Lead Infrastructure Engineer

About the role

This role is within the Global Functions Technology (GFT) Accounting, Controls and Ledger organization. The Lead Infrastructure Engineer will take ownership of the on-premise infrastructure underpinning critical financial applications, architecting and sustaining highly available, secure, and performant systems that directly support mission-critical operations at a global financial institution. This role combines deep technical expertise with team leadership, risk oversight, and a forward-looking approach to automation and observability.

Responsibilities

• Design, build, and maintain highly available, secure on-premise Linux environments that support mission-critical financial applications across the Accounting, Controls and Ledger technology organization.
• Lead the full application infrastructure lifecycle (Design, Procure, Build & Handover to App Support) — ensuring reliable and controlled delivery across all environments.
• Architect and administer enterprise storage solutions including NAS, SAN, ScaleIO, and S3 object storage, implementing access controls through Active Directory groups to enforce security and governance.
• Engineer resilient middleware environments on platforms such as Tomcat and WebSphere, leading performance tuning, capacity planning, and high-availability configuration for production systems.
• Design and validate comprehensive disaster recovery plans that meet defined RTO/RPO objectives, and build monitoring and observability solutions using tools such as AppDynamics to enable proactive issue detection.
• Install, configure, and maintain Ab Initio server infrastructure, and support database environments by writing and optimizing SQL queries to ensure data integrity and system performance.
• Manage the complete lifecycle of digital certificates, conduct impact assessments for infrastructure and SaaS maintenance activities, and collaborate with application teams to resolve vulnerabilities and security configuration issues.
• Leverage GenAI tools such as GitHub Copilot and AI-powered platforms to accelerate the creation of automation scripts in Bash and Python, generate Infrastructure as Code using Ansible, and automate log analysis for faster troubleshooting.
• Mentor junior and mid-level engineers on technical practices and operational standards, lead root cause analysis for complex incidents, and maintain clear documentation for all system configurations and procedures.

Required Qualifications & Skills

• 6+ years of experience in infrastructure engineering, systems administration, or a closely related DevOps discipline.
• Expert-level Linux server administration, including installation, configuration, hardening, and ongoing operational management of production environments.
• Hands-on experience installing and configuring Ab Initio server software, with a solid understanding of how it integrates within an on-premise infrastructure stack.
• Proficiency in SQL, including writing queries, performance tuning, and query optimization across relational database environments.
• Strong scripting capability in Unix shell, Bash, or Python, applied to infrastructure automation, application logic, and operational workflows.
• Deep experience with enterprise storage technologies (NAS, SAN, ScaleIO, S3) and application server platforms such as Tomcat or WebSphere.
• Demonstrated ability to design and execute disaster recovery and business continuity plans, with working knowledge of SFTP and NDM (Connect:Direct) secure file transfer protocols.
• Familiarity with vulnerability management, server hardening, certificate lifecycle management, Active Directory, and ServiceNow for incident and change management.
• Bachelor's degree or equivalent professional experience in a relevant technical field.

Beneficial Skills & Qualifications

• Experience working with GenAI-assisted development tools such as GitHub Copilot or AI-powered observability platforms to improve infrastructure automation and accelerate troubleshooting.
• Working knowledge of application performance monitoring tools such as AppDynamics, Grafana, Dynatrace, or Google Cloud Observability.
• Good understanding of virtualization and cloud environments, including VMware or Hyper-V.
• Familiarity with networking fundamentals as they relate to on-premise infrastructure design and connectivity.
• Master's degree in a technology or engineering discipline preferred or equivalent experience.

Benefits

• Hybrid working model with 3 days in the office and 2 days working remotely.
• Ownership of high-impact infrastructure that supports critical financial systems operating at global scale.
• Opportunities to lead and mentor a team of engineers, building your leadership capability alongside your technical depth.
• Access to learning and development resources that support both technical advancement and professional growth.
• Exposure to emerging technologies including GenAI tooling and modern Infrastructure as Code practices, keeping your skills at the forefront of the industry.
• Competitive compensation and a comprehensive benefits package designed to support your financial wellbeing and long-term security.
• Wellbeing and family support program that recognize the importance of balance alongside performance.

Pay

Primary Location Full Time Salary Range: $125,760.00 - $188,640.00. In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards.