Infrastructure Engineer

About Windcave
Founded in 1999, Windcave is a global payments technology company, pioneering Payments as a Service (PaaS) and cutting-edge financial services. High volume of transactions flow through our platform every day for some of the world's most recognizable brands across all industries. We own the whole stack, from bare-metal servers in our datacenters to the edge network and our in-house developed payments software. We're looking for an Infrastructure Engineer in New York to help run it.
About the Role
Most infrastructure engineering jobs put you a long way from anything that matters, you inherit someone else's design, you raise a change request, and you wait. This role is different.
You'll engineer and operate the infrastructure behind a live global payments platform in a high-security, high-uptime PCI DSS environment. That means real ownership designing and building solutions, diagnosing root cause on production systems, and following problems through to resolution rather than handing them off. One day you're working on load balancing and edge security for a payments API processing high volume of transactions, the next you're deep in a virtualization cluster or in a datacenter cage.
The breadth here is genuinely rare. We run our own hardware, our own network, our own edge, and our own software. You'll work with experienced engineers across our international team, with real autonomy and ownership during US hours and colleagues in other regions providing support.
If you're an experienced engineer who wants to work on infrastructure where uptime actually matters, and to keep growing across a wider stack than most companies can offer, this is that role.
Our Technology Environment
Edge security and CDN for a global payments API: WAF, DDoS protection, rate limiting, and content delivery at the edge, plus Zero Trust network access for staff
A live 24/7/365 production estate: Hyper-V virtualization clusters and multi-vendor server and storage hardware across international datacenters
Enterprise load balancing (F5 BIG-IP), web servers (IIS, Nginx), and databases (MS SQL, MySQL, MongoDB, Opensearch)
Core Microsoft infrastructure: Windows Server, Active Directory, GPO, DNS, and DHCP across a global domain
Linux creation and administration
Security engineering: SSL/TLS certificate lifecycle, cipher management, PKI, hardware firewalls, and IPsec VPNs
Microsoft 365 and Entra ID, Intune/Autopilot device management, Exchange Online, SharePoint Online
Network infrastructure: layer 2/3 switching, routing, wireless, and firewalls across LAN/WAN
SIP telephony and unified communications
Hands-on datacenter/colocation work: racking, structured cabling, fibre patching, and hardware lifecycle management
This role includes a rotational after-hours on-call component for critical systems, shared with our international teams so overnight coverage is limited.
What You'll Bring
Candidates with strong engineering fundamentals and a demonstrated commitment to professional growth are encouraged to apply.
Required:
In-depth production experience with Windows Server, Active Directory, Group Policy, and DNS
A good working experience with Linux administration
Virtualization experience, ideally Hyper-V, including clustering and storage
Strong IP networking and network operations experience in a LAN/WAN environment: switching, routing, firewalls, IPsec VPN, wireless, DNS.
Load balancer configuration and administration
Intermediate or higher PowerShell scripting and a bias toward automation
Strong structured troubleshooting skills with a track record of finding root cause in a 24/7 high-availability environment
Microsoft 365 administration: Entra ID, Intune/Autopilot, Exchange Online, SharePoint Online, Teams, Purview
Security technologies. SSL certificates, TLS ciphers
Valued:
Experience in a PCI DSS or similarly regulated/audited environment
F5 BIG-IP or other enterprise load balancer engineering
CDN/edge security platforms or Zero Trust networking
Database administration (MS SQL, MySQL, MongoDB, Opensearch) and web server administration
SIP and unified communications
Multi-vendor server and storage hardware, backup platforms, and datacenter operations (power, cooling, structured cabling)
Certifications such as AZ-104/AZ-305, CCNA, Security+, or equivalent experience
Configuring and managing service desk and contact server software.
What We Offer
Medical, Dental, Vision, and Life insurance
401(k) with company match
Hybrid work (currently following hybrid work model; in-office Monday, Tuesday, Friday). From 1/12/2026 we will be moving to 4 days' work from office (with Tuesday to Friday as working in office days).
A rare breadth of technology in one role, and the kind of experience that builds careers
Ongoing training and certification support, with real progression paths in a growing global infrastructure team
Access to the latest technologies and tools in the payments industry
Salary is USD120,000 to USD140,000 per annum (depending on experience)
Why Windcave
At Windcave, you'll be part of a team that's reshaping the landscape of payment solutions and services. Our global presence and innovative approach set us apart in the payment industry, making Windcave a place where your work impacts businesses and consumers around the world.
Ready to Make an Impact?
If you're ready to embrace the challenge and join a company where innovation meets excellence, apply now and be part of our success story.

Employment type
Full-Time

Work arrangement
No