IT Systems Engineer - Voleon Securities at Voleon · LumiJobs

Responsibilities

Own and operate VSec's systems in Voleon's Corp-IT stack (Microsoft 365/Entra ID, Slack, Zoom, RingCentral, ThetaLake, Atlassian, 1Password, Jamf/Intune), with runbooks documenting each VSec configuration for others to follow
Lead the entity-separation program for identity, data and communication boundaries between Voleon and VSec, including dedicated Slack, Zoom and ThetaLake environments, Purview DLP policies, the planned dedicated Microsoft 365 tenant, and related migration planning and cutovers
Build and maintain VSec identity and access, including SSO and SCIM for each VSec application, conditional access, dynamic groups and provisioning, break-glass access, and audit trails appropriate to a regulated entity
Build API integrations between SaaS platforms. Automate repeatable work in PowerShell, Python or Bash, and ship it as code through Corp-IT's Git repository, CI pipeline and job platform rather than running it by hand. AI coding assistants are welcome tools here
Run end-to-end vendor onboarding for VSec tools: NDA, MSA, InfoSec due diligence under broker-dealer requirements, deployment, SSO/SCIM, and documentation
Maintain compliance capture: email journaling, chat, voice and SMS archiving into ThetaLake, telephony retention settings, and evidence for Compliance and auditors
Support trading desk endpoints and applications: Windows Bloomberg workstations, Linux-based trading and VNC systems, trader phones, Tradeweb, MarketAxess, TruMid, and related vendor escalations
Administer and optimize VSec's shared SaaS platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian, MDMs) and implement security best practices with the Security team.
Monitor platform health, troubleshoot complex issues, coordinate vendor escalations, and lead evaluations of new solutions
Partner with VSec leadership, Compliance, Security, Legal, Corp-ITS, and business stakeholders to translate requirements into technical solutions, deliver projects, and serve as the named Corp-IT owner for VSec systems
Lead cross-functional IT projects and stay current with SaaS trends, emerging technologies, and best practices

Qualification

Proficiency in PowerShell or PythonWorking knowledge of macOSExperience supporting demandingExcellent problem-solving in complexBackground with Atlassian suite (JiraExperience in financial servicesUnderstanding of security tooling (EDR

Required

5+ years administering and engineering enterprise SaaS and identity platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian or similar)
Strong expertise in cloud identity and access management (Entra ID, Okta), including SAML, OAuth, OIDC, SCIM, SSO, conditional access, MFA, and privileged role management (PIM or similar)
Proficiency in PowerShell or Python, plus Bash. Experience with REST APIs, API authentication (OAuth, JWT), and JSON/YAML. Comfort shipping automation through Git and a CI pipeline (Jenkins, GitHub Actions or similar) so it runs unattended
Strong Microsoft 365 and Entra ID administration, with solid experience in endpoint management (Intune/Jamf Pro) and collaboration platforms (Slack, Zoom, Google Workspace)
Working knowledge of macOS, Windows, and Linux endpoints, including Linux-based systems accessed over VNC or SSH. Solid understanding of networking (TCP/IP, DNS, DHCP, TLS/SSL, VPN) and directory services (Active Directory, Entra ID, LDAP)
Hands-on experience onboarding SaaS vendors end to end, including security due diligence, contract review with Legal, SSO/SCIM setup, rollout, and documentation
Experience supporting demanding, time-sensitive users such as traders, engineers, or researchers, where downtime has direct business cost
Track record leading cross-functional projects, with strong technical writing and documentation skills
Excellent problem-solving in complex, multi-platform environments and strong communication with technical and non-technical audiences
Proven ability to manage multiple priorities, collaborate with a team, and work independently as the single named owner for a business unit's systems while fully remote

Preferred

Experience running separate tenants or workspaces for distinct legal entities within a shared IT organization, including identity, data and communication boundaries
Experience with infrastructure-as-code tools (Terraform, Ansible), DevOps practices (CI/CD pipelines, Git, automated testing), and container-based job platforms (AWS Fargate/ECS or similar)
Linux systems administration experience (RHEL family) beyond endpoint basics
Experience with Apple Business Manager (ABM) or Apple Device Enrollment Program (DEP/ADE)
Background with Atlassian suite (Jira, Confluence), including customization and automation
Experience in financial services, ideally with a broker-dealer or trading desk, including compliance archiving tools (ThetaLake, Smarsh, Global Relay) and trading-desk telephony (RingCentral or similar)
Experience supporting Windows trading workstations (Bloomberg terminals or similar) and trading-desk applications
Understanding of security tooling (EDR, DLP, ZTNA/CASB), certificate management, PKI, zero-trust architectures, and regulated-environment compliance (SOC 1/SOC 2, broker-dealer recordkeeping such as SEC 17a-4 and FINRA supervision)

IT Systems Engineer - Voleon Securities

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Voleon

More roles at Voleon