Infrastructure Engineer
At a glance
Mid-level Platform & Infrastructure role at Windcave. New York · full-time · $120,000–$140,000 base.
devopsroles summary, based on the employer's posting.
What you'll do
- Design and run production infrastructure, then trace incidents to their root cause and carry fixes through
- Configure load balancing and edge defenses, including WAF, DDoS protection, and rate limits for the payments API
- Maintain Windows and Linux systems, virtualization clusters, network services, and varied server and storage hardware
- Handle datacenter tasks such as racking, cabling, fibre patching, and hardware lifecycle work
- Take turns covering critical systems after hours alongside colleagues in other regions
What you bring
- You have deep production experience with Windows Server, Active Directory, Group Policy, and DNS
- You can administer Linux and have worked with virtualization, preferably Hyper-V clusters and storage
- You bring strong LAN/WAN operations skills across switching, routing, firewalls, wireless, and IPsec VPNs
- You can configure load balancers and use PowerShell at an intermediate level or above to automate work
- You administer Microsoft 365 services, including Entra ID, Intune/Autopilot, Exchange Online, SharePoint Online, Teams, and Purview
Who this fits
This role suits a mid-level infrastructure engineer who wants broad, hands-on ownership across production systems, networking, security, and datacenter work. The position is based in New York and uses a hybrid schedule, with office days on Monday, Tuesday, and Friday. You’ll join a rotational after-hours on-call schedule for critical systems, with overnight coverage shared across international teams.
From the employer
About Windcave
Founded in 1999, Windcave is a global payments technology company, pioneering Payments as a Service (PaaS) and cutting-edge financial services. High volume of transactions flow through our platform every day for some of the world's most recognizable brands across all industries. We own the whole stack, from bare-metal servers in our datacenters to the edge network and our in-house developed payments software. We're looking for an Infrastructure Engineer in New York to help run it.
About the Role
Most infrastructure engineering jobs put you a long way from anything that matters, you inherit someone else's design, you raise a change request, and you wait. This role is different.
You'll engineer and operate the infrastructure behind a live global payments platform in a high-security, high-uptime PCI DSS environment. That means real ownership designing and building solutions, diagnosing root cause on production systems, and following problems through to resolution rather than handing them off. One day you're working on load balancing and edge security for a payments API processing high volume of transactions, the next you're deep in a virtualization cluster or in a datacenter cage.
The breadth here is genuinely rare. We run our own hardware, our own network, our own edge, and our own software. You'll work with experienced engineers across our international team, with real autonomy and ownership during US hours and colleagues in other regions providing support.
If you're an experienced engineer who wants to work on infrastructure where uptime actually matters, and to keep growing across a wider stack than most companies can offer, this is that role.
Our Technology Environment
- Edge security and CDN for a global payments API: WAF, DDoS protection, rate limiting, and content delivery at the edge, plus Zero Trust network access for staff
- A live 24/7/365 production estate: Hyper-V virtualization clusters and multi-vendor server and storage hardware across international datacenters
- Enterprise load balancing (F5 BIG-IP), web servers (IIS, Nginx), and databases (MS SQL, MySQL, MongoDB, Opensearch)
- Core Microsoft infrastructure: Windows Server, Active Directory, GPO, DNS, and DHCP across a global domain
- Linux creation and administration
- Security engineering: SSL/TLS certificate lifecycle, cipher management, PKI, hardware firewalls, and IPsec VPNs
- Microsoft 365 and Entra ID, Intune/Autopilot device management, Exchange Online, SharePoint Online
- Network infrastructure: layer 2/3 switching, routing, wireless, and firewalls across LAN/WAN
- SIP telephony and unified communications
- Hands-on datacenter/colocation work: racking, structured cabling, fibre patching, and hardware lifecycle management
This role includes a rotational after-hours on-call component for critical systems, shared with our international teams so overnight coverage is limited.
What You'll Bring
Candidates with strong engineering fundamentals and a demonstrated commitment to professional growth are encouraged to apply.
Required:
- In-depth production experience with Windows Server, Active Directory, Group Policy, and DNS
- A good working experience with Linux administration
- Virtualization experience, ideally Hyper-V, including clustering and storage
- Strong IP networking and network operations experience in a LAN/WAN environment: switching, routing, firewalls, IPsec VPN, wireless, DNS.
- Load balancer configuration and administration
- Intermediate or higher PowerShell scripting and a bias toward automation
- Strong structured troubleshooting skills with a track record of finding root cause in a 24/7 high-availability environment
- Microsoft 365 administration: Entra ID, Intune/Autopilot, Exchange Online, SharePoint Online, Teams, Purview
- Security technologies. SSL certificates, TLS ciphers
Valued:
- Experience in a PCI DSS or similarly regulated/audited environment
- F5 BIG-IP or other enterprise load balancer engineering
- CDN/edge security platforms or Zero Trust networking
- Database administration (MS SQL, MySQL, MongoDB, Opensearch) and web server administration
- SIP and unified communications
- Multi-vendor server and storage hardware, backup platforms, and datacenter operations (power, cooling, structured cabling)
- Certifications such as AZ-104/AZ-305, CCNA, Security+, or equivalent experience
- Configuring and managing service desk and contact server software.
What We Offer
- Medical, Dental, Vision, and Life insurance
- 401(k) with company match
- Hybrid work model (in-office Monday, Tuesday, Friday)
- A rare breadth of technology in one role, and the kind of experience that builds careers
- Ongoing training and certification support, with real progression paths in a growing global infrastructure team
- Access to the latest technologies and tools in the payments industry
Salary is USD120,000 to USD140,000 per annum (depending on experience)
Why Windcave
At Windcave, you'll be part of a team that's reshaping the landscape of payment solutions and services. Our global presence and innovative approach set us apart in the payment industry, making Windcave a place where your work impacts businesses and consumers around the world.
Ready to Make an Impact?
If you're ready to embrace the challenge and join a company where innovation meets excellence, apply now and be part of our success story.