Lead Infrastructure Engineer

Lead Infrastructure Engineer – On-Premise Systems & DevOps Citi is looking for a Lead Infrastructure Engineer to take ownership of the on-premise infrastructure underpinning critical financial applications within the Global Functions Technology (GFT) Accounting, Controls and Ledger organization. In this role, you will architect and sustain highly available, secure, and performant systems that directly support mission-critical operations at a global financial institution. You will combine deep technical expertise with team leadership, risk oversight, and a forward-looking approach to automation and observability.

Design, build, and maintain highly available, secure on-premise Linux environments that support mission-critical financial applications across the Accounting, Controls and Ledger technology organization. Lead the full application infrastructure lifecycle (Design, Procure, Build & Handover to App Support) — ensuring reliable and controlled delivery across all environments. Architect and administer enterprise storage solutions including NAS, SAN, ScaleIO, and S3 object storage, implementing access controls through Active Directory groups to enforce security and governance. Engineer resilient middleware environments on platforms such as Tomcat and WebSphere, leading performance tuning, capacity planning, and high-availability configuration for production systems. Design and validate comprehensive disaster recovery plans that meet defined RTO/RPO objectives, and build monitoring and observability solutions using tools such as AppDynamics to enable proactive issue detection. Install, configure, and maintain Ab Initio server infrastructure, and support database environments by writing and optimizing SQL queries to ensure data integrity and system performance. Manage the complete lifecycle of digital certificates, conduct impact assessments for infrastructure and SaaS maintenance activities, and collaborate with application teams to resolve vulnerabilities and security configuration issues. Leverage GenAI tools such as GitHub Copilot and AI-powered platforms to accelerate the creation of automation scripts in Bash and Python, generate Infrastructure as Code using Ansible, and automate log analysis for faster troubleshooting. Mentor junior and mid-level engineers on technical practices and operational standards, lead root cause analysis for complex incidents, and maintain clear documentation for all system configurations and procedures. Required Qualifications & Skills 6+ years of experience in infrastructure engineering, systems administration, or a closely related DevOps discipline. Expert-level Linux server administration, including installation, configuration, hardening, and ongoing operational management of production environments. Hands-on experience installing and configuring Ab Initio server software, with a solid understanding of how it integrates within an on-premise infrastructure stack. Proficiency in SQL, including writing queries, performance tuning, and query optimization across relational database environments. Strong scripting capability in Unix shell, Bash, or Python, applied to infrastructure automation, application logic, and operational workflows. Deep experience with enterprise storage technologies (NAS, SAN, ScaleIO, S3) and application server platforms such as Tomcat or WebSphere. Demonstrated ability to design and execute disaster recovery and business continuity plans, with working knowledge of SFTP and NDM (Connect:Direct) secure file transfer protocols. Familiarity with vulnerability management, server hardening, certificate lifecycle management, Active Directory, and ServiceNow for incident and change management. Bachelor's degree or equivalent professional experience in a relevant technical field. Beneficial Skills & Qualifications Experience working with GenAI-assisted development tools such as GitHub Copilot or AI-powered observability platforms to improve