Head of System Engineer

Job Responsibilities

1. Leadership, Project Management & Governance

• Team Leadership & Development: Lead, mentor, and develop the system engineering team, including workload prioritization, performance evaluations, and continuous skills development.

• Project Management: Lead the planning, execution, and monitoring of IT infrastructure projects from initiation to completion. Manage project scope, budgets, timelines, and risks to ensure on-time and within-budget delivery.

• System Reliability & Stability Management: Maintain and enhance the reliability, availability, and performance of servers, networks, cloud platforms, and supporting infrastructure. Monitor infrastructure health, identify potential issues, and resolve problems proactively to minimize disruptions to users and business operations.

• Incident Management & Compliance: Act as the incident commander during major operational disruptions, conduct root cause analysis (RCA), and collaborate with Compliance teams to ensure infrastructure aligns with relevant governance frameworks and regulatory requirements, including ITIL, ISO 27001, NIST, and SEC regulations.

2. Infrastructure & Cloud Strategy

• Server Hardware & Virtualization: Establish standards and oversee the installation, configuration, management, and maintenance of server hardware and virtualization environments, including VMware and Nutanix.

• Cloud Infrastructure & Disaster Recovery: Design, implement, and manage local cloud infrastructure and Disaster Recovery Centers (DRC), as well as enterprise Identity and Access Management (IAM) on Microsoft Azure.

• Storage & File Management: Oversee enterprise storage systems and centralized internal file-sharing services, including Network-Attached Storage (NAS) and file servers.

• Productivity & Endpoint Management: Manage corporate collaboration tools, including Microsoft 365, and centralized endpoint management solutions using ManageEngine.

• Proactive Monitoring & Observability: Enhance infrastructure monitoring and observability using enterprise tools such as Grafana, SolarWinds, and Prometheus. Establish proactive detection capabilities to identify and resolve issues before they affect users or trading systems.

3. Network Services & Core Security

• Domain & DNS Services: Manage the core architecture and operations of Domain Controller services, as well as internal and external DNS zone files.

• SSL/TLS Certificate Management: Establish policies and manage the full lifecycle of internal and public SSL/TLS certificates to maintain security and compliance.

• Secure Access & Load Balancing: Manage secure remote access through Citrix VPN and optimize traffic distribution using Radware Application Delivery Controllers (ADC) and load-balancing solutions.

• System Hardening & Patch Management: Define operating system hardening baselines and oversee the patch management lifecycle across operating systems and software components.

4. Advanced Security & Defense Management

• Backup & Restore: Design, manage, and audit enterprise backup and recovery systems. Lead regular Disaster Recovery (DR) drills to validate recovery capabilities and ensure business continuity.

• Endpoint & Email Security: Oversee endpoint protection solutions, including Trend Micro Vision One, and enterprise email security gateways, including Cisco IronPort and Trend Micro IMSVA.

• Data Loss Prevention (DLP): Implement and enforce data protection controls using Forcepoint ONE to prevent unauthorized disclosure or leakage of sensitive information.

• Network Defense & Threat Monitoring: Manage network defense solutions, including Intrusion Prevention and Detection Systems (IPS/IDS) using TippingPoint, and behavior-based threat detection solutions, including Network Detection and Response (NDR) and DDI technologies.

Education Requirements

• Bachelor's or Master's degree in Computer Engineering, Computer Science, Information Technology, or a related field.

Qualifications & Work Experience

Professional Experience

• Minimum of 5–8 years of hands-on experience in system engineering, IT infrastructure, or IT security.

• At least 2 years of experience in a team leadership or people management role.

• At least 2 years of proven experience in IT project management, including resource allocation, budgeting, and risk mitigation.

• Strong written and verbal communication skills in English.

• Experience in financial services, banking, securities brokerage, or fintech is strongly preferred.

Technical Competencies

• Strong expertise in enterprise virtualization and operating systems, including VMware, Nutanix, Windows/Linux, Domain Controllers, and storage management.

• Solid understanding of cloud infrastructure and identity management, including Microsoft Azure IAM and local cloud environments.

• Hands-on experience configuring, managing, and optimizing enterprise infrastructure and security solutions, including Radware ADC, Citrix VPN, ManageEngine, Trend Micro Vision One, IronPort/IMSVA, TippingPoint, DDI, and Forcepoint ONE (DLP).

• Proficiency in OS hardening, patch management, SSL/TLS certificate lifecycle management, and enterprise backup and recovery architecture.

• Advanced knowledge of incident response and structured troubleshooting methodologies.

• Working knowledge of IT governance and security frameworks, including ITIL, ISO 27001, and NIST, as well as IT asset and software license management.