Senior Infrastructure Systems Engineer

Arrowstreet Capital•Boston, MA

57d•$130,000 - $290,000

About The Position

This position is part of the core Infrastructure team responsible for Arrowstreet managed core systems and platforms. As an Infrastructure Systems Engineer, you will be responsible for designing, configuring, deploying, and maintaining Infrastructure systems leveraged by all teams. While providing exceptional maintenance and support to Arrowstreet's systems & platforms; you will develop/deploy solutions that will continue to progress Arrowstreet's M365 and Azure practice. The Senior Infrastructure Engineer will join a skilled team of engineers solving complex issues on a mixed Operating System hybrid cloud environment. As the Senir Infrastructure Engineer, you will drive execution of disciplined and standardized processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency, especially within our Microsoft on-premise and M365/Azure ecosystems. You will help identify trade-offs in deployment plans and any key day-to-day operational decisions impacting Arrowstreet's overall success.

Requirements

3+ years' working in a Hybrid Cloud, Windows, and Linux environment
Extensive practical and applied experience in Active Directory, Microsoft Exchange, ADFS, Entra, M365 Services, including backup and restore procedures and active testing of the same
Proficiency with Azure Services, including Azure Storage, Azure Virtual Machines, Azure Networking and Azure AD
3+ years' experience with a scripting language such as Bash, Python, and/or PowerShell.
Proven experience in Microsoft System Administration with a strong focus on PowerShell scripting.
Expertise in supporting and debugging Kerberos authentication, including configuration, ticket management, and troubleshooting in an enterprise environment.
Proficient with troubleshooting tools (Wireshark, Fiddler, Elastic, OpenSearch, and etc.)
Hands-on ability to develop, support and debug applications leveraging Single Sign On Protocols (SAML, OAuth, OpenID) and Products (OneLogin, ADFS, EntraID)
Strong working knowledge of Public Key Infrastructure (PKI), X.509 certificates, SSL/TLS, Certificate lifecycle management and tracking/rotation
Ability to work independently, develop long term strategic Infrastructure enterprise goals.
Working in an Agile environment.

Nice To Haves

Experience with automation and/or infrastructure as code tools, such as Ansible, Terraform or Python

Responsibilities

Design, implement, and maintain internal infrastructure solutions (on-premise and cloud-based).
M365 Administration: Maintain and enhance Microsoft 365 services (Exchange Online, SharePoint, Teams, Intune, Purview, One Drive and security controls)
Design, implement and manage secure Azure cloud infrastructure, collaborating with teams to ensure appropriate security configuration for Azure Services
Collaborate on efforts to manage Azure Policy as code by providing directional strategy and guidance
Design and deploy Microsoft Purview configuration and policies for M365 and Azure platforms to meet compliance and data governance objectives
Provide Level 3 support to resolve escalated issues and as required in root cause analysis.
Work with security, compliance, and developers to align design with regulatory requirements
Automate deployment, scaling, and maintenance of infrastructure resources, Windows and Unix.
Assist in-house development teams with application/platform integration such as authorization / permissions, service configuration, network, and performance related inquiries.
Identify virtual and physical infrastructure issues which impact the functionality of the application and hosting platform. A working knowledge of Active Directory, Docker, Kubernetes is desirable.
Technical representative for team managed services. E.g. Data Protection / Recovery, Identity services (AD, SAML, OAuth2), Windows, Linux, Storage, Virtualization, Secrets Mgmt., and etc.
Implement security best practices in CI/CD pipelines (e.g., secrets mgmt.., compliance checks).
Implement observability, performance, monitoring, logging, and alerting solutions.
Ensure compliance with internal policies and industry regulations (e.g., SOC1).
Develop and maintain technical documentation to support auditability and regulatory reviews.
Provide cross training to other operations engineers as required.
Occasional evening or weekend work required. After hours on-call support team rotation.