- Ufficio in New York
Description
We are seeking a hands-on Infrastructure & Security Engineer with strong expertise across server, network, and security domains. Security is a core priority for this role, and the successful candidate will play a key part in strengthening and evolving the firm’s security posture in response to an increasingly complex threat landscape, including emerging risks associated with AI.
This is a broad and technically engaging role, combining day-to-day operational support with project delivery and ongoing security enhancement. The role requires a proactive individual who can operate as both a technical expert and a thought partner, contributing to secure infrastructure design and continuous improvement.
This role is office-based and requires five days per week on-site presence.
Key Responsibilities
- Provide advanced technical support across infrastructure, including server, network, and security-related incidents and service requests
- Act as an escalation point for 2nd and 3rd line issues across desktop, server, and network environments
- Has experience working with Windows and Linux (Red Hat/CentOS) environments
- Support and maintain network infrastructure, including firewalls, switches, VPNs, and wireless systems (primarily Cisco-based)
- Own and drive security best practices, including system hardening, patching, vulnerability remediation, and endpoint protection
- Monitor and respond to security events, including log analysis and threat identification, with awareness of modern attack vectors (including AI-enabled threats)
- Contribute to the design and implementation of secure infrastructure solutions across both BAU and project work
- Collaborate closely with infrastructure and security teams to deliver enhancements and strategic initiatives
- Create and maintain clear documentation, including SOPs, architecture diagrams, and runbooks
- Participate in an on-call rotation to support critical systems outside business hours
Requirements
- Minimum 5+ years’ experience in infrastructure, networking, and security roles
- Strong hands-on experience with Windows Server and Linux (Red Hat/CentOS)
- Solid networking knowledge, including TCP/IP, VLANs, VPNs, DNS, DHCP, with practical experience in Cisco environments
- Demonstrated experience implementing and supporting security controls, including:
- Patch management and system hardening
- Endpoint protection and monitoring
- Identity and access management
- Good understanding of cyber security principles, including modern threat landscapes and evolving risks (e.g. automation and AI-driven attack vectors)
- Experience with virtualisation (VMware) and enterprise storage (SAN/NAS)
- Scripting or automation experience (e.g. PowerShell, Bash) is advantageous
- Experience in financial services or regulated environments is preferred
- Strong troubleshooting skills with a structured and analytical approach
- Able to balance BAU responsibilities with project delivery effectively
- A thoughtful and forward-looking mindset, with the ability to identify risks and propose improvements
- Clear and confident communicator, able to engage with both technical and non-technical stakeholders
- Self-motivated, accountable, and willing to take ownership of issues end-to-end
- Collaborative and adaptable, with a practical and solutions-focused approach
