Infrastructure Engineer

DWS Infrastructure Engineer

Our DWS System Administration and Engineering team requires a highly experienced engineer that can learn quickly and collaborate with other engineers and operations teams to implement and support new technology in a complex, highly regulated environment. An ideal candidate will have hands-on experience with Endpoint Privilege Management solutions and the intimate understanding of Windows process behavior. The position requires experience in programming or scripting with CASE-like logic. This candidate will be a highly skilled full stack infrastructure engineer with experience in Modern Device Management and automation across Windows, and Mac devices. This engineer will drive our transition to granular role-based, least-permissive access on our end-user devices.

Our Technology Stack

• Windows 10
• MacOS
• CyberArk Endpoint Privilege Management
• Microsoft Endpoint Manager Configuration Manager (MEMCM) with MDT-based Operating System Deployment (OSD), WSUS, Internet-based Client Management through IBCM and CMG, software deployment
• Microsoft Intune with mobile corporate device management, mobile BYOD application management, Windows co-management, JAMF connector
• APP-V integrated with MEMCM
• JAMF, on-premise and cloud
• vSphere and Horizon
• PatchMyPC
• Office365 with Azure Active Directory hybrid join, conditional access, Office ProPlus, and a variety of modern applications
• Active Directory on-premise with group policy
• PrinterLogic
• Nexpose vulnerability management
• Bitlocker/MBAM
• RSA SecurID with biometric MFA
• Nexthink digital employee experience monitoring
• Cisco Telepresence
• Zoom desktop conferencing, conference room scheduling and digital signage
• DTEN and Poly conference room solutions
• Dell desktops, laptops, 2-in-1’s, 2-in-1 detachables, Surface Pros
• Intel Compute Stick
• IoT devices
• PowerShell

About the Role The DWS Infrastructure Engineer is a member of the Desktop and Mobile Engineering team and is responsible for delivering high quality and innovative technology solutions to SVB’s end user community. The engineer must balance strong technical knowledge with sound business acumen to satisfy our internal customers and fulfill our DWS mission. The engineer will focus on automation is a major contributor to advancing the strategy and lifecycles of DWS platform services.

Primary Responsibilities:

• ENDPOINT PRIVILEGE MANAGEMENT – Design, build, test, and deploy policies to manage least-permissive role-based access on end-user Windows and Mac devices. Design and implement operational procedures for the continuous evaluation of events and requests.
• SAAS INFRASTRUCTURE – Own the health and interconnectivity of our SAAS EPM instance; work with internal SVB teams to enable and maintain Single-Sign-On, Role Based Access and Provisioning, Splunk logging, Service Now integration, Exchange connectivity, and new enterprise architecture as it is implemented.
• AUDIT AND COMPLIANCE – Work with internal and external auditors to ensure that SVB data and devices are properly secured. Proactively identify gaps in EPM rules. Prepare reports for executives on compliance and reports for technical teams on client health and required maintenance.

Other General Responsibilities:

• CONFIGURATION MANAGEMENT – Assist with the design, build, test and deployment of configurations as part of a configuration management system to effectively distribute operating system upgrades, patches, drivers and software in a global network.
• DESKTOP COMPUTER OPERATING SYSTEMS – Assist with the design, build, test and deployment of desktop operating system change utilizing desktop management tools, scripting tools and centralized directory policies to expand, reduce and control access. Maintains knowledge on new releases and continuously plans for onboarding them in the enterprise.
• APPLICATION PACKAGING – Maintain application packaging standards for line-of-business (LOB) and commercial off-the-shelf (COTS) applications. Support various packaging and delivery methods including native, virtual and streaming. Act as a quality assurance agent to preserve engineering integrity and advance automation.
• AUTOMATION – Design, build, test and deploy scripting and automation to reduce the effort required to provide DWS services and support. Align solutions with the existing technology stack to provide seamless delivery.
• ACTIVE DIRECTORY – Own and maintain desktop-facing Group Policy Objects. Possess working knowledge of Active Directory administration, including advanced understanding of delegation, logging, replication, authentication protocols and management techniques/tools.
• TEAM PLAYER – Act as a team player supporting peers, department management and business unit leadership to fulfill operational service levels, department initiatives and project deliverables. Believe in and adopt a “70% agreement, 100% commitment” attitude.
• CUSTOMER-FOCUSED – Understand and execute a user-first service philosophy whereby restoring service quickly for the end user comes first, deferring user training or correction for after the disruption. Review surveys and follow-up on negative experiences.
• DOCUMENTATION – Build high quality roadmaps, strategies, standards and procedures to publicize the work of the department and develop the knowledge of others.
• CONTINUOUS IMPROVEMENT – Organize continuous improvement efforts by understanding staff insights and concerns and creating a pipeline of change. Maintains a keen eye on opportunities to improve user experience, efficiency, compliancy or cost savings. Drive resolutions to production.
• CHANGE MANAGEMENT – Learn and follow the change management process. Independently test and implement changes in the environment while informing others.
• PROJECT MANAGEMENT - Able to build volumetric plans that achieve the objectives of department initiatives (software rollouts, upgrades, transitions). Analyze larger problems and break down into smaller and predictable tasks that progress toward a solution. Understands development lifecycles and methodologies including waterfall and Agile.
• SUBJECT MATTER EXPERT – Act as an expert support resource for multiple DWS technology stack components. Assist and mentor system administrators and technicians to foster personal growth and accountability.

Qualifications:

• Prior experience in an Enterprise Desktop engineering role.
• Minimum 7 years of experience supporting Windows 7, Windows 10 or Windows 10 IoT.
• Prior experience supporting MacOS.
• Minimum 3 years supporting end users in an Office 365 environment.
• Advanced product knowledge of products including: SCCM, Intune, Windows 10 servicing, Office ProPlus servicing, PowerShell, Azure, Active Directory, vSphere, JAMF
• Advanced knowledge of core infrastructure topics including: DNS, DHCP, VDI, networking, VPN, firewalls, PKI, and related technologies.
• Demonstrated ability to think critically.
• Demonstrated ability to communicate effectively to business and technical audiences.
• Demonstrated self-motivated work ethic and lifelong learner.
• Demonstrated ability to influence and motivate others.
• Education or Equivalent Experience: Bachelor's degree in IT related field or related job experience
• ITIL v3 Foundation

Required Skills : 100% Remote!!! CyberArk EPM Engineer—somewhat of a unicorn. We want someone with CyberArk Endpoint Privilege Management design and implementation work (not just CyberArk experience—looking or specific module skills). They have been getting Cyberark EMP admins and EMP - Vault / Pam candidates. They need someone who can build the EMP from the ground up, not just work in it. Any other EMP software's will work, he mentioned "Beyond trust" Needs someone with clear communication, tight change control, arch review and can work on an agile team.