ASSOCIATE DIRECTOR, INFRASTRUCTURE AUTOMATION ENGI

Job Overview

This position is part of the core Infrastructure team responsible for Arrowstreet managed core platforms.  The Infrastructure Systems Engineer will be responsible for designing, configuring, deploying, and maintaining Infrastructure systems leveraged by all teams.

While providing exceptional maintenance and support to Arrowstreet’s systems platforms; you will develop/deploy solutions that will continue to progress the DevOps practice. As a hands-on member of the DevOps practice within the systems Infrastructure team and to internal clients, you will be a part of the evolution from product management to service management. You will help identify trade-offs in deployment plans and any key day-to-day operational decisions impacting infrastructure investments.

Responsibilities

• Work with IT teams to document and implement technical solutions to meet the business requirements.
• Provide Level 3 support to resolve escalated issues and as required in root cause discovery of production impacting events
• Create automated scripts & documentation for reoccurring tasks (Powershell, Python, Ansible)
• Review and enhance documentation for troubleshooting and resolution procedures for all levels of support
• Design and develop reusable components to streamline processes and reduce duplication.
• Design and develop solutions in support of Cloud migration, high availability, performance, monitoring, and observability.
• Manage the establishment and configuration of infrastructure in an agile way by storing infrastructure as code and employing automated configuration management tools with a goal to be able to re-provision services.
• Assist in-house development teams with application/platform integration issues such as security/permissions, Service configuration, and network issues (name resolution, firewall port flows, and load balancing).
• Create functional tests to validate that systems are operating as expected and increase Arrowstreet’s observability practice. (eg: test to validate password retrieval from password vault works)
• Identify virtual and physical infrastructure issues which impact the functionality of the application and hosting platform. A working knowledge of Active Directory, Docker, Kubernetes is desirable.
• Perform operational engineering activities which include platform upgrades, patching, monitoring, configuration, and troubleshooting as needed.  While identifying automation opportunities.
• Technical representative for team managed services. E.g. Identity services (Active Directory, SAML, OAuth2), Windows, Linux, Storage, Virtualization, Secrets Management, and etc.
• Maintain support and operational efficiencies for Arrowstreet’s UNIX/Linux-based enterprise solutions.
• Communicate and troubleshoot issues across multiple stakeholders. Interaction with people at a variety of technical and management levels will occur daily.
• Serve as the team’s escalation engineer for 3rd level support activities.
• Provide periodic off-hours on-call support per team rotation.
• Provide cross training to other operations engineers as required
• Occasional evening or weekend work required.

Qualifications

• Working in an Agile environment.
• 3+ years’ working in a Hybrid Cloud, Windows, and Linux environment.
• 2+ years’ experience with automation and/or infrastructure as code tools, such as Ansible or Terraform.
• 3+ years’ experience with a scripting language such as Bash, Python, and/or PowerShell.
• Experience with enterprise Linux distributions/Development, preferably RedHat as well as Active Directory integration: Centrify, SSSD, Samba, etc.
• Working knowledge of Certificates and working with truststore/keystores/OpenSSL
• Solid understanding of fundamental technologies like DNS, load balancing, SSL, TCP/IP, networking, security best practices, performance, high availability, disaster recovery, and business continuity.
• Experience with containerization, Docker, and Kubernetes.
• Experience with enterprise deployments of Microsoft technologies (e.g. Windows, Windows Server, Active Directory).  
• Experience with Kerberos troubleshooting and understanding Kerberos issues.
• Troubleshooting tools for authentication issues (Wireshark, HTTP Tracing tools and log analysis)
• Single Sign On Protocols (SAML, OAuth, OpenID) and Products (OneLogin, ADFS, EntraID)
• Public Key Infrastructure (PKI), X.509 certificates, SSL/TLS, Certificate lifecycle management and tracking/rotation
• Ability to work independently, develop long term strategic Infrastructure enterprise goals.
• Ability to communicate well within and across teams; foster relationships throughout the organization, and build trust amongst peers through demonstrated strong job performance.

Technical Plus

• Experience with Azure AD and Office 365 (Exchange, Sharepoint, etc)
• AWS experience especially with AWS IAM, SSO and EKS.
• Experience with any of the following platforms (Elasticsearch/Kibana, Artifactory, Anaconda/conda/pip)

We maintain a friendly, team-oriented environment and place a high value on professionalism, attitude, and initiative.

We maintain a friendly, team-oriented environment and place a high value on professionalism, attitude and initiative.