Head of Systems

Calamatta Cuschieri Moneybase plc is a privately held Fintech Group with a rich history dating back to 1971. The company operates across Investment Services, Fund Administration, Online Investing, and Payments, combining strong governance and ethics with cutting-edge technology and top industry professionals. With over 210 employees from more than 27 countries and managing assets exceeding 3 billion, the Group is rapidly evolving while maintaining its commitment to excellent client service.

The Head of Systems will oversee the entire infrastructure of CC Moneybase, including cloud environments, on-premises systems, networks, and corporate IT. This role requires both strategic leadership and hands-on involvement, guiding the Systems team and resolving complex technical issues. The successful candidate will ensure infrastructure reliability, security, and resilience while collaborating closely with Information Security and other technology teams to drive modernization, automation, and continuous improvement in support of business growth.

Key Responsibilities

Leadership and Ownership
- Develop and execute the infrastructure roadmap in alignment with the CEO, focusing on modernization, automation, resilience, and cost management.
- Manage the infrastructure budget, licenses, and vendor relationships, ensuring cost-effective operations.
- Lead, mentor, and develop the IT Systems Manager and systems engineers, addressing skills gaps.
- Foster a culture of ownership with clear system accountability, documentation, and runbooks.
- Serve as the senior technical escalation point for complex incidents and lead post-incident root cause analyses.

Cloud: Microsoft Azure
- Manage and optimize the Azure environment, including virtual machines, networking, storage, identity (Entra ID), and governance.
- Implement cost optimization strategies such as right-sizing and reservations, with monthly reporting.

On-Premises and Virtualization
- Oversee VMware vSphere, ESXi, and vCenter environments, including VM management, patching, and upgrades.
- Manage physical servers, virtualization hosts, and storage platforms throughout their lifecycle.
- Ensure seamless hybrid connectivity and operations between on-premises infrastructure and Azure.

Linux and Server Administration
- Maintain and secure Linux servers across cloud and on-premises, including patching, hardening, troubleshooting, and performance tuning.

Corporate IT and End-User Services
- Own the corporate IT environment, setting standards for secure, reliable, and well-managed IT services.
- Oversee end-user computing, device management, software deployment, patching, and endpoint configuration.
- Manage identity and access processes, including user provisioning, access controls, MFA, and joiner/mover/leaver workflows.
- Define endpoint management standards using Microsoft Intune, Microsoft 365, and Entra ID.
- Align corporate IT security controls with Information Security policies.
- Supervise IT support delivery, service levels, escalation management, and continuous improvement.
- Control IT assets, software licensing, suppliers, and lifecycle planning to optimize costs.
- Drive standardization and automation of IT processes to enhance efficiency and scalability.
- Maintain up-to-date technical documentation, operational procedures, access controls, and business continuity plans.
- Set performance expectations, review operational risks, and guide corporate IT improvements.

Resilience and Disaster Recovery
- Own infrastructure availability, backup, and disaster recovery processes, including scheduled recovery testing.
- Deliver infrastructure security controls and operational resilience evidence in collaboration with Risk, Compliance, and Information Security teams.

Automation and Infrastructure as Code
- Implement provisioning and configuration as code using Terraform, Ansible, or equivalents across cloud and on-premises.
- Automate routine operational tasks to reduce manual effort and configuration drift.

AI-Assisted Security and Monitoring
- Evaluate and deploy AI-driven tools for continuous configuration checks and vulnerability detection across Azure, VMware, Linux, Windows, and network environments.
- Leverage AI and machine learning in SIEM, EDR, and monitoring platforms to enhance anomaly detection and incident response.

Required Qualifications
- Minimum 8 years in infrastructure or systems engineering, with at least 3 years in a leadership role.
- Extensive hands-on experience with Microsoft Azure (compute, networking, storage, Entra ID, governance, cost management).
- Strong expertise in VMware vSphere, ESXi, and vCenter in production environments.
- Proficient Linux administration skills and working knowledge of Windows Server.
- Experience with Fortinet FortiGate or similar next-generation firewalls and high-availability load balancers.
- Practical experience with Infrastructure as Code in production.
- Familiarity with Cloudflare or comparable edge, DNS, and WAF platforms.
- Proven track record in designing and testing backup and disaster recovery solutions.
- Experience managing corporate IT and end-user services, including Microsoft Intune, Microsoft 365, Entra ID, and identity lifecycle processes.
- Ability to communicate technical risks and trade-offs effectively to non-technical leadership.

Preferred Qualifications and Benefits
- Experience in financial services, payments, or other regulated industries.
- Hands-on experience with SIEM and EDR platforms, including AI and anomaly detection features.
- Relevant certifications such as Azure Administrator, Solutions Architect, VCP, or Fortinet NSE are advantageous but not mandatory.

What We Offer
- Ongoing internal training and study leave.
- Sponsorship schemes for further education.
- Clear opportunities for career advancement.
- Variable bonus linked to key performance indicators.

Our core values emphasize innovation, integrity, accountability, collaboration, and respect, fostering a dynamic and supportive work environment where every voice is valued.