Senior Systems Engineer- Microsoft M365/Active Directory

About INTERACTIVE BROKERS!

This is a hybrid role (three days in the office/two days remote).

Interactive Brokers Group has been consistently at the forefront of trading innovation, starting with the invention of the first floor-based handheld computer in 1983. We pride ourselves on being primarily a technology company and challenging the status quo. We push boundaries to offer our clients the best trading platform with the most sophisticated features at the lowest cost.

About the role -

Senior Systems Engineer – Azure Cloud/Microsoft M365/Active Directory

This role within the Global Windows Platform & Services team is responsible for planning, designing, automating, orchestrating, and implementing the entire stack of Microsoft solutions in our data centres and in the Microsoft Cloud. You will need to have expert knowledge of Microsoft Windows Operating and Office Suite, Microsoft Azure Cloud and Cloud Virtual Desktops, M365 and other 3rd party cloud technologies.

Daily Duties Include:

• Architect and design solutions to meet functional and non-functional requirements
• Enforce adherence to architectural standards/principles, global product-specific guidelines, usability design standards, etc.
• Proactively guide engineering methodologies, standards, and leading practices
• Guidance of engineering staff and reviews of as-built configurations during the construction phase
• Demonstrates strong analytical and technical problem-solving skills
• Ability to analyze and operate at various levels of abstraction
• Ability to balance what is strategically right with what is practically realistic
• Excellent technical skills, enabling the creation of future-proof, complex global solutions
• Excellent interpersonal communication and organizational skills are required to operate as a leading member of international, distributed teams that deliver quality services and solutions.
• Ability to rapidly gain knowledge of the firm's organizational structure to facilitate work with groups outside of the immediate technical team.
• Create logical and physical design for all Microsoft M365 solutions (SharePoint, Teams, OneDrive, Exchange Online, End Point Manager, ATP and any new business-related requirements).
• Troubleshooting skills with Active Directory Infrastructure, Entra, Group Policies, AD/Infoblox DNS, Microsoft PowerShell, Windows Server 2012, 2016 and 2019 and Windows 10/11
• Gather and document business requirements, assess technical capabilities and analyse findings to translate into technology solutions.
• Perform in-depth technical research and analyse results to recommend suitable approaches for solving complex and challenging technical and integration problems.
• Follow policies and procedures for change, problem, and incident management.
• Plan, design, implement, and configure Active Directory and Group Policy in our domain environment.
• Share the leading industry best practices with other Windows team members.
• Proactively participate in L3 problem escalations and resolve desktop and server support issues.
• Participate in the 24x7 on-call rotation and planned maintenance activities after hours and on weekends when needed.
• Create High-level and Low-level Architecture for Microsoft Active Directory and Microsoft Azure Active Directory.

Key Technical Skills & Competencies:

• 8-15 years of hands-on IT Engineering experience
• Minimum of 3+ years in a cloud engineering role using service and hosting solutions such as private/public cloud IaaS, PaaS, and SaaS platforms.
• 5+ year in-depth Microsoft M365 Experience. Knowledge in Entra and Compliance/Security Portal a must
• 5+ years of experience in similar role (Active Directory Design, Azure Cloud and M365 break/fix, engineering, complex implementations)
• Minimum 10 years of experience in a global financial organization (e.g., Brokerage, Trading, or Investment Management)
• Experience in architecting and designing technical solutions leveraging Microsoft Azure IaaS, PaaS, and SaaS capabilities.
• Expert-level experience with Active Directory federation services (SAML, Single Sign-On (SSO), Two-Factor authentication, RBAC and other related Identity and Access Management (IAM) technologies.
• Knowledge of cloud security controls, including conditional access policies, tenant isolation, encryption at rest, encryption in transit, key management.
• Extensive, real-world experience designing technology components for enterprise solutions with a focus on cloud technologies
• Experience with configuration management and automation tools such as Ansible, Puppet, Terraforms, etc is a must
• Experience with relational, graph and/or unstructured data technologies such as SQL Server, Azure SQL, Azure Data Lake, HD Insights, Hadoop, Cloudera, MongoDB, MySQL, Neo4j, Cassandra, Couchbase
• Knowledge of programming and scripting languages such as JavaScript, PowerShell, Bash, SQL, .NET, Java, Python, PHP, Ruby, PERL, C++, etc.
• Experience in distilling complex technical challenges to actionable decisions for stakeholders and guiding project teams by building consensus and mediating compromises when necessary.
• Experience coordinating the intersection of complex system dependencies and interactions
• Experience in solution delivery using Agile methodologies.
• Demonstrated knowledge of relevant industry trends and standards
• Knowledge and experience in IT methodologies and life cycles that will be used.
• Exposure to infrastructure and application security technologies and approaches
• Familiarity with requirements gathering techniques.
• Certification Requirements (at least one Microsoft Azure Cloud Architect, AWS Workspaces, etc.). Microsoft Certifications (MCSE and MOUS) are a strong plus and some will be required within a year of joining IB.
• In-depth experience with M365 Security and Compliance products, including eDiscovery, DLP and ATP
• In-depth experience with Microsoft Teams implementations and deployment
• Excellent verbal and written communication skills. Strong customer service and professional client facing skills.
• Excellent attention to detail and proven strong analytical / troubleshooting and multi-tasking skills.
• Strong time management and organizational skills and ability to meet project deadlines.
• Ability to learn new technologies and adopt new tools and techniques to increase automation, performance and scalability.
• Ability to work autonomously and as part of the IB global Windows team.
• Understanding of networking concepts, LAN/WAN, DNS/DHCP, routing, switching and firewalls. Working knowledge of Infloblox is an added plus
• Expert experience in Windows Server 2008/2012/2016, Microsoft SQL & Windows clustering technologies, Active Directory, Group Policy and DFS file systems.
• Knowledge of cloud services such as Microsoft Azure, AWS (IaaS, SaaS, and PaaS) and other relevant cloud technologies.
• Hands-on expertise working with a complex Active Directory infrastructure environment and the requirement of following strict standards, procedures and processes.

Company Benefits & Perks

• Competitive salary, annual performance-based bonus and stock grant
• Retirement plan 401(k) with a competitive company match
• Excellent health and welfare benefits, including medical, dental, and vision benefits
• Wellness screenings and assessments, health coaches and counseling services through an Employee Assistance Program (EAP)
• Paid time off and a generous parental leave policy
• Daily company lunch allowance provided, and a fully stocked kitchen with healthy options for breakfast and snack
• Corporate events, including team outings, dinners, volunteer activities and company sports teams
• Education reimbursement and learning opportunities
• Modern offices with multi-monitor setups