IT Engineer - Cloud Infrastructure

Doist; New York (NY); Hybrid; USD 150,000 - 167,166; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k matching

FSA/HSA

Paid parental leave

Flexible vacation

Career growth opportunities

Job summary

Lead Bank is seeking a skilled Cloud Infrastructure Engineer to shape and secure our cloud IT landscape. You will guide infrastructure best practices, coordinate with IT and business stakeholders, and drive cost‑efficient improvements across networks, IAM, storage, and cloud services.

You will deploy IaC and CI/CD pipelines, handle incident response, and mentor teammates while partnering with security to manage risks in a fintech environment.

Qualifications

• 6+ years of experience in IT infrastructure engineering or a related field.
• Deep expertise in networking (Zscaler, DNS, AWS VPCs), IAM (MS Entra ID/Okta, SSO, AWS IAM).
• Proficient in Infrastructure as Code (Terraform or equivalent).
• Experience with container platforms (Kubernetes).
• Cloud infrastructure experience with AWS and monitoring (Datadog).
• Strong scripting and automation (Python, Bash, PowerShell) for IaC, CI/CD, tooling.
• CI/CD tooling (GitHub Actions, ArgoCD or equivalent) and backup strategies.
• Storage (S3, NAS) and secret management (Vault, AWS Secrets Manager).
• Knowledge of security, SOC 2, ISO 27001, and cost optimization.
• Excellent troubleshooting and cross-team collaboration skills.

Responsibilities

• Develop and maintain infrastructure best practices for security, performance, and cost.
• Define and execute the infrastructure roadmap with stakeholders.
• Research and adopt new tools and automation for IT operations.
• Incident response, triage, and post‑incident reviews for complex issues.
• Design, deploy, and maintain networking, IAM, storage, and cloud services.
• Ensure high availability, backup, recovery, and disaster planning.
• Manage identity access controls and secure environments.
• Implement IaC and CI/CD to improve consistency and speed.
• Collaborate with security teams to remediate vulnerabilities.
• Provide hands‑on support and mentor the broader IT team.

Skills

Networking

IAM

IaC

Container platforms

AWS

Monitoring & logging

Scripting

CI/CD

Backup & DR

Storage

Secrets management

Security & compliance

Cost optimization

Troubleshooting

Communication

Project leadership

Certifications (AWS, etc.)

Tools

AWS

Terraform

Kubernetes

Datadog

GitHub Actions

ArgoCD

Vault

Job description

Lead is a fintech building banking infrastructure for embedded financial products and services. We operate an FDIC‑insured bank headquartered in Kansas City, Missouri. Additionally, we have offices in San Francisco, Sunnyvale, and New York City, where our technical, product, design, and legal teams operate.

We are built for a constantly evolving financial landscape, where new ventures and technological advancements emerge daily. Guided by a team of entrepreneurs and technologists with decades of experience navigating intricate banking and payments regulations, Lead blends regulatory and technological expertise to help our fintech partners scale their operations with compliance and creativity.

Simply put, Lead offers the essential attributes that every fintech seeks in a partner bank. First, unparalleled technical expertise from a distinguished team of developers with an extensive understanding of the banking and payments systems. Second, oversight expertise, automated compliance systems, and bespoke program management to navigate the ever‑shifting regulatory landscape. Finally, a commitment to transparency and operational rigor to ensure everyone's money does what it's supposed to do.

Role Description

We are seeking a highly skilled Cloud Infrastructure Engineer to oversee and enhance our cloud IT infrastructure, including networks, identity, storage, cloud services, and enterprise applications. In this role, you will serve as a technical expert ensuring our systems are secure, reliable, and optimized for performance and cost. This position does not involve direct people management, but you will provide technical guidance, best practices, and mentorship to the broader team, driving the strategy and execution of infrastructure improvements. You'll also play a hands‑on role in troubleshooting and resolving issues, ensuring seamless operation of IT services across the organization.

Technical Strategy & Collaboration

• Develop and maintain infrastructure best practices, standards, and policies to enhance security, performance, scalability, and cost efficiency.
• Collaborate with IT team members and stakeholders to define and execute the infrastructure roadmap, aligning with business goals.
• Research and recommend new tools, technologies, and automation to improve IT operations and efficiency.
• Participate in incident response and problem management efforts, including triage, resolution, and post‑incident reviews for complex infrastructure issues.

Infrastructure Management & Operations

• Design, deploy, and maintain networking, identity management, storage/file systems, and cloud‑based services.
• Ensure high availability, security, and performance of applications and data, including backup and disaster recovery planning.
• Manage user identity and access controls, enforcing security best practices across systems.
• Deploy and maintain infrastructure using Infrastructure‑as‑Code and CI/CD practices to improve consistency and delivery speed.
• Optimize and maintain enterprise applications (SaaS and internal), ensuring seamless integration, licensing, and functionality.
• Work closely with security teams to monitor, assess, and remediate infrastructure vulnerabilities and risks.

Support & Troubleshooting

• Act as an escalation point for critical infrastructure issues, troubleshooting complex problems across IT systems.
• Provide hands‑on support for network, cloud, identity, and end‑user device issues affecting employees.
• Collaborate with internal IT engineering and support staff and external vendors to resolve technical challenges efficiently.
• Perform other duties as assigned.

Qualifications

6+ years of experience in IT infrastructure engineering or a related field.

Deep expertise in the following:

• Networking: Zscaler, DNS, AWS VPCs
• Identity & Access Management (IAM): MS Entra ID or Okta, SSO, AWS IAM
• Infrastructure as Code (IaC): Terraform or equivalent
• Container Platforms: Kubernetes or equivalent
• Cloud Infrastructure: AWS
• Monitoring & Logging: Datadog or equivalent
• Strong scripting/automation ability (Python, Bash, or PowerShell) - used regularly to extend IaC, CI/CD, and operational tooling.
• CI/CD tooling (GitHub Actions, ArgoCD, or equivalent)
• Backup and disaster recovery planning (RTO/RPO, backup strategy)
• Storage and file systems (e.g., S3, NAS/file shares)
• Secrets and certificate management (e.g., Vault, AWS Secrets Manager/KMS)
• Working knowledge of enterprise application administration (SaaS admin, SSO/SCIM integration, license management).
• Familiarity with security best practices and compliance frameworks relevant to infrastructure, identity, and devices (e.g., SOC 2, ISO 27001).
• Awareness of cloud cost management/optimization practices.
• Strong troubleshooting skills across applications, network, and infrastructure issues.
• Strong communication skills and ability to collaborate with technical and non‑technical stakeholders.
• Ability to lead projects and initiatives without direct managerial responsibility.
• Relevant certifications (e.g., AWS Solutions Architect, CKA, Security+) are a plus.

What we offer

• Competitive compensation based on experience, geographic location, and role
• Medical, Dental, Vision, Life, 401k Matching, and other wellness benefits, including FSA, HSA and HRAPaid parental leaveFlexible vacation policy, including PTO and paid holidaysA fun and challenging team environment in a dynamic industry with ample opportunities for career growth

*Lead Bank is proud to have an inclusive culture committed to ensuring equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.*

*Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.*

*Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.*

*Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.*

**Our compensation reflects the cost of labor across several US geographic markets. Pay is based on a number of factors and may vary depending on geographical location, job‑related knowledge, skills, and experience. These ranges may be modified in the future. Zone 1: $150,000 - $167,166 (NYC)