Key skills
SAMLSSOSingle Sign-OnSaaSCollaborationFirewall
About this role
Infrastructure Server Engineer
Location: New York, NY (One New York Plaza)
Position Overview
The Infrastructure Server Engineer will be embedded within a global IoT and smart buildings programme at a Tier 1 financial institution. The programme is responsible for migrating IoT devices including building management systems (BMS), indoor air quality sensors, occupancy sensors, smart lighting, CCTV, and multimedia control systems onto a dedicated SD Access fabric, segregated from the corporate network.
The engineer will serve as a bridge between IoT devices, internal technology teams (networking, security, proxy, firewall), and external vendors owning onboarding, troubleshooting, configuration, and lifecycle management of devices across global office locations including New York, London, and future programme sites.
Key Responsibilities
Onboard IoT devices onto the SD Access fabric registering IPs, configuring MAC addresses, DNS records, NTP, and validating end-to-end connectivity
Troubleshoot device connectivity issues in collaboration with ENS, proxy, firewall, and security architecture teams including running or requesting packet captures where needed
Configure and support a mixed device estate: SaaS applications, physical vendor appliances, and virtual machines hosted in the DMZ
Support and execute proof-of-concept (PoC), request for proposal (RFP), and request for enhancement (RFE) initiatives across IoT systems
Manage the device asset lifecycle from deployment and configuration through to maintenance and decommission
Liaise with vendors and internal engineering teams to ensure devices meet the firm s security and infrastructure policies, including security architecture review (SECR) processes
Maintain clear technical documentation and communicate complex infrastructure topics to non-technical stakeholders
Participate in building migrations and deployments, which may require occasional out-of-hours and weekend availability to support global time zones Required Qualifications
Hands-on experience with both Linux and Windows server administration not theoretical; must be able to troubleshoot and configure in both environments
Solid foundational understanding of networking concepts: DNS, DHCP, NTP, IP addressing, wireless MAC registration, 802.1X authentication, packet capture methodology
Working knowledge of security protocols and concepts: firewalls, proxy servers, certificates, SAML, OIDC, and single sign-on (SSO) understanding not just what they are but why they are used
Experience configuring and troubleshooting IoT or physical devices understanding how devices communicate with upstream servers and cloud endpoints
Familiarity with APIs and how applications communicate across infrastructure layers
Comfortable working across a mixed environment of SaaS platforms, physical appliances, and virtual machines
Comfortable with occasional weekend and out-of-hours work during active migration periods
Location: New York, NY (One New York Plaza)
Position Overview
The Infrastructure Server Engineer will be embedded within a global IoT and smart buildings programme at a Tier 1 financial institution. The programme is responsible for migrating IoT devices including building management systems (BMS), indoor air quality sensors, occupancy sensors, smart lighting, CCTV, and multimedia control systems onto a dedicated SD Access fabric, segregated from the corporate network.
The engineer will serve as a bridge between IoT devices, internal technology teams (networking, security, proxy, firewall), and external vendors owning onboarding, troubleshooting, configuration, and lifecycle management of devices across global office locations including New York, London, and future programme sites.
Key Responsibilities
Onboard IoT devices onto the SD Access fabric registering IPs, configuring MAC addresses, DNS records, NTP, and validating end-to-end connectivity
Troubleshoot device connectivity issues in collaboration with ENS, proxy, firewall, and security architecture teams including running or requesting packet captures where needed
Configure and support a mixed device estate: SaaS applications, physical vendor appliances, and virtual machines hosted in the DMZ
Support and execute proof-of-concept (PoC), request for proposal (RFP), and request for enhancement (RFE) initiatives across IoT systems
Manage the device asset lifecycle from deployment and configuration through to maintenance and decommission
Liaise with vendors and internal engineering teams to ensure devices meet the firm s security and infrastructure policies, including security architecture review (SECR) processes
Maintain clear technical documentation and communicate complex infrastructure topics to non-technical stakeholders
Participate in building migrations and deployments, which may require occasional out-of-hours and weekend availability to support global time zones Required Qualifications
Hands-on experience with both Linux and Windows server administration not theoretical; must be able to troubleshoot and configure in both environments
Solid foundational understanding of networking concepts: DNS, DHCP, NTP, IP addressing, wireless MAC registration, 802.1X authentication, packet capture methodology
Working knowledge of security protocols and concepts: firewalls, proxy servers, certificates, SAML, OIDC, and single sign-on (SSO) understanding not just what they are but why they are used
Experience configuring and troubleshooting IoT or physical devices understanding how devices communicate with upstream servers and cloud endpoints
Familiarity with APIs and how applications communicate across infrastructure layers
Comfortable working across a mixed environment of SaaS platforms, physical appliances, and virtual machines
Comfortable with occasional weekend and out-of-hours work during active migration periods