SUMMARY:
As a Senior M365/Azure Systems Engineer, he or she will be a member of the bank's technical systems Americas Team. This role will provide subject matter expertise in support of the M365/Azure environment and core services. responsibilities provide 2nd level support for all M365 applications work with internal/external IT teams to collaborate on technical solutions, daily system review/health check, work to address IT related service outages patching for remaining On-prem servers, vulnerability remediation, manage/create/remove M365 related services (Exchange, MS Teams, SharePoint, etc.) and an escalation point for end-user technical issues that the support desk and/or head-office escalates. The Engineer will be responsible for the overall awareness and enforcement of the IT Security policies and procedures established for the Americas region. The Engineer will be responsible for assisting with the overall systems and network architecture of the Americas region as it pertains to Security, Productivity and efficiency as well as in alignment with head office standards.
The system engineer plays a crucial role in IT Team’s mission to deliver efficient, effective and reliable technological support for New York Branch business activities and while focusing at all times in keeping our data assets save from any threats.
DUTIES and RESPONSIBILITIES:
·Monitor, manage and maintain day to day activity of on-prem and M365/Azure environments
·Respond and address system alerts/notifications within defined SLO’s
·Respond and address head-office alerts/notifications within defined SLO’s
·Review systems regularly and develop optimization strategies when applicable
·Liaise with 3rd party vendors to maintain/patch/upgrade business critical systems
·Responding and complete security audit requests presented by the ISO
·Regularly maintain/refresh internal IT procedures and documentation
·Proactively review security/vulnerability notifications then create/enact remediation plans (if applicable)
·Review maintenance contracts regularly and ensure that all applicable hardware/software support is active
·Work with internal/external IT Teams and review technologies/solutions to ensure optimal technical and financial effeminacy
·Ensure Backup and DR solutions are regularly tested to meet expected RTO/RPO
Technology (high-level):
·Firewalls: Cisco Firepower, Fortinet (physical and virtual), Checkpoint (virtual)
·Switching: Cisco, Fortinet, Meraki
·Virtualization: VMware, Azure, Hyper-V
·Backup/DR: Veeam, Azure Backup, Azure Site Recovery
·M365 (Exchange, Teams, SharePoint, ODfB)
·Microsoft Solutions: Server OS, Desktop OS, MS Office Suite (VL and M365)
SKILLS REQUIRED:
- Motivated self-starter who has the ability to lead by example and break-down complex problems in order to find resolutions quickly
- Ability to work in a fast paced complex environment
- Competent knowledge in (basic to advanced) solutions referenced in “Technology” section
·Ability to communicate technically and non-technically with management, staff, head-office/international Branches and vendors
·Technical writing (as it applies to answering audits and writing procedural documents)
- Competent knowledge in technical terminologies and their applications
- BC/DR, DNS, DHCP, FTP, AD, DC, CA, IPSec, SSL, BGP, VOIP,
- Ability to occasionally work evenings and on weekends to support IT related events
- Projects, upgrades, DR testing, security vulnerability mitigation
- Knowledge and understanding of Information Security requirements and industry standards. Must be able to work closely with the Information Security Officer to ensure that all systems and network related devices are secure and meet company requirements as outlined by the policies and procedures of the business. (CISSP certification is a plus demonstrating a high level of IPSEC)
- Ability to identify where responsiveness and quick delivery and where diligence and quality checks and proper testing are key to delivering an expected result. Ability to properly balance both qualities.
- Passion for identifying and continuously improve own area of responsibility contributing to the overall important goals of IT infrastructure efficiency and data security
STRONGLY RECCOMENDED SKILLS:
·Subject matter expertise with Office 365 and Microsoft Azure with emphasis in security ATP (Advanced Threat Protection) policies for Office 365, Azure AD Identity Protection and CA (Conditional Access)
·Subject matter expertise in compliance, data retention leveraging Office 365, DLP (Data Loss Protection) and CASB (Cloud Access Security Brokers). Lead the Architecture and security management to demonstrate understanding of Microsoft Azure security technologies and strategy
·Knowledge of ITIL and CIS control standards
·M365, Azure, Windows (server/desktop), Veeam, Cisco, Fortinet certifications/training
oAZ-900: Microsoft Azure Fundamentals, AZ-104: Microsoft Azure Administrator
oMS-900: Microsoft 365 Fundamentals MS-100, MS-101: Microsoft 365 Certified: Enterprise Administrator Expert
oMSCA (2016, 2019), MCSE Core Infrastructure, MCSE: Business Applications
·Working knowledge of/with Banking systems
oBloomberg, Reuters, Midas, FXT, JP Morgan, DTCC, BoNY
·Passion for working and building relationships within an international team and with various international locations, leveraging intercultural competence and communication skills
·Strong willingness to learn and to self-develop needed skill sets to deliver on the job
EDUCATION/EXPERIENCE (minimum):
- Bachelor’s degree in Engineering, Computer Science, related field; or equivalent professional experience
- 10 years IT infrastructure support (physical/virtual servers, networks)
- 5 years of experience administrating M365 (licensing, feature management)
- 5 years of experience administrating Azure (subscriptions, networks, virtual servers)
- 2+ years of experience working in the financial industry