Requirements:

8+ years of experience in platform/infrastructure engineering, with a focus on Azure cloud services (especially Windows 365 and Microsoft Endpoint Manager/Intune)
Strong proficiency in Windows 10/11 and Windows Server 2016/2019/2022/2025 administration and engineering
Hands-on production experience operating and troubleshooting Windows 365 Cloud PCs at scale
Working knowledge of AWS services in hybrid or multi-cloud enterprise environments
Proficiency in scripting and automation using PowerShell and/or Python
Experience with Infrastructure as Code tools such as Terraform, ARM templates, or Bicep
Solid understanding of cloud security principles, including identity management, zero-trust architecture, and access control (AuthN/AuthZ)
Familiarity with Agile methodologies and CI/CD pipelines
Experience with secure network architectures, including DMZ design, network segmentation, and micro-segmentation

Nice to Haves:

Build and mature cloud, security, and platform engineering capabilities for modern desktop and developer environments
Evaluate, design, and implement Windows 365 and WSL-based developer desktop services
Identify and mitigate security control gaps across cloud desktop platforms
Define and manage WSL distribution lifecycle (standardization, patching, compliance, retirement)
Enable AuthN/AuthZ and secure connectivity for cloud desktops via GS Control / Access Planes or AWS equivalents
Partner with Security, Identity, Networking, and Cloud teams to enforce consistent access and network controls
Define and operate the end-to-end model, tooling, and automation for cloud desktop platforms
Establish observability, compliance, and operational controls to ensure reliability and security

Opportunity to work at a leading global investment banking, securities, and investment management firm
Training and development opportunities
Firmwide networks available for personal and professional growth
Wellness and personal finance offerings
Mindfulness programs