IT Systems Engineer - Voleon Securities

About the role

Voleon is a technology company that applies state-of-the-art AI and machine learning techniques to real-world problems in finance. For nearly two decades, we have led our industry and worked at the frontier of applying AI/ML to investment management. We have become a multibillion-dollar asset manager, and we have ambitious goals for the future.

Your colleagues will include internationally recognized experts in artificial intelligence and machine learning research as well as highly experienced finance and technology professionals. In addition to our enriching and collegial working environment, we offer highly competitive compensation and benefits packages, technology talks by our experts, a beautiful modern office, daily catered lunches, and more.

In addition to our enriching and collegial working environment, we offer highly competitive compensation and benefits packages, technology talks by our experts, a beautiful modern office, daily catered lunches, and more.

Voleon is looking for an IT Systems Engineer to join our Corporate IT Engineering (Corp-ITE) team as the primary engineer for Voleon Securities (VSec), our broker-dealer affiliate. You will own the systems VSec runs on, from identity, email and collaboration to compliance capture, telephony and trading-desk endpoints, within Voleon's shared Corp-IT stack, and you will build and maintain the boundaries that keep VSec a distinct entity for its clients and regulators.

In this role, you will work directly with VSec's traders, leadership and compliance partners, and with Voleon's Security, Legal and Corp-IT Services teams. You will own multi-quarter projects such as standing up dedicated tenants and onboarding vendors, while managing the day-to-day operations that keep a trading business running in a fast-paced, high-performance environment.

Responsibilities

Own and operate VSec's systems in Voleon's Corp-IT stack (Microsoft 365/Entra ID, Slack, Zoom, RingCentral, ThetaLake, Atlassian, 1Password, Jamf/Intune), with runbooks documenting each VSec configuration for others to follow

Lead the entity-separation program for identity, data and communication boundaries between Voleon and VSec, including dedicated Slack, Zoom and ThetaLake environments, Purview DLP policies, the planned dedicated Microsoft 365 tenant, and related migration planning and cutovers

Build and maintain VSec identity and access, including SSO and SCIM for each VSec application, conditional access, dynamic groups and provisioning, break-glass access, and audit trails appropriate to a regulated entity

Build API integrations between SaaS platforms. Automate repeatable work in PowerShell, Python or Bash, and ship it as code through Corp-IT's Git repository, CI pipeline and job platform rather than running it by hand. AI coding assistants are welcome tools here

Run end-to-end vendor onboarding for VSec tools: NDA, MSA, InfoSec due diligence under broker-dealer requirements, deployment, SSO/SCIM, and documentation

Maintain compliance capture: email journaling, chat, voice and SMS archiving into ThetaLake, telephony retention settings, and evidence for Compliance and auditors

Support trading desk endpoints and applications: Windows Bloomberg workstations, Linux-based trading and VNC systems, trader phones, Tradeweb, MarketAxess, TruMid, and related vendor escalations

Administer and optimize VSec's shared SaaS platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian, MDMs) and implement security best practices with the Security team.

Monitor platform health, troubleshoot complex issues, coordinate vendor escalations, and lead evaluations of new solutions

Partner with VSec leadership, Compliance, Security, Legal, Corp-ITS, and business stakeholders to translate requirements into technical solutions, deliver projects, and serve as the named Corp-IT owner for VSec systems

Lead cross-functional IT projects and stay current with SaaS trends, emerging technologies, and best practices

Requirements

5+ years administering and engineering enterprise SaaS and identity platforms (Microsoft 365/Entra ID, Slack, Zoom, Atlassian or similar)

Strong expertise in cloud identity and access management (Entra ID, Okta), including SAML, OAuth, OIDC, SCIM, SSO, conditional access, MFA, and privileged role management (PIM or similar)

Proficiency in PowerShell or Python, plus Bash. Experience with REST APIs, API authentication (OAuth, JWT), and JSON/YAML. Comfort shipping automation through Git and a CI pipeline (Jenkins, GitHub Actions or similar) so it runs unattended

Strong Microsoft 365 and Entra ID administration, with solid experience in endpoint management (Intune/Jamf Pro) and collaboration platforms (Slack, Zoom, Google Workspace)

Working knowledge of macOS, Windows, and Linux endpoints, including Linux-based systems accessed over VNC or SSH. Solid understanding of networking (TCP/IP, DNS, DHCP, TLS/SSL, VPN) and directory services (Active Directory, Entra ID, LDAP)

Hands-on experience onboarding SaaS vendors end to end, including security due diligence, contract review with Legal, SSO/SCIM setup, rollout, and documentation

Experience supporting demanding, time-sensitive users such as traders, engineers, or researchers, where downtime has direct business cost

Track record leading cross-functional projects, with strong technical writing and documentation skills

Excellent problem-solving in complex, multi-platform environments and strong communication with technical and non-technical audiences

Proven ability to manage multiple priorities, collaborate with a team, and work independently as the single named owner for a business unit's systems while fully remote

Preferred Qualifications

Experience running separate tenants or workspaces for distinct legal entities within a shared IT organization, including identity, data and communication boundaries

Experience with infrastructure-as-code tools (Terraform, Ansible), DevOps practices (CI/CD pipelines, Git, automated testing), and container-based job platforms (AWS Fargate/ECS or similar)

Linux systems administration experience (RHEL family) beyond endpoint basics

Experience with Apple Business Manager (ABM) or Apple Device Enrollment Program (DEP/ADE)

Background with Atlassian suite (Jira, Confluence), including customization and automation

Experience in financial services, ideally with a broker-dealer or trading desk, including compliance archiving tools (ThetaLake, Smarsh, Global Relay) and trading-desk telephony (RingCentral or similar)

Experience supporting Windows trading workstations (Bloomberg terminals or similar) and trading-desk applications

Understanding of security tooling (EDR, DLP, ZTNA/CASB), certificate management, PKI, zero-trust architectures, and regulated-environment compliance (SOC 1/SOC 2, broker-dealer recordkeeping such as SEC 17a-4 and FINRA supervision)

Experience standing up or migrating a Microsoft 365 tenant, including identity and mailbox migration

“Friends of Voleon” Candidate Referral Program

If you have a great candidate in mind for this role and would like to have the potential to earn $7,500 if your referred candidate is successfully hired and employed by The Voleon Group, please use this form to submit your referral. For more details regarding eligibility, terms and conditions please make sure to review the Voleon Referral Bonus Program .

Equal Opportunity Employer

The Voleon Group is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.

Posting text as published by The Voleon Group.

The evidence behind this listing

Workplace

Remote Employer field

Seniority

Not established

Employment type

full time

Location as listed

Remote, United States | New York City, NY | Berkeley, CA

Pay and work authorization

Stated pay

$150k–175k/yr Employer field

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established