- This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week.
This role is open to Assistant Vice President and Vice President level candidates depending on experience.
About the Bank:
Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches.
Department Overview:
The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. The Information Technology Department (“ITD”) provides the users of the Branch’s information systems with sufficient and appropriate system resources and functionality to complete their day-to-day business and keeps security and consistency of the important information that is stored in the systems.
Your Role Overview:
The Infrastructure & Systems Engineer is responsible for the administration, support, maintenance, and continuous improvement of the organization's enterprise infrastructure environment. This hands-on role supports Windows Server, VMware, VMware Cloud Foundation (VCF), AWS, storage, backup, identity and access management, Workspace ONE, networking, and cybersecurity platforms. The role is primarily focused on infrastructure engineering and operations, including Windows Server, VMware/VCF, Horizon VDI, AWS, storage, backup, identity management, Workspace ONE, and virtualization platforms, while also supporting enterprise networking and security technologies such as Cisco switching/routing and Fortinet firewalls. The successful candidate will be responsible for maintaining the reliability, security, and availability of business-critical systems, troubleshooting complex technical issues, coordinating with vendors, and participating in after-hours maintenance, weekend support, and on-call activities as required.
Your Duties and Responsibilities:
- Administer, maintain, and support Microsoft Windows Server infrastructure and related enterprise services, including Active Directory, Group Policy, DNS, and DHCP.
- Support and maintain identity and access management solutions, including PingFederate Single Sign-On (SSO), PingID Multi-Factor Authentication (MFA), Workspace ONE Access, and CyberArk Privileged Access Management (PAM).
- Administer and maintain VMware vSphere, VMware Cloud Foundation (VCF), ESXi, vCenter, and VMware Horizon VDI environments.
- Administer and support Workspace ONE UEM (Mobile Device Management), Workspace ONE Access, device enrollment, compliance policies, application deployment, and endpoint management services.
- Support compute infrastructure including Cisco UCS, HPE, and Dell server platforms, encompassing hardware lifecycle management, firmware upgrades, performance optimization, and operational administration.
- Administer and support enterprise storage platforms, including NetApp and Pure Storage environments.
- Manage enterprise backup and recovery solutions, including backup monitoring, recovery testing, restore validation, retention management, and backup reporting.
- Support AWS cloud services, including EC2, VPC, S3, IAM, CloudWatch, VPN connectivity, and hybrid cloud integrations.
- Perform administration, maintenance, and troubleshooting of the HPE NonStop system and related infrastructure components.
- Monitor infrastructure performance, capacity, availability, and overall operational health across enterprise systems and cloud environments.
- Engineer, evaluate, test, and implement new infrastructure solutions, upgrades, and technology refresh initiatives.
- Implement infrastructure security best practices, system hardening standards, vulnerability remediation activities, and security compliance initiatives.
- Coordinate remediation of infrastructure-related audit findings, security recommendations, and regulatory compliance requirements.
- Collaborate with Information Security teams and assist with internal audits, regulatory examinations, risk assessments, and compliance reviews.
- Plan, coordinate, and perform operating system patching, firmware upgrades, application updates, vulnerability remediation, and infrastructure maintenance activities to maintain security, compliance, and operational stability.
- Participate in approved change management processes and perform scheduled maintenance activities during evenings, weekends, holidays, and other maintenance windows as required.
- Respond to critical production incidents, support on-call responsibilities, and participate in escalation, troubleshooting, and recovery activities.
- Assist with disaster recovery planning, testing, recovery validation, business continuity exercises, and infrastructure resiliency initiatives.
- Lead and support infrastructure projects, upgrades, migrations, and technology refresh initiatives from planning through implementation. Develop and maintain technical documentation and automation solutions using PowerShell, Python, APIs, and related technologies to improve operational efficiency.
- Support enterprise networking infrastructure, including Cisco switching, routing, VLAN administration, WAN connectivity, VPN technologies, and remote access solutions.
- Administer and maintain Fortinet firewalls, including firewall policy management, VPN configurations, NAT rules, security updates, and troubleshooting.
- Troubleshoot network, firewall, DNS, routing, switching, VPN, and connectivity issues across on-premises and cloud environments.
- Work with network service providers, vendors, and technology partners to resolve infrastructure, security, and connectivity issues.
- Coordinate with vendors and internal teams, provide technical guidance and knowledge sharing to team members, maintain operational procedures and documentation, and perform additional duties as assigned by management.
- Performs other duties and responsibilities as assigned by management
Your Qualifications:
- 8+ years of enterprise infrastructure administration, systems engineering, or infrastructure support experience.
- Strong experience administering Microsoft Windows Server (Windows 2019, 2022, 2025) environments, including Active Directory, Group Policy, DNS, DHCP, and related Microsoft infrastructure services.
- Advanced experience with VMware vSphere, VMware Cloud Foundation (VCF), ESXi, vCenter, and VMware Horizon VDI environments.
- Experience supporting enterprise compute and hardware platforms, including Cisco UCS, HPE, and Dell server infrastructure.
- Strong experience with enterprise storage and backup technologies, including NetApp, Pure Storage, Veeam, or equivalent backup and recovery solutions.
- Experience administering and supporting AWS cloud services, including EC2, VPC, S3, IAM, CloudWatch, VPN connectivity, and hybrid cloud environments.
- Experience supporting identity and access management technologies, including PingFederate SSO, PingID MFA, Workspace ONE Access, CyberArk PAM, and related authentication and security solutions.
- Experience administering Workspace ONE UEM (MDM), mobile device lifecycle management, endpoint compliance policies, application deployment, mobile security controls, and Workspace ONE Access.
- Knowledge of cybersecurity best practices, including vulnerability remediation, system hardening, privileged access management, security compliance, and audit support activities.
- Intermediate knowledge of Cisco networking technologies and Fortinet firewalls, including switching, routing, VLANs, VPNs, NAT, TCP/IP, WAN connectivity, and working knowledge of OSPF and BGP routing protocols.
- Knowledge of HPE NonStop (HP Tandem) systems is preferred.
- Experience troubleshooting infrastructure, cloud, networking, firewall, storage, backup, and connectivity issues across on-premises and cloud environments.
- Experience developing automation solutions using PowerShell, Python, APIs, or similar scripting technologies, along with strong troubleshooting, documentation, organizational, and project execution skills.
- Ability to work independently and collaboratively in a team environment, manage multiple priorities, participate in disaster recovery and business continuity activities, and perform after-hours maintenance, weekend support, patching, system upgrades, on-call responsibilities, and emergency production support when required.
Preferred Certifications
- VMware Certified Professional (VCP)
- VMware Cloud Foundation (VCF) Certification (preferred)
- Microsoft Certified: Windows Server Hybrid Administrator Associate
- AWS Certified Solutions Architect Associate
- CyberArk Defender Certification
- ITIL Foundation
- Cisco CCNA or equivalent networking certification
- Fortinet NSE / FCP / FCSS Certification
Why you should join SuMi Trust:
SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion.
- The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance.
- We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals.
Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application process, please let us know when the Human Resources staff reaches out to you for an interview. The anticipated salary range for this role is listed above. The specific salary offered to an employment applicant is based on the individual’s qualifications, experiences, the job responsibilities, an analysis of the current compensation paid for similar roles in the local geographic area, and key distinctions of the job as compared to current jobs in the Branch. The role may also be eligible for an annual discretionary bonus.
Sumitomo Mitsui Trust Bank, Limited New York Branch is a branch of Sumitomo Mitsui Trust Holding Group. Learn more about the company, the values, and vision at https://www.smth.jp/english/about_us/philosophy
