Infrastructure Server Engineer

Position Overview

The Infrastructure Server Engineer will be embedded within a global IoT and smart buildings programme at a Tier 1 financial institution. The programme is responsible for migrating IoT devices including building management systems (BMS), indoor air quality sensors, occupancy sensors, smart lighting, CCTV, and multimedia control systems onto a dedicated SD Access fabric, segregated from the corporate network.

The engineer will serve as a bridge between IoT devices, internal technology teams (networking, security, proxy, firewall), and external vendors owning onboarding, troubleshooting, configuration, and lifecycle management of devices across global office locations including New York, London, and future programme sites.

Key Responsibilities

• Onboard IoT devices onto the SD Access fabric registering IPs, configuring MAC addresses, DNS records, NTP, and validating end-to-end connectivity
• Troubleshoot device connectivity issues in collaboration with ENS, proxy, firewall, and security architecture teams including running or requesting packet captures where needed
• Configure and support a mixed device estate: SaaS applications, physical vendor appliances, and virtual machines hosted in the DMZ
• Support and execute proof-of-concept (PoC), request for proposal (RFP), and request for enhancement (RFE) initiatives across IoT systems
• Manage the device asset lifecycle from deployment and configuration through to maintenance and decommission
• Liaise with vendors and internal engineering teams to ensure devices meet the firm s security and infrastructure policies, including security architecture review (SECR) processes
• Maintain clear technical documentation and communicate complex infrastructure topics to non-technical stakeholders
• Participate in building migrations and deployments, which may require occasional out-of-hours and weekend availability to support global time zones Required Qualifications
• Hands-on experience with both Linux and Windows server administration not theoretical; must be able to troubleshoot and configure in both environments
• Solid foundational understanding of networking concepts: DNS, DHCP, NTP, IP addressing, wireless MAC registration, 802.1X authentication, packet capture methodology
• Working knowledge of security protocols and concepts: firewalls, proxy servers, certificates, SAML, OIDC, and single sign-on (SSO) understanding not just what they are but why they are used
• Experience configuring and troubleshooting IoT or physical devices understanding how devices communicate with upstream servers and cloud endpoints
• Familiarity with APIs and how applications communicate across infrastructure layers
• Comfortable working across a mixed environment of SaaS platforms, physical appliances, and virtual machines
• Comfortable with occasional weekend and out-of-hours work during active migration periods