IT Systems Engineer - Voleon Securities

Voleon is a technology company that applies state-of-the-art AI and machine learning techniques to real-world problems in finance. For nearly two decades, we have led our industry and worked at the frontier of applying AI/ML to investment management. We have become a multibillion-dollar asset manager, and we have ambitious goals for the future.

Your colleagues will include internationally recognized experts in artificial intelligence and machine learning research as well as highly experienced finance and technology professionals. In addition to our enriching and collegial working environment, we offer highly competitive compensation and benefits packages, technology talks by our experts, a beautiful modern office, daily catered lunches, and more.

In addition to our enriching and collegial working environment, we offer highly competitive compensation and benefits packages, technology talks by our experts, a beautiful modern office, daily catered lunches, and more.

Voleon is looking for an IT Systems Engineer to join our Corporate IT Engineering (Corp-ITE) team as the primary engineer for Voleon Securities (VSec), our broker-dealer affiliate. You will own the systems VSec runs on, from identity, email and collaboration to compliance capture, telephony and trading-desk endpoints, within Voleon's shared Corp-IT stack, and you will build and maintain the boundaries that keep VSec a distinct entity for its clients and regulators.

In this role, you will work directly with VSec's traders, leadership and compliance partners, and with Voleon's Security, Legal and Corp-IT Services teams. You will own multi-quarter projects such as standing up dedicated tenants and onboarding vendors, while managing the day-to-day operations that keep a trading business running in a fast-paced, high-performance environment.

Responsibilities

- Own and operate VSec's systems in Voleon's Corp-IT stack (Microsoft 365/Entra ID, Slack, Zoom, RingCentral, ThetaLake, Atlassian, 1Password, Jamf/Intune), with runbooks documenting each VSec configuration for others to follow
- Lead the entity-separation program for identity, data and communication boundaries between Voleon and VSec, including dedicated Slack, Zoom and ThetaLake environments, Purview DLP policies, the planned dedicated Microsoft 365 tenant, and related migration planning and cutovers
- Build and maintain VSec identity and access, including SSO and SCIM for each VSec application, conditional access, dynamic groups and provisioning, break-glass access, and audit trails appropriate to a regulated entity
- Build API integrations between SaaS platforms. Automate repeatable work in PowerShell, Python or Bash, and ship it as code through Corp-IT's Git repository, CI pipeline and job platform rather than running it by hand. AI coding assistants are welcome tools here
- Run end-to-end vendor onboarding for VSec tools: NDA, MSA, InfoSec due diligence under broker-dealer requirements, deployment, SSO/SCIM, and documentation
- Maintain compliance capture: email journaling, chat, voice and SMS archiving into ThetaLake, telephony retention settings, and evidence for Compliance and auditors
- Support trading desk endpoints and applications: Windows Bloomberg workstations, Linux-based trading and VNC systems, trader phones, Tradeweb, MarketAxess, TruMid, and related vendor escalations
- Administer and optimize VSec's shared SaaS platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian, MDMs) and implement security best practices with the Security team.
- Monitor platform health, troubleshoot complex issues, coordinate vendor escalations, and lead evaluations of new solutions
- Partner with VSec leadership, Compliance, Security, Legal, Corp-ITS, and business stakeholders to translate requirements into technical solutions, deliver projects, and serve as the named Corp-IT owner for VSec systems
- Lead cross-functional IT projects and stay current with SaaS trends, emerging technologies, and best practices

Requirements

- 5+ years administering and engineering enterprise SaaS and identity platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian or similar)
- Strong expertise in cloud identity and access management (Entra ID, Okta), including SAML, OAuth, OIDC, SCIM, SSO, conditional access, MFA, and privileged role management (PIM or similar)
- Proficiency in PowerShell or Python, plus Bash. Experience with REST APIs, API authentication (OAuth, JWT), and JSON/YAML. Comfort shipping automation through Git and a CI pipeline (Jenkins, GitHub Actions or similar) so it runs unattended
- Strong Microsoft 365 and Entra ID administration, with solid experience in endpoint management (Intune/Jamf Pro) and collaboration platforms (Slack, Zoom, Google Workspace)
- Working knowledge of macOS, Windows, and Linux endpoints, including Linux-based systems accessed over VNC or SSH. Solid understanding of networking (TCP/IP, DNS, DHCP, TLS/SSL, VPN) and directory services (Active Directory, Entra ID, LDAP)
- Hands-on experience onboarding SaaS vendors end to end, including security due diligence, contract review with Legal, SSO/SCIM setup, rollout, and documentation
- Experience supporting demanding, time-sensitive users such as traders, engineers, or researchers, where downtime has direct business cost
- Track record leading cross-functional projects, with strong technical writing and documentation skills
- Excellent problem-solving in complex, multi-platform environments and strong communication with technical and non-technical audiences
- Proven ability to manage multiple priorities, collaborate with a team, and work independently as the single named owner for a business unit's systems while fully remote

# Preferred Qualifications
- Experience running separate tenants or workspaces for distinct legal entities within a shared IT organization, including identity, data and communication boundaries
- Experience with infrastructure-as-code tools (Terraform, Ansible), DevOps practices (CI/CD pipelines, Git, automated testing), and container-based job platforms (AWS Fargate/ECS or similar)
- Linux systems administration experience (RHEL family) beyond endpoint basics
- Experience with Apple Business Manager (ABM) or Apple Device Enrollment Program (DEP/ADE)
- Background with Atlassian suite (Jira, Confluence), including customization and automation
- Experience in financial services, ideally with a broker-dealer or trading desk, including compliance archiving tools (ThetaLake, Smarsh, Global Relay) and trading-desk telephony (RingCentral or similar)
- Experience supporting Windows trading workstations (Bloomberg terminals or similar) and trading-desk applications
- Understanding of security tooling (EDR, DLP, ZTNA/CASB), certificate management, PKI, zero-trust architectures, and regulated-environment compliance (SOC 1/SOC 2, broker-dealer recordkeeping such as SEC 17a-4 and FINRA supervision)
- Experience standing up or migrating a Microsoft 365 tenant, including identity and mailbox migration

“Friends of Voleon” Candidate Referral Program

If you have a great candidate in mind for this role and would like to have the potential to earn $7,500 if your referred candidate is successfully hired and employed by The Voleon Group, please use this form to submit your referral. For more details regarding eligibility, terms and conditions please make sure to review the Voleon Referral Bonus Program .

Equal Opportunity Employer

The Voleon Group is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.

Compensation

$150K – $175K • Offers Bonus