Systems Administrator / Engineer, AVP

Who we are looking for

Charles River Development, a State Street Company, is offering the opportunity for a talented hands-on, well-rounded Systems Administrator / Engineer to join the Infrastructure Operations team supporting our Software-as-a-Service platform and APAC client environments. This role suits an experienced mid-level engineer who combines strong Windows and Azure administration skills with disciplined production support, security awareness, automation, and a customer-focused approach.

The successful candidate will help provision, operate, secure, monitor, and continuously improve critical Production, Disaster Recovery, Test, and shared infrastructure services. The role works across Infrastructure, Cloud, Security, Network, Database, Application, and Service Management teams and participates in planned maintenance and incident response activities.

Why this role is important

Reliable infrastructure is fundamental to the availability, security, and performance of services used by our clients. This role strengthens APAC operational coverage, improves service resilience, supports secure client onboarding, and reduces manual effort through standardisation and automation. It also provides a development pathway across cloud engineering, platform operations, observability, privileged access management, and service reliability.

What you will be responsible for

· Administer and support Windows Server infrastructure across production and non-production environments, including Active Directory, Group Policy, DNS, DHCP, DFS, SFTP, SMTP and NTFS permissions, IIS, and related services.

· Operate and support Microsoft Azure infrastructure, including virtual machines, storage, networking, identity, monitoring, backup, recovery, and resource governance within approved standards.

· Provision and integrate client environments, including server builds, customer connectivity, service integration, security configuration, and operational handover.

· Monitor infrastructure health, availability, capacity, performance, and security events; respond to alerts and take timely corrective action.

· Troubleshoot complex incidents across operating systems, cloud services, networks, authentication, certificates, file transfer, job scheduling, and application dependencies.

· Participate in incident, problem, and change management, including service restoration, root cause analysis, corrective actions, audit-ready records, and clear stakeholder updates.

· Perform patching, vulnerability remediation, security hardening, certificate lifecycle activities, and platform maintenance in line with approved change controls.

· Automate repeatable operational tasks using PowerShell and, where appropriate, configuration management or infrastructure-as-code practices.

· Support third-party infrastructure platforms and services such as Citrix, secure file transfer, enterprise job scheduling, monitoring, backup, and web/application servers.

· Write basic SQL queries and perform light database administration or validation tasks when supporting infrastructure and application services.

· Maintain accurate technical documentation, build standards, operational runbooks, support procedures, inventories, and knowledge articles.

· Contribute to capacity planning, lifecycle planning, disaster recovery readiness, resilience testing, and continuous service improvement.

· Collaborate with global teams and vendors, own assigned work through to resolution, and provide effective handover across time zones.

· Participate in an agreed after-hours support and weekend maintenance rotation when required.

CyberArk and privileged access responsibilities

CyberArk experience is preferred but not essential. The role is expected to follow privileged access controls and may support the following business-as-usual activities after training and access approval:

· Use CyberArk securely for approved privileged sessions and credential access, following ticket, approval, least-privilege, and audit requirements.

· Support onboarding and maintenance of privileged accounts and safes using documented processes and authorised workflows.

· Assist with password rotation, account reconciliation, access validation, health checks, operational monitoring, and first-line troubleshooting of privileged access issues.

· Maintain CyberArk-related runbooks and evidence, and coordinate escalations with the PAM or Security team.

What we value

· Ownership and accountability for secure, reliable, and high-quality service delivery.

· Strong analytical troubleshooting and the ability to remain calm and methodical during high-priority incidents.

· A security-first mindset, respect for least privilege, and attention to audit and compliance requirements.

· Clear written and verbal communication with technical teams, service owners, clients, and stakeholders.

· Curiosity, continuous learning, and a practical approach to automation and operational improvement.

· Good judgement, attention to detail, and the ability to prioritise competing operational demands.

· Collaboration, knowledge sharing, and willingness to support engineers across a distributed APAC and global operating model.

Required experience and qualifications

· Approximately 3 to 5 years of experience in systems administration, infrastructure operations, or a similar engineering role supporting medium-to-large enterprise environments.

· Hands-on Windows Server administration experience, including Active Directory, Group Policy, DNS, file services, permissions, and IIS.

· Practical experience administering Microsoft Azure infrastructure and troubleshooting cloud-hosted workloads.

· Experience supporting business-critical production services using structured incident, problem, and change management practices.

· Working knowledge of enterprise networking concepts, including TCP/IP, routing, DNS, firewalls, load balancing, VPNs, and secure connectivity.

· Experience with monitoring, alerting, log analysis, patching, vulnerability remediation, backup, and recovery operations.

· PowerShell scripting capability for administration, reporting, validation, or workflow automation.

· Ability to produce clear technical documentation and communicate operational risks, progress, and outcomes.

· Tertiary qualification in Information Technology, Computer Science, Engineering, or a related discipline, or equivalent relevant industry experience.

Preferred experience

· Experience with Citrix Virtual Apps and Desktops, Citrix Cloud, StoreFront, or Citrix Director.

· Experience with secure file transfer platforms, enterprise workload automation or scheduling tools such as Tidal, AutoSys, or Control-M.

· CyberArk PAM operational or administration experience, including PVWA, CPM, PSM, safes, account onboarding, password rotation, and session controls.

· Knowledge of ITIL practices and service management platforms such as ServiceNow.

· Relevant certifications in Microsoft Azure, Windows Server, CyberArk, Citrix, ITIL, or information security.

Working arrangements

· Based in Melbourne and aligned to APAC client and operational coverage.

· Hybrid or office attendance requirements will follow company policy and the needs of the team.

· Work hours may occasionally vary to support planned changes, major incidents, regional handovers, or global stakeholders.

· Participation in an agreed weekend maintenance and after-hours support rotation when require.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, fle