Lead Engineering Systems Administrator

Envestnet; Berwyn (PA); Hybrid; USD 115,000 - 143,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Envestnet, based in Berwyn, PA, seeks an experienced IT Infrastructure professional to design, secure and maintain core systems across cloud and on‑premise environments. You will ensure compliance, reliability, and scalable performance for wealth management platforms.

The role emphasizes identity management, privileged access, automation via PowerShell/IaC, and ITIL-aligned incident recovery. Strong collaboration with development and security teams is required.

Qualifications

• Experience administering Windows Server, Active Directory, DNS, DHCP, and Group Policy.
• Strong identity and access management and infrastructure security expertise.
• Proficient in automation and scripting (PowerShell, IaC).
• Experience with patch management and backup/disaster recovery within ITIL framework.
• Ability to communicate technical concepts to non-technical audiences.

Responsibilities

• Designs, maintains and supports the core technology infrastructure and services that power wealth management, financial services and other company platforms.
• Ensures that systems are secure, reliable, scalable and compliant with company and regulatory standards.
• Collaborates with development, security and operations teams to deploy infrastructure and manage SaaS platforms.
• Manages cloud and on-premise environments, monitors performance and implements best practices for availability, security and disaster recovery.

Skills

Active Directory

DNS

DHCP

Group Policy

Certificate services

Identity management

Infrastructure security

Privileged access

Least-privilege/tiered administration

Secure configuration baselines

PowerShell

Infrastructure as code

Patch management

Backup/Disaster recovery

ITIL

Systems administration

Job description

Description

The application window will close October 26, 2026.

Job Location

The primary work location for this role is Berwyn, PA with a hybrid work model.

About Envestnet

Envestnet is an adaptiveWealthTechcompany that isredefining the future of wealth management byhelpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support.Backed byover25 years of experience and approximately$7.0 trillionin platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com.

The Team You’ll Join

The Engineering Systems Administration team plays a critical role in powering the technology foundation behind Envestnet’s wealth management, financial services, and enterprise platforms. The team designs, secures, and supports the infrastructure, identity management solutions, SaaS platforms, and cloud environments that employees, advisors, and customers rely on every day. By driving automation, strengthening cybersecurity, ensuring regulatory compliance, and delivering resilient backup and recovery capabilities, they help keep business-critical systems reliable, scalable, and available around the clock. What sets this team apart is its blend of strategic innovation and operational excellence, partnering across engineering, security, and business teams to solve complex challenges, enable future growth, and deliver a seamless technology experience across the organization.

How You'll Contribute

Designs, maintains and supports the core technology infrastructure and services that power wealth management, financial services and other company platforms. Ensures that systems are secure, reliable, scalable and compliant with company and regulatory standards. Collaborates with development, security and operations teams to deploy infrastructure, manage and maintain SaaS platforms, automate processes and resolve system issues. Manages cloud and on-premise environments, monitors performance and implements best practices for availability, security and disaster recovery.

• Leads and/or advises on site, regional and or cross-organizational systems-related initiatives.
• Contributes to planning and implementing new releases, updates or corrections to hardware, software, applications or connectivity.
• Participates in strategic planning and development associated with future design, performance and capacity management.
• Effectively translates, communicates and relays technical subject matter content to non-technical audiences.
• Evaluates, recommends and maintains hardware and software management and monitoring tools to meet current and future organizational needs.
• Defines and develops comprehensive user and related training and information.
• Ensures security and compliance requirements are built into all initiatives.
• Participates in design and architectural discussions based on requirements from customers and leadership.
• Leads incident recovery using the ITIL framework and ITIL certification.
• Leads and advises on enterprise systems initiatives focused on Active Directory, identity management, and infrastructure security, contributing to solution design, strategic planning, and capacity management across on-premise and cloud environments.
• Designs and implements secure identity and privileged access management solutions, including least-privilege and tiered administration models, to protect critical systems and organizational assets.
• Drives automation and infrastructure reliability through scripting, secure configuration management, and the development of backup, recovery, and business continuity capabilities that support operational resilience and compliance requirements.

What You'll Need to Bring

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Demonstrated expertise administering and securing Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, and certificate services.
• Strong background in identity and access management and infrastructure security, including privileged access, least-privilege/tiered administration, and secure configuration baselines aligned to recognized industry standards.
• Proficiency with automation and scripting (e.g., PowerShell, infrastructure-as-code) to standardize configuration and reduce manual effort.
• Experience with patch and vulnerability management, backup/disaster recovery, and operating within an ITIL-aligned framework, with the ability to communicate technical concepts to non-technical audiences.

Nice-to-Haves

• 6+ years of systems administration or infrastructure engineering experience in an enterprise environment, including hands-on ownership of Active Directory and identity services.

Why You’ll Enjoy Working at Envestnet

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference.

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards- because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.

The opportunity is now!

Sponsorship

This position is not open to candidates requiring visa sponsorship

Our Investmentin You

This role offers a base salary range of $114,500 to $143,100. The range listed represents a good-faith estimate of base salary compensation for this position and does not include incentive compensation, equity or benefits. Individual pay will be determined based on factors including, but not limited to, relevant experience, skills, education, certifications, and geographic location, in accordance with applicable pay transparency laws. This role is eligible for an additional incentive component as part of the total rewards package.

We provide a comprehensive suite of benefits - subject to Envestnet’s plan eligibility rules - that support your overall well-being including, medical insurance, paid time off (PTO), 401k company match, paid parental leave, education reimbursement, disability coverage and mental health & wellness support. Our investment in you means supporting you professionally, financially, and personally at every stage of your journey with us. Please visit our benefits page on our career site to learn more.

Our Commitment to Inclusion & Belonging

Envestnet is an Equal Opportunity Employer and is committed to creating an inclusive environment for all employees and applicants. We welcome and value individuals of all backgrounds and do not discriminate based on race, color, religion, creed, sex (including pregnancy or related medical conditions), gender identity or expression, sexual orientation, national origin, ancestry, age, disability, genetic information, military or veteran status, citizenship status, or any other status protected by applicable law. We encourage individuals from all backgrounds to apply.

We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at [e-mail]. Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.

Recruitment Fraud

At Envestnet, safeguarding the trust and safety of job seekers is a top priority. We are aware that scammers may impersonate Envestnet recruiters or create fake job opportunities to deceive candidates. Review the information on our recruitment fraud awareness page to help you recognize and avoid recruitment fraud.

#LI-CO1