Information Technology Systems Engineer

Department: Information Technology

FLSA Status: Exempt

Reports to: Vice President & Deputy Director of Information Technology

Information Technology Systems Engineer at Chain Bridge Bank, N.A.

The Information Technology Systems Engineer will play a critical role in advancing the Bank’s infrastructure, enhancing its security posture, and modernizing its core technology environment. We are seeking a senior engineer who brings deep technical expertise, sound judgment, and a strong sense of ownership to a role with significant business impact. This is not a ticket-queue role. This is a high-visibility, high-autonomy opportunity for someone who thrives on solving complex problems and driving meaningful results. You will work closely with IT leadership and senior leaders across the Bank who value technical expertise and are committed to investing in the people who bring it.

Compensation

Compensation will be commensurate with experience and qualifications. This role is eligible to participate in the Bank's annual incentive compensation plan, under which employees may earn a cash bonus based on the performance of the Company and the team, with an emphasis on financial results and risk management. Plan terms, eligibility, and payout amounts are determined at the sole discretion of the Bank and are subject to change. This is a hybrid position, with a requirement to be in the office at least three days per week in McLean, Virginia.

Benefits

Chain Bridge offers a professional benefits package consistent with a regulated banking environment, including:

• Competitive base salary
• Comprehensive health benefits (medical, dental, and vision)
• 401(k) retirement plan with employer contribution
• Paid time off, including vacation, holidays, and sick leave
• Annual incentive compensation plan
• Professional development opportunities relevant to the role and the Bank's operating environment

Responsibilities

Infrastructure

• Design, administer, and continuously improve our Windows Server, Microsoft Azure, and Microsoft 365 environments.
• Manage identity, access, and security controls through Microsoft Entra ID, Conditional Access, MFA, and least-privilege architecture.
• Lead endpoint and server management using Intune, Defender, patching pipelines, and monitoring tools.
• Drive system hardening, vulnerability remediation, and security configuration in line with regulatory standards.

Network Operations

• Administer and support firewalls, switches, routers, VPNs, and WAN connectivity.
• Maintain DNS, DHCP, routing, switching, and secure remote access solutions.
• Monitor network performance and security; respond decisively to alerts and incidents.
• Partner with MSPs and ISPs to resolve escalated issues and hold vendors accountable.

Support

• Support and administer Jack Henry platforms and their integrations with upstream and downstream systems.
• Coordinate with Jack Henry support and third-party vendors on troubleshooting, upgrades, and continuity.
• Serve as the technical bridge between core banking operations and the infrastructure that supports them.
• Be the Tier III escalation point — the person the team calls when an incident is complex, high-impact, or just plain stubborn.
• Mentor Tier I and II staff through knowledge transfer, documentation, and hands-on guidance.
• Contribute to IT standards, architectural decisions, and the long-term technology roadmap.
• Participate in on-call rotations and incident response as needed.

Other Duties:

• Ensure systems and networks meet internal policies, cybersecurity standards, and regulatory requirements.
• Maintain sharp technical documentation, network diagrams, and configuration records.
• Support audits, exams, and risk assessments with confidence and clarity.
• Play an active role in disaster recovery, business continuity planning, and resilience testing.
• This position may require occasional after-hours or weekend work for maintenance windows or incident response. We respect employees’ time and strive to plan whenever possible.

Qualifications

Required

• 5+ years of progressive experience in systems and/or network administration.
• Deep hands-on experience with Microsoft Windows Server, Azure, and Microsoft 365.
• Strong command of Entra ID, Intune, Conditional Access, and endpoint security.
• Solid network fundamentals: DNS, DHCP, VPN, routing, switching, firewalls.
• Experience supporting Jack Henry banking systems or similar core financial platforms.
• The ability to troubleshoot complex, multi-system issues independently — and see them through to resolution.
• Strong documentation and communication skills, with the ability to explain technical concepts clearly to non-technical employees and directors.

Preferred

• Experience in banking or another regulated financial environment.
• Familiarity with FFIEC, GLBA, and cybersecurity control frameworks.
• Experience collaborating with managed service providers and cloud vendors.
• Relevant certifications: Microsoft Azure Administrator, Windows Server Hybrid Administrator, CompTIA Network+/Security+, CISSP, CCNA, or equivalent.
• A bachelor's degree in IT, Computer Science, or a related field, or equivalent experience.

Compliance

It is understood that complying with all applicable safety and soundness and consumer compliance laws and regulations, taking the annually required consumer compliance courses, and adhering to the policies and procedures that facilitate compliance will all be factors considered when evaluating individual performance. Individual performance is rewarded in annual salary adjustments. Bank compliance with laws and regulations is a factor considered in the calculation of incentive compensation. The ratings that the Bank receives from its regulators and its auditors are factored into the annual incentive compensation calculation.

Your adherence to these laws and regulations and the policies and procedures that support them directly affects the Bank's compliance. Annual incentive compensation rewards team performance. An employee will not be eligible for incentive compensation unless he/she takes the consumer compliance courses required of all employees and all the required consumer compliance courses for his/her job description or job responsibilities by the end of each calendar year. All required consumer compliance courses for the applicable year will be outlined in the Compliance Management Program.

About Company

Chain Bridge Bank, N.A. ("Chain Bridge" or the "Bank") is a nationally chartered bank regulated by the Office of the Comptroller of the Currency and a wholly owned subsidiary of Chain Bridge Bancorp, Inc., a Delaware corporation and registered bank holding company. Chain Bridge Bancorp, Inc.'s Class A common stock is listed on the New York Stock Exchange under the ticker symbol "CBNA."

The Bank provides commercial banking and trust and wealth management services to clients nationwide through a technology-enabled operating model. As a regulated financial institution, the Bank places a premium on accuracy, clarity, and disciplined execution in all public-facing systems and communications.