Integrator, streaming components)
Azure-native security tooling — Azure Policy, Defender for Cloud, private endpoints, network security groups
Secrets management — HashiCorp Vault, Azure Key Vault
Configuration management — Ansible, or equivalent
Familiarity with cloud-native data platform infrastructure — Snowflake, Databricks, Microsoft Fabric, or equivalent
Higher education environment experience, particularly federated identity — Shibboleth, SAML-based SSO
Cloud platform certifications — Azure Administrator, Azure Solutions Architect, CKA, or equivalent
Exposure to FinOps practices and cloud cost optimization
Experience designing infrastructure documented and standardized for eventual operational handoff

Responsibilities

Architect, Design and Develop: Provision, configure, and maintain all infrastructure supporting integration, and data and platforms including WSO2, and related middleware on on-premises Linux servers.
Design and build Azure cloud infrastructure hosting platform using AKS (Azure Kubernetes Service), and other Azure services for the organization’s next-generation API, data, and applications, following infrastructure-as-code (IaC) principles.
Manage and harden on-premises server environments including OS patching, package management, service configuration, and security hardening on Linux.
Administer IAM integrations including LDAP directory services, Active Directory, service account management, and certificate lifecycle management.
Own network configuration relevant to integration workloads: DNS, firewall rules, load balancers, VPNs, and API gateway networking.
Collaborate on CI/CD pipeline infrastructure, including build agents, artifact repositories, and deployment automation tooling.
Support API and data engineering teams with environment provisioning, capacity planning, and performance tuning of integration runtimes.
Production Support: Participate in on-call production support rotation and serve as escalation point for infrastructure-layer incidents.
Implement and maintain monitoring, alerting, and logging infrastructure (log aggregation, metrics dashboards, uptime monitoring) for all integration services.
Lead disaster recovery planning, backup procedures, and environment restoration for integration platform components.