Job Details

• Hands-on experience with Azure-native tools such as Log Analytics, Azure Monitor, Cost Management, and Microsoft Defender for Cloud
• Administer cloud-hosted infrastructure in Microsoft Azure, ensuring adherence to security, performance, and cost management standards appropriate for financial systems
• Configure and maintain Microsoft 365 services including Exchange Online, SharePoint, Teams, and OneDrive, with a focus on uptime, data protection, and service integrity
• Manage Windows Server infrastructure and Active Directory, including DNS, DHCP, and Group Policy, supporting authentication, authorization, and access management across the firm
• Use Microsoft Intune to manage workstation configurations, software deployments, device compliance, and zero-touch provisioning for a secure and scalable endpoint experience
• Assist with the configuration and support of network services and cloud connectivity
• Implement and maintain technical controls aligned to security policies, regulatory requirements (e.g., SEC, FINRA), and data classification standards; support internal and external audits
• Develop PowerShell scripts and leverage Microsoft automation tools to streamline provisioning, maintenance, and monitoring tasks
• Maintain clear documentation for system configurations, access policies, and operational procedures; ensure traceability of changes and adherence to change management protocols
• Exposure to IT service management (ITSM) practices and tools such as Jira and Bomgar
• Ability to interpret and implement security and compliance controls in partnership with cross-functional teams

Qualifications:

• 5+ years of relevant experience in infrastructure or systems engineering roles, ideally in financial services or investment management industry
• Expertise in Windows Server, Active Directory, DNS, DHCP, and Group Policy
• Proficient with Microsoft 365 administration, especially Exchange Online and SharePoint
• Strong security mindset, attention to auditability, and experience delivering infrastructure solutions in a regulated industry
• Experience managing and deploying endpoints using Microsoft Intune and enforcing device compliance
• Strong PowerShell scripting and automation skills to support custom telemetry, log analysis, and data integration
• Experience with Cisco Meraki (switching, firewalls, wireless) is strongly preferred
• Familiarity with Azure networking concepts (NSGs, VNets, VPN Gateway, etc.)
• Sound understanding of enterprise networking and security concepts, including firewalls, VPNs, and identity governance
• Bachelor's degree in information technology, computer science, or a related field — or equivalent practical experience in a financial services environment

Location:

Applicants are expected to work onsite in our San Francisco office in accordance with our hybrid working policy.