IT Engineer - Cloud Infrastructure

Job description

About Lead Bank Lead is a banking infrastructure platform trusted by the most innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets at scale. Banking has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound. Today, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City. Information Security Team at Lead The Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality. This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform. Role Description: We are seeking a highly skilled Cloud Infrastructure Engineer to oversee and enhance our cloud IT infrastructure, including networks, identity, storage, cloud services, and enterprise applications. In this role, you will serve as a technical expert ensuring our systems are secure, reliable, and optimized for performance and cost. This position does not involve direct people management, but you will provide technical guidance, best practices, and mentorship to the broader team, driving the strategy and execution of infrastructure improvements. You'll also play a hands-on role in troubleshooting and resolving issues, ensuring seamless operation of IT services across the organization. In this role you will: Technical Strategy & Collaboration - Develop and maintain infrastructure best practices, standards, and policies to enhance security, performance, scalability, and cost efficiency. - Collaborate with IT team members and stakeholders to define and execute the infrastructure roadmap, aligning with business goals. - Research and recommend new tools, technologies, and automation to improve IT operations and efficiency. - Participate in incident response and problem management efforts, including triage, resolution, and post-incident reviews for complex infrastructure issues. Infrastructure Management & Operations - Design, deploy, and maintain networking, identity management, storage/file systems, and cloud-based services. - Ensure high availability, security, and performance of applications and data, including backup and disaster recovery planning. - Manage user identity and access controls, enforcing security best practices across systems. - Deploy and maintain infrastructure using Infrastructure-as-Code and CI/CD practices to improve consistency and delivery speed. - Optimize and maintain enterprise applications (SaaS and internal), ensuring seamless integration, licensing, and functionality. - Work closely with security teams to monitor, assess, and remediate infrastructure vulnerabilities and risks. Support & Troubleshooting - Act as an escalation point for critical infrastructure issues, troubleshooting complex problems across IT systems. - Provide hands-on support for network, cloud, identity, and end-user device issues affecting employees. - Collaborate with internal IT engineering and support staff and external vendors to resolve technical challenges efficiently. - Perform other duties as assigned. Qualifications: - 6+ years of experience in IT infrastructure engineering or a related field. - Deep expertise in the following: - Networking: Zscaler, DNS, AWS VPCs - Identity & Access Management (IAM): MS Entra ID or Okta, SSO, AWS IAM - Infrastructure as Code (IaC): Terraform or equivalent - Container Platforms: Kubernetes or equivalent - Cloud Infrastructure: AWS - Monitoring & Logging: Datadog or equivalent - Strong scripting/automation ability (Python, Bash, or PowerShell) — used regularly to extend IaC, CI/CD, and operational tooling. - Solid experience with: - CI/CD tooling (GitHub Actions, ArgoCD, or equivalent) - Backup and disaster recovery planning (RTO/RPO, backup strategy) - Storage and file systems (e.g., S3, NAS/file shares) - Secrets and certificate management (e.g., Vault, AWS Secrets Manager/KMS) - Working knowledge of enterprise application administration (SaaS admin, SSO/SCIM integration, license management). - Familiarity with security best practices and compliance frameworks relevant to infrastructure, identity, and devices (e.g., SOC 2, ISO 27001). - Awareness of cloud cost management/optimization practices. - Strong troubleshooting skills across applications, network, and infrastructure issues. - Strong communication skills and ability to collaborate with technical and non-technical stakeholders. - Ability to lead projects and initiatives without direct managerial responsibility. - Relevant certifications (e.g., AWS Solutions Architect, CKA, Security+) are a plus. What we offer: - At Lead, we design our benefits to support company culture and principles https://docs.google.com/document/d/1BpDk5yNqa19IZCp8JbxKUd3ndBLVx44Jcg2DNi2KTeQ/edit, to foster an efficient and inspiring work environment, and to create the conditions for our team to give their best in both work and life - Competitive compensation based on experience, geographic location, and role - Medical, Dental, Vision, Life, 401k Matching, and other wellness benefits, including FSA, HSA and HRA - Paid parental leave - Flexible vacation policy, including PTO and paid holidays - A fun and challenging team environment in a dynamic industry with ample opportunities for career growth *Lead Bank is proud to have an inclusive culture committed to ensuring equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. *Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. *Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. **Our compensation reflects the cost of labor across several US geographic markets. Pay is based on a number of factors and may vary depending on geographical market location, job-related knowledge, skills, and experience. These ranges may be modified in the future. Zone 1: $150,000 - $167,166 (NYC)