IT Engineer - Cloud Infrastructure

Lead; New York (NY); On-site; USD 150,000 - 167,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k Matching

Parental leave

Flexible vacation

Job summary

Lead, a fintech bank-partner, seeks a Cloud Infrastructure Engineer to oversee and enhance cloud IT infrastructure, including networks, identity, storage, and cloud services. You will guide best practices, mentor the team, and hands-on troubleshoot IT services across the organization.

The role focuses on security, reliability, and cost efficiency with a hands-on approach and no direct reports, reporting to the Infrastructure leadership. NYC-area or remote options may apply per policy.

Qualifications

• 6+ years in IT infrastructure engineering or related field.
• Deep expertise in networking, IAM, IaC, Kubernetes, and AWS.
• Strong scripting/automation in Python, Bash, or PowerShell.

Responsibilities

• Develop and maintain infrastructure best practices and policies.
• Define and execute infrastructure roadmap with IT stakeholders.
• Design, deploy, and maintain networking, identity, storage, and cloud services.
• Ensure high availability, security, and cost-efficient performance.
• Lead incident response and problem management efforts.

Skills

Networking

IAM

IaC

Kubernetes

AWS

Monitoring

Scripting

Tools

Terraform

GitHub Actions

ArgoCD

Vault

AWS Secrets Manager

Job description

Lead is a fintech building banking infrastructure for embedded financial products and services. We operate an FDIC-insured bank headquartered in Kansas City, Missouri. Additionally, we have offices in San Francisco, Sunnyvale, and New York City, where our technical, product, design, and legal teams operate.

We are built for a constantly evolving financial landscape, where new ventures and technological advancements emerge daily. Guided by a team of entrepreneurs and technologists with decades of experience navigating intricate banking and payments regulations, Lead blends regulatory and technological expertise to help our fintech partners scale their operations with compliance and creativity.

Simply put, Lead offers the essential attributes that every fintech seeks in a partner bank. First, unparalleled technical expertise from a distinguished team of developers with an extensive understanding of the banking and payments systems. Second, oversight expertise, automated compliance systems, and bespoke program management to navigate the ever-shifting regulatory landscape. Finally, a commitment to transparency and operational rigor to ensure everyone's money does what it's supposed to do.

Role Description

We are seeking a highly skilled Cloud Infrastructure Engineer to oversee and enhance our cloud IT infrastructure, including networks, identity, storage, cloud services, and enterprise applications. In this role, you will serve as a technical expert ensuring our systems are secure, reliable, and optimized for performance and cost.

This position does not involve direct people management, but you will provide technical guidance, best practices, and mentorship to the broader team, driving the strategy and execution of infrastructure improvements. You'll also play a hands‑on role in troubleshooting and resolving issues, ensuring seamless operation of IT services across the organization.

In This Role You Will

Technical Strategy & Collaboration

• Develop and maintain infrastructure best practices, standards, and policies to enhance security, performance, scalability, and cost efficiency.
• Collaborate with IT team members and stakeholders to define and execute the infrastructure roadmap, aligning with business goals.
• Research and recommend new tools, technologies, and automation to improve IT operations and efficiency.
• Participate in incident response and problem management efforts, including triage, resolution, and post‑incident reviews for complex infrastructure issues.

Infrastructure Management & Operations

• Design, deploy, and maintain networking, identity management, storage/file systems, and cloud-based services.
• Ensure high availability, security, and performance of applications and data, including backup and disaster recovery planning.
• Manage user identity and access controls, enforcing security best practices across systems.
• Deploy and maintain infrastructure using Infrastructure-as-Code and CI/CD practices to improve consistency and delivery speed.
• Optimize and maintain enterprise applications (SaaS and internal), ensuring seamless integration, licensing, and functionality.
• Work closely with security teams to monitor, assess, and remediate infrastructure vulnerabilities and risks.

Support & Troubleshooting

• Act as an escalation point for critical infrastructure issues, troubleshooting complex problems across IT systems.
• Provide hands‑on support for network, cloud, identity, and end‑user device issues affecting employees.
• Collaborate with internal IT engineering and support staff and external vendors to resolve technical challenges efficiently.
• Perform other duties as assigned.

Qualifications

• 6+ years of experience in IT infrastructure engineering or a related field.
• Deep expertise in the following:
  • Networking: Zscaler, DNS, AWS VPCs
  • Identity & Access Management (IAM): MS Entra ID or Okta, SSO, AWS IAM
  • Infrastructure as Code (IaC): Terraform or equivalent
  • Container Platforms: Kubernetes or equivalent
  • Cloud Infrastructure: AWS
  • Monitoring & Logging: Datadog or equivalent
• Strong scripting/automation ability (Python, Bash, or PowerShell) — used regularly to extend IaC, CI/CD, and operational tooling.
• Solid experience with:
  • CI/CD tooling (GitHub Actions, ArgoCD, or equivalent)
  • Backup and disaster recovery planning (RTO/RPO, backup strategy)
  • Storage and file systems (e.g., S3, NAS/file shares)
  • Secrets and certificate management (e.g., Vault, AWS Secrets Manager/KMS)
• Working knowledge of enterprise application administration (SaaS admin, SSO/SCIM integration, license management).
• Familiarity with security best practices and compliance frameworks relevant to infrastructure, identity, and devices (e.g., SOC 2, ISO 27001).
• Awareness of cloud cost management/optimization practices.
• Strong troubleshooting skills across applications, network, and infrastructure issues.
• Strong communication skills and ability to collaborate with technical and non-technical stakeholders.
• Ability to lead projects and initiatives without direct managerial responsibility.
• Relevant certifications (e.g., AWS Solutions Architect, CKA, Security+) are a plus.

What We Offer

• At Lead, we design our benefits to support company culture and principles, to foster an efficient and inspiring work environment, and to create the conditions for our team to give their best in both work and life
• Competitive compensation based on experience, geographic location, and role
• Medical, Dental, Vision, Life, 401k Matching, and other wellness benefits, including FSA, HSA and HRA
• Paid parental leave
• Flexible vacation policy, including PTO and paid holidays
• A fun and challenging team environment in a dynamic industry with ample opportunities for career growth
• Lead Bank is proud to have an inclusive culture committed to ensuring equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
• Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
• Our compensation reflects the cost of labor across several US geographic markets. Pay is based on a number of factors and may vary depending on geographical market location, job-related knowledge, skills, and experience. These ranges may be modified in the future.

Zone 1: $150,000 - $167,166 (NYC)