Description
Our Systems Engineering team owns the infrastructure that keeps a ~2,500-person global firm running around the clock: cloud (primarily AWS), Microsoft 365, Windows Server, identity platforms (Entra ID, Active Directory, SailPoint), and enterprise email flow. We are in the middle of a deliberate shift from click-ops to modern engineering practice: infrastructure as code, version control, CI/CD, cloud infrastructure, least-privilege identity, and AI-assisted workflows.
We're hiring a System Engineer to help drive that shift. You'll operate and harden the current stack while actively replacing manual, one-off work with automation and repeatable, reviewable process. We're looking for a DevOps/SRE mindset: someone who sees a manual runbook and wants to turn it into code, contributes to technical standards, and uses AI to move faster than the team could before.
Just as important, we want someone who questions why things are the way they are. Much of our stack was inherited; some of it is legacy or dependent on one person's knowledge. You should be comfortable looking at an established design, asking whether there's a better way, and making the case for change, grounded in a clear-eyed read of the pros, cons, and migration trade-offs, not change for its own sake.
This is a broad remit: identity and access, email flow, cloud, and core infrastructure. We're not expecting you to arrive an expert in every one. We are looking for someone comfortable stepping into each area, learning fast, and growing into full ownership over time.
What you'll do
- Automate and operate core infrastructure across AWS, Microsoft 365, and Windows Server, with reliability, security, and least privilege as defaults.
- Engineer identity and access across our identity platforms (Entra ID, Active Directory / Domain Controllers, and SailPoint), including provisioning, governance, and least-privilege models on-prem and in the cloud.
- Own and improve enterprise email flow: Exchange Online, our secure email gateway, and email authentication (SPF, DKIM, DMARC) across first- and third-party sending platforms.
- Evaluate inherited architecture and legacy tooling, ask why it works the way it does, and propose better approaches, backed by honest pros, cons, and migration trade-offs.
- Contribute to the move to infrastructure as code: build and maintain declarative infrastructure (our stack is OpenTofu and Spacelift) so environments are version-controlled, peer-reviewed, and reproducible.
- Put your infrastructure and automation under version control (Git), and work in a pull-request review and CI/CD workflow.
- Support and extend our cloud footprint across AWS and Azure, including networking, identity, and workload migration.
- Participate in operational coverage and incident response for a 24/7 business spanning the world, then help write the postmortems and automate the fix so it doesn't recur.
- Use AI to troubleshoot, script, document, and design faster, and share what works with the team.
- Help raise the bar on security, reliability, documentation, and repeatability through code review and collaboration.
What we're looking for
- 3–5 years in systems / infrastructure / platform / SRE engineering.
- A DevOps/SRE mindset: you reach for automation and repeatable process over manual, one-off work, and can point to click-ops you've replaced (or want to replace) with code.
- You ask "why do we do it this way?" and push for something better, but you're honest about the trade-offs and know when a change is worth the effort and when it isn't.
- Solid scripting and automation skills (PowerShell and Bash required; Python, Javascript or similar a plus).
- Exposure to infrastructure as code (Terraform, Ansible, OpenTofu, etc.), and comfort (or eagerness to grow) working in Git with pull-request-based review.
- Strong working knowledge of the Microsoft ecosystem: Microsoft 365 and Windows Server.
- Comfort with identity platforms and identity security: Entra ID and Active Directory required; SailPoint or another identity governance tool a plus.
- Familiarity with enterprise email flow: Exchange Online, secure email gateways (e.g. Mimecast), and email authentication (SPF, DKIM, DMARC), or a strong foundation to grow into it.
- Cloud experience in AWS and/or Azure, including networking, identity, and core services. AWS is our primary platform.
- Networking fundamentals (DNS, DHCP, TCP/IP, VPN, firewalls).
- A security-first, least-privilege mindset.
- Curiosity about using AI tools to work faster and better.
- Clear communicator who collaborates well across a distributed team.
- Based on a 9–5 ET schedule, but realistic about infrastructure work: occasional after-hours or weekend maintenance windows and releases, a shared on-call rotation, and some flexibility to coordinate across US, European, and Indian time zones.
Nice to have
- Relevant certifications (AWS, Azure, SailPoint, Microsoft).
- CI/CD pipeline experience (GitHub Actions, AWS CodePipeline, or similar).
- Containers and orchestration (Docker, AWS ECS).
- Monitoring and observability tooling.
- Experience modernizing a traditional ops team.
Why this role
You'll be part of modernizing how a global firm runs its infrastructure, with real mandate and support to replace manual work with engineering. If you want to build automation, grow your DevOps/SRE skills, an
Similar jobs
Est. 165,000 USD
WHO WE ARE Zeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire, grow, and retain cu…
APPLICATIONS FROM OUTSIDE COLOMBIA AND BRAZIL WILL NOT BE CONSIDERED FOR THIS ROLE Robots & Pencils is an applied AI engineering firm building the next frontier of business architecture. We design and ship AI co-work…
Est. 124,000 USD
Are you ready to make an impact?West Monroe is seeking a Software Engineer to join the AI Assets Foundry Team, working with the internal Labs product team to develop proprietary software assets and AI capabilities that h…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.…
Est. 175,000 USD
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 120,000 PLN
EBS is a rapidly expanding, entrepreneurial technology company and part of Alarm.com. Alarm.com is the leading cloud-based platform for smart security and the Internet of Things. More than 7.6+ million home and business…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
About Agoda At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore…
Developer Platform – Gateway Services – Job Description Staff Engineer – Gateway Services Level: L7-1 Location: Bangalore p
Est. 650,000 DKK
Who We Are VML is a leading creative company that combines brand experience, customer experience, and commerce, creating connected brands to drive growth. VML is celebrated for its innovative and award-winning human-firs…
Est. 141,000 USD
Cloud Architect Location: Houston, TX This is a 4 month assignment with potential to extend Houston, local OR be able to travel to Houston, TX to be at customer site every other week for a 4-5days/week Company Overview R…
Senior Staff Engineer – Gateway Services The Gateway Services team is responsible for building Coupang’s traffic infrastructure layer using Service Mesh. Key aspects of the infrastructure layer include service discovery,…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 250,000 USD
We’re looking for a Principal Architect to lead the design and delivery of complex, multi-domain systems spanning cloud, data, and AI. This role is ideal for a deeply experienced engineer who owns the hardest architectur…
Est. 250,000 USD
We’re looking for a Principal Architect to lead the design and delivery of complex, multi-domain systems spanning cloud, data, and AI. This role is ideal for a deeply experienced engineer who owns the hardest architectur…
Senior IT Engineer – Network & Endpoint Infrastructure Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of…
Est. 840,000 SEK
About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies…
The Ministry of Finance is responsible for the Government Procurement (GP) policies, which govern how government agencies conduct their procurement. With evolving needs of our public officers and changing procurement lan…
APPLICATIONS FROM OUTSIDE COLOMBIA WILL NOT BE CONSIDERED FOR THIS ROLERobots & Pencils is an applied AI engineering firm building the next frontier of business architecture. We design and ship AI co-workers that int…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 105,000 USD
Step into a career with ASM, where cutting edge technology meets collaborative culture. For over 55 years ASM has been ahead of what’s next, at the forefront of innovation and what’s technologically possible. With more…
Est. 152,500 USD
About SRS Acquiom SRS Acquiom delivers the smartest way to run a deal™ through a platform and services designed to help deal parties manage complex M&A and loan agency transactions more efficiently. Based in Denver,…
Est. 155,000 USD
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 120,000 GBP
About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with grea…
Est. 125,000 USD
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Mi…