Systems Engineer

About Our Company We’re a diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. Our team of 22,000 people across 19 countries, serves more than 3.5 million individual, small business and institutional clients. We are a longstanding leader in financial planning and advice, a global asset manager and an insurer. Our unwavering focus on our clients and strong financial foundation connects each of our unique businesses – Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities. Here, we foster meaningful careers, invest in the future, and make a difference for clients, institutions and communities around the world.

The MFT Platform Administrator is responsible for the day-to-day operations, support, administration, security, and reliability of the enterprise Managed File Transfer (MFT) ecosystem. This role ensures the availability, performance, and operational stability of critical file transfer platforms including IBM Sterling B2B Integrator (MFT Hub), Sterling Control Center, Sterling Connect:Direct, AWS Transfer Family, and AWS Multi-Region Access Point (MRAP) solutions that support secure business-to-business and internal application file transfers. The role operates within an enterprise MFT environment consisting of Sterling B2B Integrator/MFT Hub, Connect:Direct AWS Gateway, and cloud-based file transfer services.

Provide Level 2/Level 3 operational support for enterprise file transfer platforms and ensure adherence to business SLAs. Monitor and support production file transfer activities, investigate failures, perform root-cause analysis, and drive problem resolution. Administer and support IBM Sterling B2B Integrator, Sterling Control Center, Connect:Direct, AWS Transfer Family, and related MFT technologies. Configure, manage, and troubleshoot secure file transfer protocols including Sterling Connect:Direct, SFTP, FTPS, HTTPS, AS2, and Mailbox Browser Interface (MBI). These protocols are identified as secure transfer methods supporting encryption in transit. Perform daily operational activities including monitoring, alert management, capacity management, patching, health checks, and platform maintenance. Support disaster recovery exercises, resiliency testing, TRR activities, and high-availability initiatives to ensure business continuity. Platform roadmaps include regular TRR activities and resiliency improvements. Manage certificate lifecycle activities including onboarding, deployment, renewal, replacement, revocation, and troubleshooting of TLS/SSL certificates. Administer encryption and security technologies including TLS/SSL, SSH keys, PGP encryption, digital certificates, and data-in-transit protection controls. PGP key lifecycle management and secure transfer protocols are part of the platform's security standards. Coordinate firewall requests, network connectivity troubleshooting, DMZ deployments, proxy configurations, and secure partner onboarding activities. Support internal application teams and external business partners during onboarding, migration, implementation, and production support activities. Partner with Cybersecurity, Infrastructure, Cloud Engineering, Network Engineering, and Application Support teams to resolve incidents and implement secure solutions. Participate in on-call support rotations and provide timely response to critical production incidents. Develop and maintain operational runbooks, support documentation, monitoring standards, and knowledge articles. Drive continuous improvement initiatives focused on automation, self-service capabilities, operational efficiency, and reduction of manual support activities. Platform strategy emphasizes automation, self-service, and simplified customer onboarding.

Bachelor's degree in computer science, Engineering, or related field; or equivalent work