Grand Bank - Infrastructure Engineer

Grand Bank for Savings, FSB | Member FDIC

Position Summary:

The Infrastructure Engineer is responsible for the day-to-day operation, maintenance, and security of the technology infrastructure that supports Grand Bank for Savings, FSB (the “Bank”). The position administers the Bank’s primary and secondary data centers, the Windows Server virtual machine environment, the storage and backup platforms beneath them, and the network and firewall layer connecting them.

The Infrastructure Engineer is a hands‑on, generalist engineering role within the Bank’s small Information Technology department, rather than a specialized position on a larger team. The position carries primary ownership of virtualization, backup and recovery, storage, network and perimeter security, identity, and patch management; provides tier‑2 and tier‑3 technical escalation; supports business continuity and disaster recovery; and produces the documentation and evidence required in an environment regulated by the Office of the Comptroller of the Currency (OCC) and examined under the Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook, where every change is documented, approved, and evidenced.

The successful candidate must be prepared to serve as the Bank’s primary technical resource for rebuilding hypervisor hosts, tracing firewall rules, and restoring domain controllers, and must exercise sound judgment about operational risk. The position has no direct reports and is classified as exempt. The Infrastructure Engineer reports to the Bank’s Chief Information Officer / Information Security Officer (CIO/ISO).

The essential functions include, but are not limited to, the following:

• Administer the Bank’s VMware vSphere environment across both data centers, including host patching, cluster health, virtual machine provisioning, resource balancing, and capacity planning.
• Maintain vCenter Server, ESXi host builds, and VMware Tools currency across the virtual server environment.
• Maintain build standards and hardening baselines for current Windows Server releases and manage the server lifecycle from provisioning through decommission.

• Administer Veeam Backup & Replication, including job design, scale‑out backup repository health, cloud capacity tier offload, and replication between the primary and secondary data centers.
• Perform and document automated restore verification and produce restore evidence for internal audit and regulatory examiners.
• Maintain and test the technical recovery procedures supporting the Bank’s business continuity and disaster recovery plans.

• Administer the shared storage area network (SAN) at both data centers, including LUN and volume provisioning, multipathing, firmware currency, capacity forecasting, and performance troubleshooting.
• Coordinate storage vendor support cases and hardware replacements.

• Administer enterprise next-generation firewalls, including security and NAT policy, security profiles, OS upgrades, remote‑access virtual private network (VPN), and log forwarding to the security information and event management (SIEM) platform.
• Administer cloud‑managed enterprise switching and wireless, including VLAN and port configuration, SSID and wireless policy, firmware management, and dashboard alerting.
• Maintain accurate network documentation, including VLAN assignments, zone definitions, and segmentation diagrams, to the standard expected by auditors and examiners.

• Administer on‑premises Active Directory in a hybrid configuration with Microsoft Entra , including Group Policy, Intune policy,…