Infrastructure Engineer

Founded in 1999, Windcave is a global payments technology company, pioneering Payments as a Service (PaaS) and cutting‑edge financial services. Millions of transactions flow through our platform every day for some of the world's most recognizable brands across all industries. We own the whole stack, from bare‑metal servers in our datacenters to the edge network and our in‑house developed payments software.

We're looking for an Infrastructure Engineer in New York to help run it.

Most infrastructure engineering jobs put you a long way from anything that matters, you inherit someone else's design, you raise a change request, and you wait. This role is different.

You’ll engineer and operate the infrastructure behind a live global payments platform in a high‑security, high‑uptime PCI DSS environment. That means real ownership designing and building solutions, diagnosing root cause on production systems, and following problems through to resolution rather than handing them off. One day you're working on load balancing and edge security for a payments API processing millions of transactions, the next you're deep in a virtualization cluster or in a datacenter cage.

The breadth here is genuinely rare. We run our own hardware, our own network, our own edge, and our own software. You'll work with experienced engineers across our international team, with real autonomy and ownership during US hours and colleagues in other regions providing support.

If you're an experienced engineer who wants to work on infrastructure where uptime actually matters, and to keep growing across a wider stack than most companies can offer, this is that role.

• Edge security and CDN for a global payments API: WAF, DDoS protection, rate limiting, and content delivery at the edge, plus Zero Trust network access for staff
• A live 24/7/365 production estate:
  Hyper‑V virtualization clusters and multi‑vendor server and storage hardware across international datacenters
• Enterprise load balancing (F5 BIG‑IP), web servers (IIS, Nginx), and databases (MS SQL, MySQL, MongoDB, Open Search)
• Core Microsoft infrastructure:
  Windows Server, Active Directory, GPO, DNS, and DHCP across a global domain
• Linux creation and administration
• Security engineering: SSL/TLS certificate lifecycle, cipher management, PKI, hardware firewalls, and IPsec VPNs
• Microsoft 365 and Entra , Intune/Autopilot device management, Exchange Online, SharePoint Online
• Network infrastructure: layer 2/3 switching, routing, wireless, and firewalls across LAN/WAN
• SIP telephony and unified communications
• Hands‑on datacenter/colocation work: racking, structured cabling, fibre patching, and hardware lifecycle management

This role includes a rotational after‑hours on‑call component for critical systems, shared with our international teams so overnight coverage is limited.

Candidates with strong engineering fundamentals and a demonstrated commitment to professional growth are encouraged to apply.

• In‑depth production experience with Windows Server, Active Directory, Group Policy, and DNS
• A good working experience with Linux administration
• Virtualization experience, ideally Hyper‑V, including clustering and storage
• Strong IP networking and network operations experience in a LAN/WAN environment: switching, routing, firewalls, IPsec VPN, wireless, DNS.
• Load balancer configuration and administration
• Intermediate or higher Power Shell scripting and a bias toward automation
• Strong structured troubleshooting skills with a track record of finding root cause in a 24/7 high‑availability environment
• Security technologies. SSL certificates, TLS ciphers
• Experience in a PCI DSS or similarly regulated/audited environment
• F5 BIG‑IP or other enterprise load balancer engineering
• CDN/edge security platforms or Zero Trust networking
• Database administration (MS SQL, MySQL, MongoDB, Open Search) and web server administration
• SIP and unified communications
• Multi‑vendor server and storage hardware, backup platforms, and datacenter operations (power, cooling, structured cabling)
• Certifications such as AZ‑104/AZ‑305, CCNA, Security+, or equivalent experience
• Configuring and…