Infrastructure Engineer

About Windcave

Founded in 1999, Windcave is a global payments technology company, pioneering Payments as a Service (PaaS) and cutting-edge financial services. High volume of transactions flow through our platform every day for some of the world's most recognizable brands across all industries. We own the whole stack, from bare-metal servers in our datacenters to the edge network and our in-house developed payments software. We're looking for an Infrastructure Engineer in New York to help run it.

About the Role

Most infrastructure engineering jobs put you a long way from anything that matters, you inherit someone else's design, you raise a change request, and you wait. This role is different.

You'll engineer and operate the infrastructure behind a live global payments platform in a high-security, high-uptime PCI DSS environment. That means real ownership designing and building solutions, diagnosing root cause on production systems, and following problems through to resolution rather than handing them off. One day you're working on load balancing and edge security for a payments API processing high volume of transactions, the next you're deep in a virtualization cluster or in a datacenter cage.

The breadth here is genuinely rare. We run our own hardware, our own network, our own edge, and our own software. You'll work with experienced engineers across our international team, with real autonomy and ownership during US hours and colleagues in other regions providing support.

If you're an experienced engineer who wants to work on infrastructure where uptime actually matters, and to keep growing across a wider stack than most companies can offer, this is that role.

Our Technology Environment

• Edge security and CDN for a global payments API: WAF, DDoS protection, rate limiting, and content delivery at the edge, plus Zero Trust network access for staff
• A live 24/7/365 production estate: Hyper-V virtualization clusters and multi-vendor server and storage hardware across international datacenters
• Enterprise load balancing (F5 BIG-IP), web servers (IIS, Nginx), and databases (MS SQL, MySQL, MongoDB, Opensearch)
• Core Microsoft infrastructure: Windows Server, Active Directory, GPO, DNS, and DHCP across a global domain
• Linux creation and administration
• Security engineering: SSL/TLS certificate lifecycle, cipher management, PKI, hardware firewalls, and IPsec VPNs
• Microsoft 365 and Entra ID, Intune/Autopilot device management, Exchange Online, SharePoint Online
• Network infrastructure: layer 2/3 switching, routing, wireless, and firewalls across LAN/WAN
• SIP telephony and unified communications
• Hands-on datacenter/colocation work: racking, structured cabling, fibre patching, and hardware lifecycle management

This role includes a rotational after-hours on-call component for critical systems, shared with our international teams so overnight coverage is limited.

What You'll Bring

Candidates with strong engineering fundamentals and a demonstrated commitment to professional growth are encouraged to apply.

Required:

• In-depth production experience with Windows Server, Active Directory, Group Policy, and DNS
• A good working experience with Linux administration
• Virtualization experience, ideally Hyper-V, including clustering and storage
• Strong IP networking and network operations experience in a LAN/WAN environment: switching, routing, firewalls, IPsec VPN, wireless, DNS.
• Load balancer configuration and administration
• Intermediate or higher PowerShell scripting and a bias toward automation
• Strong structured troubleshooting skills with a track record of finding root cause in a 24/7 high-availability environment
• Microsoft 365 administration: Entra ID, Intune/Autopilot, Exchange Online, SharePoint Online, Teams, Purview
• Security technologies. SSL certificates, TLS ciphers

Valued:

• Experience in a PCI DSS or similarly regulated/audited environment
• F5 BIG-IP or other enterprise load balancer engineering
• CDN/edge security platforms or Zero Trust networking
• Database administration (MS SQL, MySQL, MongoDB, Opensearch) and web server administration
• SIP and unified communications
• Multi-vendor server and storage hardware, backup platforms, and datacenter operations (power, cooling, structured cabling)
• Certifications such as AZ-104/AZ-305, CCNA, Security+, or equivalent experience
• Configuring and managing service desk and contact server software.

What We Offer

• Medical, Dental, Vision, and Life insurance
• 401(k) with company match
• Hybrid work model (in-office Monday, Tuesday, Friday)
• A rare breadth of technology in one role, and the kind of experience that builds careers
• Ongoing training and certification support, with real progression paths in a growing global infrastructure team
• Access to the latest technologies and tools in the payments industry

Salary is USD120,000 to USD140,000 per annum (depending on experience)

Why Windcave

At Windcave, you'll be part of a team that's reshaping the landscape of payment solutions and services. Our global presence and innovative approach set us apart in the payment industry, making Windcave a place where your work impacts businesses and consumers around the world.

Ready to Make an Impact?

If you're ready to embrace the challenge and join a company where innovation meets excellence, apply now and be part of our success story.