Staff Systems Administrator

The Team : The MyVest Client Delivery group is empowered to design, deploy, support, and scale secure, high-quality, optimally-configured client implementations and internal MyVest systems with superior customer service.

As an integral part of that group, the MyVest Information Technology team is responsible for design, setup, and administration of all network, hardware, and office infrastructure.

The Opportunity :

• Join a team creating the next generation of wealth management software
• Lead our systems / network administration working with both legacy on-prem clients, and our modern cloud infrastructure
• Oversee technical design, planning, implementation, and the highest level of performance tuning and recovery procedures for mission critical enterprise systems
• Ensure high availability, security, and backup of all production platforms
• Serve as a technical expert and advisor in the area of system administration for complex operating systems
• Troubleshoot and resolve any system issues as they occur
• Manage the execution of our OS hardening, patching, and security scanning programs
• Maintain and extend our system monitoring platform
• Partner with leadership to outline IT operational best practices
• Maintain up to date documentation of all configuration items
• Work closely with Cybersecurity to lead external audit compliance
• Work with a variety of new technologies with opportunity to learn and expand your areas of expertise

About You :

• Enjoy working in a fast paced environment with changing needs and requirements
• Self-motivated with a strong sense of ownership
• Service-minded and organized thinker with strong communication and customer service skills
• Able to plan, organize and document complex, detailed system design projects and to configure systems to be consistent with institutional policies / procedures
• Team-player who is willing to assist with emerging problems quickly and proactively, and who responds to emergency situations calmly and effectively
• Learns quickly and tackle new technologies and projects with courage and tenacity
• Available to work during non-regular office hours in order to support a 24 / 7 production environment

Ideal Experience (Don't worry, we don't expect you to have everything on this list, but the more the merrier! ) :

• Deep experience and expertise building scalable and highly available complex infrastructure systems and application architectures for both on-premise and cloud-based services
• Expert-Level Linux administration skills
• Deep experience with Windows server (2012 / 2019) or equivalent
• Extensive hands-on experience in AWS infrastructure and services including but not limited to EC2, IAM,VPC, S3, ELB, EBS, RDS, Route 53, CloudFront, CloudWatch, CloudTrail, etc
• Demonstrated ability to establish IT best practices around OS hardening, patching, and security scanning
• Design and implementation of IAM policies / technologies including Active Directory, Active Directory Federation Services (ADFS), SAML, web Single Sign-on (SSO), Auth0 and related authentication technologies, BeyondTrust
• Hands on work with cloud provisioning automation (Terraform, Ansible, CloudFormation, etc)
• Familiar with Cisco network equipment
• Familiar with on-prem storage, such as NetApp, etc

Nice to have :

• Understanding of network protocols, troubleshooting, and administration (basic TCP / IP, UDP, SNMP, SMTP, LDAP, DHCP, and DNS, NFS)
• Able to contribute to network administration including but not limited to DNS, VPCs, Subnets, Load balancing, API Gateway, Reverse Proxies, etc)
• Scripting skills in languages such as PERL, Bash, Python, etc
• Experience with access logging, centralized logging, and monitoring tools such as ELK, InfluxData, Grafana, Splunk, AlertLogic, etc
• Implementation experience in the use of optimization, automation, and containerization tools such as Kubernetes, EKS, Docker, Terraform in an on-premise and / or public cloud environment
• Experience with enterprise-grade storage devices and hypervisors (NetApp, TinTri, XenServer, and / or VMware)
• Experience managing Active Directory
• Hands-on experience with security configuration (Encryption, KMS, IAM, SSL / TLS, WAF, Security Groups, NACLs, etc)

Location :

While MyVest is in a hybrid (office and work-from-home) work model, this role is required to be in the office frequently.

MyVest will fill this position in the San Francisco Bay Area only.

Compensation and Benefits

• Base salary for this role will be between $165,000 to $185,000. Placement in this range depends upon a variety of factors including prior relevant experience and skill set.
• The range listed above is just one component of MyVest's total compensation package for employees. Other compensation includes an annual bonus, long-term incentives, and program-specific stipends.

In addition, MyVest provides a variety of rich benefits and programs dedicated to your career growth, physical, mental and financial wellness, and work / life balance :

• Generous coverage of medical, dental and vision insurance premiums for you AND your family
• Annual professional development stipend
• 401(k) match
• 10 weeks paid parental leave
• Flexible time off
• Subsidized financial wellness program
• Multiple mental health programs
• Professional coaching program
• Volunteer time off
• Robust corporate matching program
• Monthly wellness dollars
• Tons of perks

About MyVest MyVest is a growing fintech company building enterprise SaaS platforms for financial institutions. We’re on a mission to secure the financial future of more families by enabling their advisors to provide personalized wealth management at scale.

We’re looking for curious, collaborative people to join us at our bright, open headquarters in the heart of San Francisco’s financial district, and at our satellite offices in Austin and Philadelphia.

MyVestors get the best of both worlds : the innovative, casual culture of a startup with the stability and resources of a parent company (we’re owned by TIAA).

MyVest is an equal employment opportunity (EEO) employer, dedicated to maintaining a work environment free of bias, harassment, discrimination and retaliation.

As an EEO employer, this organization expressly prohibits discrimination, harassment, and retaliation on the basis of race, creed, ethnicity, color, age, religion, sex, sex stereotype, pregnancy (including childbirth, breastfeeding or related medical conditions where applicable), sexual orientation, gender, gender identity, gender expression, transgender, marital status, national origin, ancestry, physical or mental disability, requesting a reasonable accommodation based on mental or physical disability, medical condition (as defined by applicable law), genetic history and information, citizenship status, military or veteran status, or any other status protected by federal, state, or local law or ordinance or regulation (collectively referred to here as protected characteristics ). Review policy.