Infrastructure Engineer II responsible for day-to-day ownership of the platform supporting the lending business, including Cato Networks SASE, Cisco and Meraki networking, Okta and Entra ID identity, and the co-located data center. Works independently on production changes while collaborating with senior engineers for architecture and review. Operates in a regulated environment, ensuring security and compliance. Key Responsibilities: • Operate and maintain the Cato Networks SASE platform, managing policy, health, and bandwidth analysis. • Configure and manage Cisco and Meraki switching, including VLAN, trunk, PoE, firmware, and routing. • Oversee the Meraki wireless environment, from site surveys to firmware lifecycle. • Administer DNS, DHCP, IPAM, and certificate lifecycle, troubleshooting at packet level. • Manage carrier circuits, cross-connects, and bandwidth capacity planning. • Operate the Vonage cloud VoIP platform, provisioning users, call flow, and E911 records. • Administer Okta, Entra ID, and Active Directory, including SSO onboarding and lifecycle rules. • Automate identity operations using PowerShell and APIs for provisioning, reporting, and review. • Manage VMware vSphere and Hyper-V virtual environments, including provisioning, patching, and capacity forecasting. • Execute backup and replication operations in Druva and VMware, ensuring recovery testing. • Lead vulnerability management, incident response, and security controls across the infrastructure. • Participate in on-call rotation, change windows, monitoring, and audit evidence. Qualifications: • 3-5 years hands-on enterprise infrastructure experience across networking, systems, and virtualization. • Solid enterprise networking skills: VLAN, trunk, routing, firewall, wireless, packet-level troubleshooting on Cisco, Meraki, or comparable. • Hands-on administration of Okta, Entra ID, and Active Directory, including SSO onboarding and MFA or Conditional Access policy. • Production experience with a SASE, next-generation firewall, or SD-WAN platform (Cato, Palo Alto, Fortinet, Zscaler, or similar). • Windows Server and Linux administration: patching, services, logs, performance troubleshooting, and hardening. • Working PowerShell ability to automate real work with parameterized scripts and error handling. • Practical security engineering habits: segmentation, patch and vulnerability management, access control, incident response. • Availability for on-call rotation, after-hours change windows, and incident escalation. • Clear written communication for runbooks, change records, diagrams, and explaining risk to non-technical leaders. • Comfort planning and executing change windows, validation, rollback, and judgment for senior review. • Understanding of mortgage industry or regulated environment and handling borrower NPI. • Production experience administering a hypervisor platform (VMware vSphere, Hyper-V, or both), including clusters, storage, patching, capacity, backup, and restore testing. Preferred Skills: • Experience in mortgage, banking, or another regulated financial services environment. • Professional- or specialty-level certification such as CCNP Enterprise, Microsoft SC-300 or MS-102, Okta Certified Administrator, VMware VCP-DCV, or CompTIA Security+. • Hands-on experience with the platforms we run: Okta, Cato Networks, Cisco and Meraki, VMware vSphere, Hyper-V, Druva, LogicMonitor, or Vonage. • Configuration management and automation tooling - Ansible, Microsoft Intune, or Microsoft Endpoint Configuration Manager. • Microsoft 365 workload administration - Exchange Online, SharePoint, and Teams. • Experience leading a discrete infrastructure project end to end: a switch refresh, a colocation move, an SSO migration, or a backup platform change. • Experience serving as a technical contact during SOC 2, GLBA, investor, or warehouse lender examinations. • Scripting against an identity API - Microsoft Graph or the Okta API. • Experience mentoring junior engineers or help desk staff and setting technical standards. • Familiarity with an IT service management platform such as Jira Service Management or ServiceNow.