Infrastructure Engineer

Princeton University; Princeton (NJ); On-site; USD 135,000 - 150,000; Full time

Job summary

Princeton University is seeking an experienced Infrastructure Engineer to own provisioning, configuration, security, and maintenance of our integration platform infrastructure, spanning on-prem Linux and Azure cloud.

The role emphasizes IAM, networking, CI/CD, monitoring, and disaster recovery, with collaboration across API, data, and services teams in a hybrid work environment.

Qualifications include 7+ years Azure, Kubernetes, IaC, Linux, Python, and security-focused deployments.

Qualifications

• 7+ years provisioning and managing cloud infrastructure on Azure.
• Experience with CI/CD pipelines for containerized workloads.
• Hands-on IAM and security controls in deployment pipelines.
• Strong Linux administration and scripting.
• Experience with WSO2 platform infrastructure.
• Experience with REST APIs for automation.
• Experience designing and operating secure, scalable platforms.

Responsibilities

• Provision, configure, and maintain all infrastructure supporting integration services.
• Design and build Azure cloud infrastructure hosting platform using AKS and IaC.
• Manage on-premises Linux servers, patching and security hardening.
• Administer IAM integrations and certificate lifecycle management.
• Own network config including DNS, firewalls, load balancers, VPNs.
• Collaborate on CI/CD tooling and environment provisioning for teams.
• Provide on-call support, monitoring, alerts, and disaster recovery.

Skills

Azure cloud infra

Kubernetes

Infrastructure-as-Code

Linux / shell

Python

SQL

Networking

IAM

REST APIs

Monitoring

CI/CD

Security hardening

Education

Bachelor's degree in CS/IT/Engineering

Tools

AKS

Docker

Azure DevOps

Jenkins

GitHub Actions

Terraform

Bicep

Ansible

WSO2

Job description

Overview

The Princeton DMIA Integration team is seeking an experienced Infrastructure Engineer to be the backbone of our Integration Services team. This role owns the provisioning, configuration, security, and ongoing maintenance of all infrastructure that supports our integration platforms - spanning API integrations, data pipelines, and the shared services that underpin them. You will work across our current on-premises Linux environment and be instrumental in building out the cloud infrastructure as we modernize our platform stack.

This position is a hybrid role.

Responsibilities

Architect, Design and Develop

• Provision, configure, and maintain all infrastructure supporting integration, and data and platforms including WSO2, and related middleware on on-premises Linux servers.
• Design and build Azure cloud infrastructure hosting platform using AKS (Azure Kubernetes Service), and other Azure services for the organization’s next-generation API, data, and applications, following infrastructure-as-code (IaC) principles.
• Manage and harden on-premises server environments including OS patching, package management, service configuration, and security hardening on Linux.
• Administer IAM integrations including LDAP directory services, Active Directory, service account management, and certificate lifecycle management.
• Own network configuration relevant to integration workloads: DNS, firewall rules, load balancers, VPNs, and API gateway networking.

Collaborate and Coordinate

• Collaborate on CI/CD pipeline infrastructure, including build agents, artifact repositories, and deployment automation tooling.
• Support API and data engineering teams with environment provisioning, capacity planning, and performance tuning of integration runtimes.

Production Support

• Participate in on-call production support rotation and serve as escalation point for infrastructure-layer incidents.
• Implement and maintain monitoring, alerting, and logging infrastructure (log aggregation, metrics dashboards, uptime monitoring) for all integration services.
• Lead disaster recovery planning, backup procedures, and environment restoration for integration platform components.

Qualifications

• • Azure cloud infrastructure - compute, networking, storage, identity, security
  • Kubernetes and containerization - Docker, AKS or equivalent managed Kubernetes
  • Infrastructure-as-Code - Bicep, Terraform, or ARM; Bicep preferred
  • Linux / shell scripting
  • Python programming
  • SQL - sufficient for operational queries and platform tooling
  • Networking - DNS, HTTP/S, TCP/IP, load balancing, proxies, firewalls
  • IAM - Active Directory, LDAP, OAuth 2.0, SAML, certificate management
• 7+ years provisioning and managing cloud infrastructure on Azure, including network and security configuration
• Demonstrated experience building or scaling a shared platform that hosts applications for multiple teams - including tenant isolation, resource governance, and self-service or templated onboarding
• Experience establishing CI/CD pipelines for automated deployment of containerized workloads, using Azure DevOps, Jenkins, GitHub Actions, or equivalent
• Experience embedding automated security controls into deployment pipelines - container image and vulnerability scanning, policy enforcement, compliance gating
• Linux/Unix systems administration with RHEL/CentOS/Ubuntu - systemd, package management, performance tuning
• Advanced shell and Python scripting for automation, monitoring, and operational tasks
• Hands-on IAM experience - Active Directory, LDAP, certificate management, and SSO integration
• Solid networking fundamentals - TCP/IP, DNS, HTTP/S, load balancing, firewall and proxy configuration
• Working knowledge of REST APIs for infrastructure automation and tool integration
• Experience with infrastructure monitoring and observability tooling - Prometheus, Grafana, ELK, Azure Monitor, or equivalent
• Ability to set technical direction and mentor engineers, including documenting standards and transferring knowledge to colleagues newer to modern cloud practice
• Ability to work directly with application teams to translate hosting requirements into platform capabilities, and to communicate technical constraints to non-technical stakeholders
• Education: Bachelor's degree in computer science, information technology, engineering, or a related field; or equivalent professional work experience

PREFERRED

• Experience with GitOps deployment practices - ArgoCD, Flux - and Helm chart authoring
• Experience administering WSO2 platform infrastructure (API Manager, Micro Integrator, streaming components)
• Azure-native security tooling - Azure Policy, Defender for Cloud, private endpoints, network security groups
• Secrets management - HashiCorp Vault, Azure Key Vault
• Configuration management - Ansible, or equivalent
• Familiarity with cloud-native data platform infrastructure - Snowflake, Databricks, Microsoft Fabric, or equivalent
• Higher education environment experience, particularly federated identity - Shibboleth, SAML-based SSO
• Cloud platform certifications - Azure Administrator, Azure Solutions Architect, CKA, or equivalent
• Exposure to FinOps practices and cloud cost optimization
• Experience designing infrastructure documented and standardized for eventual operational handoff

Princeton University is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law.

The University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's qualifications, work experience, education/training, key skills, market, collective bargaining agreements as applicable, and organizational considerations when extending an offer. The posted salary range represents the University's good faith and reasonable estimate for a full-time position; salaries for part-time positions are pro-rated accordingly.

If the salary range on the posted position shows an hourly rate, this is the baseline; the actual hourly rate may be higher, depending on the position and factors listed above.

The University also offers a comprehensive benefit program to eligible employees. Please see this link for more information.

Standard Weekly Hours

36.25

Eligible for Overtime

No

Benefits Eligible

Yes

Probationary Period

180 days

Essential Services Personnel (see policy for detail)

No

Physical Capacity Exam Required

No

Valid Driver's License Required

No

Experience Level

Director#LI-JJ1

Salary Range

$135,000 to $150,000