• Design, operate, and support AWS-based infrastructure across a multi-account environment, with a focus on reliability, scalability, and operational clarity • Support and evolve our EKS/Kubernetes platform — clusters, underlying AWS infrastructure, networking integrations, and shared platform components • Contribute to and maintain Terraform-based Infrastructure as Code, including shared modules and production repositories • Work across DNS, DHCP, routing, load balancing, and WAF technologies (Imperva primary; broad understanding of AWS ALB/NLB) to support application traffic and secure access patterns • Participate in Active Directory architecture, administration, and integration with cloud and platform services • Share ownership of SSL/TLS certificate lifecycle management — a core responsibility of the Infrastructure Operations group • Build automation and tooling in Bash, PowerShell, or similar to streamline provisioning, configuration, and operational workflows • Leverage AI-assisted tools to accelerate troubleshooting, draft and improve runbooks, and reduce repetitive operational overhead — with a practical focus on where AI adds real value in day-to-day infrastructure work • Collaborate with application, security, and network teams using GitOps-style workflows (GitHub, CI pipelines, change review) • Participate in a rotational on-call schedule and CAB reviews for significant infrastructure changes • Drive new architecture, expansion, and modernization efforts alongside ownership of existing systems

• Design, implement, and manage cloud infrastructure primarily within AWS • Lead the implementation and maintenance of infrastructure using Terraform or similar tools • Develop and maintain automation scripts (Python, Bash, or Go) • Manage and optimize containerized application environments using Docker and orchestration platforms • Design and support CI/CD pipelines • Implement and manage modern observability frameworks • Monitor system capacity and performance • Enforce infrastructure security best practices • Partner with leadership to monitor cloud spend • Troubleshoot complex infrastructure-related issues • Maintain high-quality technical documentation

Role Description As Senior Windows Infrastructure Engineer, you are the technical anchor for the Windows estate that powers Gresham's managed services platform — a multi-client environment hosted on AWS. The work is grounded in deep Windows Server operations: - Active Directory - IIS - Hybrid identity - Group Policy - PowerShell - Certificate services - The wider Microsoft ecosystem AWS is the platform on which all of this runs. Comfort with the cloud layer matters and you will operate it daily, but it is the Microsoft stack — and its operational nuance — that defines this role. We hire for deep Windows expertise first; the cloud layer is something a strong sysadmin can absorb. The estate is Windows Server 2019 and above, end-to-end. Linux footprint is negligible — this is a role for someone who wants to go deep on the Microsoft stack rather than be spread thin across platforms. This is a 100% individual contributor role. You will not manage or lead a team. You will own complex incidents end-to-end, set technical standards by example, and act as the senior escalation point for the Cloud Support function. Qualifications - 7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above. - Active Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites & services, schema, tombstone & recovery. - Group Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering. - IIS at depth: site & app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning. - DNS, DHCP, WSUS, and Active Directory Certificate Services (AD CS) — real operational experience. - Advanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity. - Windows patching at scale: planning, deployment, rollback, and troubleshooting in regulated environments. - Windows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics. - Hybrid identity: AD on-prem ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS. - SAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP, MFA — practical implementation and troubleshooting. - Certificate management and PKI in enterprise Windows environments. - Day-to-day comfort operating Windows workloads in AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch. - AWS Systems Manager for Windows fleet management: Patch Manager, Session Manager, Run Command, State Manager, Parameter Store. - AWS Directory Service / Managed Microsoft AD / AD Connector. Requirements - Strong ITIL grounding: incident, problem, change, and service lifecycle management. - Prior experience in an MSP or shared-services environment — multiple client estates managed under SLA. - Advanced / fluent professional English, written and spoken. - Reliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power, and a professional video setup. - Ability to work New York-aligned hours consistently, with the same presence and responsiveness as an office-based colleague. Benefits - This role is 100% remote and 100% individual contributor. - You will operate aligned to New York business hours (08:30–17:30 ET). - Typical Brazil hours: 09:30–18:30 BRT during EDT (US summer) and 10:30–19:30 BRT during EST (US winter). - Quiet, ergonomic workspace with stable broadband (100 Mbps+ recommended), reliable power, and a professional video / audio setup. - Participation in a senior escalation rota for major incidents — compensated in line with policy. Equal Opportunities Statement At Gresham, we are committed to building a diverse and inclusive workforce that reflects the communities we serve. We actively encourage applications from individuals of all backgrounds and are dedicated to providing a workplace where everyone feels valued, respected and supported. We make employment decisions based on merit, skills and potential, and do not discriminate based on any protected characteristic. We are also committed to making reasonable adjustments throughout the recruitment process and employment lifecycle.

DevSecOps needed. SRE? Platform Engineer? Whatever you call it, we need you. About JTX JTX is Jito Labs' consumer trading product — a high-performance trading terminal built on Solana. We're a lean, high-output team building something that sits at the intersection of execution quality, user experience, and on-chain infrastructure. We own a meaningful portion of Solana's block production, and JTX is how we bring that edge directly to traders. The Role This is a high-ownership IC role. The stack is designed. Now it needs someone who can own it, harden it, automate it, and make sure it stays up while traders are trading. You will be running globally distributed infra and you'll be the person who cares most about it (this is an extremely high ownership role). You'll work directly with engineering leadership. No ticketing system standing between you and a decision. If something is broken, it's your problem. If something can be automated, you'll automate it. If something is insecure, you'll fix it before anyone notices. Get shit done!