Infrastructure Engineer
5 days ago
Irvine
Job Description Infrastructure Engineer Location: Irvine, CA Job Type: Full Time | Non-Exempt | Remote/Hybrid Eligible Salary Range: $155,000 – $160,000 per year About Commercial Bank of California Commercial Bank of California (CBC) is the largest Latino-owned bank in California and a certified Minority Depository Institution (MDI). Headquartered in Irvine and founded in 2003, CBC is one of the largest privately held banks in the state, with over $3.5 billion in assets as of December 2024. We are a purpose-driven financial institution committed to building long-term relationships and delivering innovative, personalized banking solutions. Our leadership reflects the diverse communities we serve, and our mission is rooted in empowering entrepreneurs, business owners, and community leaders to thrive. As a certified MDI, CBC is proud to play a vital role in advancing financial inclusion and economic opportunity. We believe in a higher vision for banking—one that prioritizes trust, collaboration, and community impact. Join us and be part of a team that’s redefining what it means to be a community-focused, relationship-driven bank that puts people over profits. Job Summary We are looking for a knowledgeable and proactive Infrastructure Engineer to architect, implement, and maintain both on-premise and cloud-based infrastructure systems in alignment with FFIEC guidelines. This role plays a vital part in ensuring the security, reliability, and performance of our enterprise network. The Infrastructure Engineer will be responsible for maximizing uptime across all applications, network services, and servers, while also maintaining existing systems, scripts, and applications in a stable, efficient, and secure manner. Success in this role requires a strong understanding of infrastructure best practices and a commitment to operational excellence. Essential Duties and Responsibilities • Design and implement secure, scalable network infrastructure., • Maintain network architecture aligned with Zero Trust principles., • Ensure infrastructure goals support broader organizational objectives., • Manage firewalls, including upgrades and configuration., • Oversee SOCaaS operations, including IP whitelisting and blacklisting., • Administer switches, access points, server rooms, and MDFs., • Maintain and manage IaaS and PaaS environments., • Support and manage email systems, databases, and SaaS applications., • Administer identity systems including Active Directory and Azure AD., • Ensure robust backup and recovery processes., • Manage Zscaler ZPA/ZIA solutions for secure access and internet security., • Maintain VOIP systems and ensure reliable communication infrastructure., • Perform vulnerability assessments, patching, and remediation., • Participate in PCI audits and ensure compliance with security standards., • Monitor internet and network performance for optimal uptime., • Configure and maintain Windows servers., • Contribute to cloud migration planning and execution., • Monitor on-premises and cloud systems for performance and reliability., • Develop scripts to enhance operational efficiency and support end-users., • Onboard new users to data center resources, providing documentation and training., • Provide server-level support and ensure licensing compliance., • Manage hardware and software lifecycles., • Adhere to FFIEC guidelines for infrastructure and operations., • Step in to support departmental functions during staff absences or peak workloads., • Foster a respectful, ethical, and inclusive workplace aligned with organizational values., • Promote diversity and uphold Equal Employment Opportunity (EEO) policies., • Ensure compliance with all bank policies, procedures, and applicable regulations, including BSA and AML., • Maintain a safe working environment in accordance with OSHA standards. These specifications are general guidelines based on the minimum experience normally considered essential to the satisfactory performance of this position. The requirements listed below are representative of the knowledge, skill and/or ability required to perform the position in a satisfactory manner. Individual abilities may result in some deviation from these guidelines. QUALIFICATIONS: • Minimum 5 years of hands-on experience in infrastructure engineering, • Proven expertise with Fortinet firewalls (FortiGate, FortiManager, FortiAnalyzer), Fortinet SD-WAN, Fortinet switches, FortiAP, • Experience with Zscaler ZPA/ZIA management, • Familiarity with SOCaaS platforms and SIEM tools (e.g., Splunk, Sentinel, LogRhythm), • Proficiency in network monitoring tools (e.g., Datadog, PagerDuty), • Solid understanding of TCP/IP, DNS, VPNs, and routing protocols, • Experience with vulnerability scanning tools (e.g., Qualys) and patch management, • Knowledge of ITIL or other service management frameworks is a plus, • Excellent troubleshooting, documentation, and communication skills, • Strong interpersonal and communication skills, • Assertiveness balanced with patience, diplomacy, and empathy, • Professional communication in person, by phone, and via email, • Well-organized and self-motivated; able to manage priorities and meet deadlines, • Good judgment and discretion in applying and interpreting bank and department policies and procedures, • Problem-solving in ambiguous situations using past experience, • Being a dependable and responsible team player, • Competitive employer contribution to medical, dental and vision coverage, • 401k plan with employer match, • Flexible Spending Accounts (FSA) and Dependent Care Accounts, • Employee Assistance Program (EAP), • Employer provided Calm subscription, • Employer provided mental health benefits through Teladoc, • Life, AD&D and disability insurance, • Minimum 15 Days of Vacation, 11 Paid Federal Holidays, Paid Time off to Volunteer, • Online discount program Commercial Bank of California is proud to be an Equal Employment Opportunity employer. We are committed to creating an inclusive environment for all employees and applicants. All qualified individuals will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, protected veteran status, or any other legally protected characteristic. We evaluate applicants fairly and equitably, including those with criminal histories, in accordance with applicable federal, state, and local laws. Commercial Bank of California is also committed to providing reasonable accommodations to individuals with disabilities. If you require a reasonable accommodation during the application or interview process, please contact us at with the nature of your request and your contact information. Recruitment Policy Commercial Bank of California does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to CBC, either directly or indirectly, will be considered the property of Commercial Bank of California. We will not pay a fee for any placement resulting from the receipt of an unsolicited resume. To submit candidates for consideration, recruiting agencies must have a valid, written, and fully executed agreement with Commercial Bank of California. Without such an agreement in place, no agency submissions will be accepted or compensated.