Linux/Windows Server SME

Linux/Windows Server SME (permanent position)

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are seeking a Linux/Windows Subject Matter Expert (SME) as the primary technical authority responsible for reducing operational risk across our global Windows and Linux estates. This role focuses on translating corporate security policies and regulatory standards into automated configuration baselines, managing platform lifecycles, and directly engineering the remediation of security vulnerabilities.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Meet the Core Infrastructure. We are the backbone of Nordea global technology ecosystem. Our Core Engineering team is a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization.

We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.

Main responsibilities in this role

• Assess and mitigate technical infrastructure risks, including legacy systems, technical debt, unsupported platforms, and operational vulnerabilities.
• Develop and maintain security baselines, manage vulnerability remediation activities, and coordinate critical security patching across Windows and Linux environments.
• Ensure infrastructure compliance with internal policies and regulatory frameworks, while supporting audits and maintaining required technical documentation.
• Automate infrastructure and security processes using tools such as Ansible and PowerShell to improve consistency, efficiency, and scalability.
• Manage infrastructure configurations through Git-based workflows and CI/CD pipelines, ensuring changes are controlled, reviewed, tested, and traceable.
• Monitor and maintain secure, stable, and compliant server environments, proactively identifying and resolving issues.
• Provide expert support for complex operating system, performance, authentication, and security-related incidents, acting as the highest level of technical escalation.
• Collaborate with infrastructure, security, and application teams to implement improvements that enhance reliability, resilience, and operational efficiency.

Desirable technical and soft skills

• 5+ years of experience in systems engineering, infrastructure administration, or platform operations within enterprise environments.
• Strong hands-on experience with Windows Server, Active Directory, Group Policy, and/or Linux administration (RHEL, Ubuntu).
• Experience in infrastructure security, vulnerability remediation, compliance, or operational risk management.
• Knowledge of security frameworks and hardening standards such as CIS Benchmarks, STIGs, or ISO 27001.
• Experience working with vulnerability management tools (e.g., Tenable, Qualys) and implementing remediation plans.
• Proficiency in automation and scripting using Ansible, PowerShell, or similar tools.
• Familiarity with Git, CI/CD pipelines, and Infrastructure or Policy as Code practices.
• Understanding of configuration management and compliance monitoring tools such as Terraform, Puppet, or Chef.
• Experience with logging, monitoring, and SIEM platforms such as Splunk or Microsoft Sentinel.
• Exposure to regulatory and audit frameworks such as ISO 27001, SOC 2, PCI-DSS, or similar standards.
• Experience supporting operating system lifecycle management, upgrades, disaster recovery, and high-availability environments.
• Strong documentation, communication, and stakeholder management skills, with the ability to collaborate effectively across infrastructure, security, audit, and vendor teams.
• Relevant certifications such as CISSP, CISA, CompTIA Security+, RHCE, or Microsoft Certified credentials are a plus but not required.

It would be ideal if you also are

• Proficient in English, spoken and written C1.
• Experienced working for a financial institution.

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions - and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise - in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model - we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

If this sounds like you, get in touch!