Systems Engineer

About Our Company We’re a diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. Our team of 22,000 people across 19 countries, serves more than 3.5 million individual, small business and institutional clients. We are a longstanding leader in financial planning and advice, a global asset manager and an insurer. Our unwavering focus on our clients and strong financial foundation connects each of our unique businesses – Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities. Here, we foster meaningful careers, invest in the future, and make a difference for clients, institutions and communities around the world. Job Description The MFT Platform Administrator is responsible for the day-to-day operations, support, administration, security, and reliability of the enterprise Managed File Transfer (MFT) ecosystem. This role ensures the availability, performance, and operational stability of critical file transfer platforms including IBM Sterling B2B Integrator (MFT Hub), Sterling Control Center, Sterling Connect:Direct, AWS Transfer Family, and AWS Multi-Region Access Point (MRAP) solutions that support secure business-to-business and internal application file transfers. The role operates within an enterprise MFT environment consisting of Sterling B2B Integrator/MFT Hub, Connect:Direct AWS Gateway, and cloud-based file transfer services. Key Responsibilities Provide Level 2/Level 3 operational support for enterprise file transfer platforms and ensure adherence to business SLAs. Monitor and support production file transfer activities, investigate failures, perform root-cause analysis, and drive problem resolution. Administer and support IBM Sterling B2B Integrator, Sterling Control Center, Connect:Direct, AWS Transfer Family, and related MFT technologies. Configure, manage, and troubleshoot secure file transfer protocols including Sterling Connect:Direct, SFTP, FTPS, HTTPS, AS2, and Mailbox Browser Interface (MBI). These protocols are identified as secure transfer methods supporting encryption in transit. Perform daily operational activities including monitoring, alert management, capacity management, patching, health checks, and platform maintenance. Support disaster recovery exercises, resiliency testing, TRR activities, and high-availability initiatives to ensure business continuity. Platform roadmaps include regular TRR activities and resiliency improvements. Manage certificate lifecycle activities including onboarding, deployment, renewal, replacement, revocation, and troubleshooting of TLS/SSL certificates. Administer encryption and security technologies including TLS/SSL, SSH keys, PGP encryption, digital certificates, and data-in-transit protection controls. PGP key lifecycle management and secure transfer protocols are part of the platform's security standards. Coordinate firewall requests, network connectivity troubleshooting, DMZ deployments, proxy configurations, and secure partner onboarding activities. Support internal application teams and external business partners during onboarding, migration, implementation, and production support activities. Partner with Cybersecurity, Infrastructure, Cloud Engineering, Network Engineering, and Application Support teams to resolve incidents and implement secure solutions. Participate in on-call support rotations and provide timely response to critical production incidents. Develop and maintain operational runbooks, support documentation, monitoring standards, and knowledge articles. Drive continuous improvement initiatives focused on automation, self-service capabilities, operational efficiency, and reduction of manual support activities. Platform strategy emphasizes automation, self-service, and simplified customer onboarding. Required Qualifications Bachelor's degree in computer science, Engineering, or related field; or equivalent work experience. 5-7 years of relevant work experience required. 5-7+ years of experience and proven engineering expertise within subject matter domain. Strong experience supporting production-managed file transfer environments. Hands-on expertise with IBM Sterling B2B Integrator and Sterling Control Center administration. Experience supporting Connect:Direct, SFTP, FTPS, HTTPS, AS2, and enterprise B2B integrations. Experience with certificate management, PKI infrastructure, TLS/SSL, SSH, and PGP encryption technologies. Working knowledge of DMZ architectures, firewall policies, network routing, load balancers, DNS, and secure communication patterns. Experience supporting AWS cloud technologies including AWS Transfer Family, S3, and AWS Multi-Region Access Point (MRAP) solutions Preferred Qualifications Customer-focused mindset with strong operational discipline. Ability to perform under pressure during production incidents and critical batch processing windows. Passion for automation, platform reliability, resiliency, and continuous operational improvement. Strong ownership mentality with a focus on platform stability, security, and service excellence. Visa Sponsorship Applicants must have a valid work authorization that does not now, or in the future, require visa sponsorship for employment in the United States (e.g., H-1B, F-1 CPT, F-1 OPT, TN). In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least four (4) days per week, with flexibility to work from home one (1) day per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process. Base Pay Salary The estimated base salary for this role is $114,500 - $157,400 a year. We have a pay-for-performance compensation philosophy. Your initial total compensation may vary based on job-related knowledge, skills, experience, and geographical work location. In addition, most of our roles are eligible for variable pay in the form of bonus, commissions, and/or long-term incentives depending on the role. We also have a competitive and comprehensive benefits program that supports all aspects of your health and well-being, including but not limited to vacation time, sick time, 401(k), and health, dental and life insurances. Full-Time/Part-Time Full time Exempt/Non-Exempt Exempt Job Family Group Technology Line of Business TECH Technology Ameriprise Financial is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, military status, veteran status, genetic information, citizenship, disability status, marital status, family status or any other basis prohibited by law. We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.