Infrastructure Engineer II responsible for day-to-day ownership of the platform supporting the lending business, including Cato Networks SASE, Cisco and Meraki networking, Okta and Entra ID identity, and the co-located data center. Works independently on production changes while collaborating with senior engineers for architecture and review. Operates in a regulated environment, ensuring security and compliance.
Key Responsibilities:
Operate and maintain the Cato Networks SASE platform, managing policy, health, and bandwidth analysis.
Configure and manage Cisco and Meraki switching, including VLAN, trunk, PoE, firmware, and routing.
Oversee the Meraki wireless environment, from site surveys to firmware lifecycle.
Administer DNS, DHCP, IPAM, and certificate lifecycle, troubleshooting at packet level.
Manage carrier circuits, cross-connects, and bandwidth capacity planning.
Operate the Vonage cloud VoIP platform, provisioning users, call flow, and E911 records.
Administer Okta, Entra ID, and Active Directory, including SSO onboarding and lifecycle rules.
Automate identity operations using PowerShell and APIs for provisioning, reporting, and review.
Manage VMware vSphere and Hyper-V virtual environments, including provisioning, patching, and capacity forecasting.
Execute backup and replication operations in Druva and VMware, ensuring recovery testing.
Lead vulnerability management, incident response, and security controls across the infrastructure.
Participate in on-call rotation, change windows, monitoring, and audit evidence.
Qualifications:
3-5 years hands-on enterprise infrastructure experience across networking, systems, and virtualization.
Solid enterprise networking skills: VLAN, trunk, routing, firewall, wireless, packet-level troubleshooting on Cisco, Meraki, or comparable.
Hands-on administration of Okta, Entra ID, and Active Directory, including SSO onboarding and MFA or Conditional Access policy.
Production experience with a SASE, next-generation firewall, or SD-WAN platform (Cato, Palo Alto, Fortinet, Zscaler, or similar).
Windows Server and Linux administration: patching, services, logs, performance troubleshooting, and hardening.
Working PowerShell ability to automate real work with parameterized scripts and error handling.
Practical security engineering habits: segmentation, patch and vulnerability management, access control, incident response.
Availability for on-call rotation, after-hours change windows, and incident escalation.
Clear written communication for runbooks, change records, diagrams, and explaining risk to non-technical leaders.
Comfort planning and executing change windows, validation, rollback, and judgment for senior review.
Understanding of mortgage industry or regulated environment and handling borrower NPI.
Production experience administering a hypervisor platform (VMware vSphere, Hyper-V, or both), including clusters, storage, patching, capacity, backup, and restore testing.
Preferred Skills:
Experience in mortgage, banking, or another regulated financial services environment.
Professional- or specialty-level certification such as CCNP Enterprise, Microsoft SC-300 or MS-102, Okta Certified Administrator, VMware VCP-DCV, or CompTIA Security+.
Hands-on experience with the platforms we run: Okta, Cato Networks, Cisco and Meraki, VMware vSphere, Hyper-V, Druva, LogicMonitor, or Vonage.
Configuration management and automation tooling - Ansible, Microsoft Intune, or Microsoft Endpoint Configuration Manager.
Microsoft 365 workload administration - Exchange Online, SharePoint, and Teams.
Experience leading a discrete infrastructure project end to end: a switch refresh, a colocation move, an SSO migration, or a backup platform change.
Experience serving as a technical contact during SOC 2, GLBA, investor, or warehouse lender examinations.
Scripting against an identity API - Microsoft Graph or the Okta API.
Experience mentoring junior engineers or help desk staff and setting technical…