Financial Infrastructure · DevOps · Boston

Engineering inside
financial services.

Ten years across private equity, retail, and asset management. Real technical experience covering infrastructure, cloud, security, and trading systems. Written plainly to help other engineers navigate this world.

Michael Harlow
Michael Harlow // sys.ghost  ·  Boston, MA
☕ Buy me a coffee
Latest post
Every engineering org I talk to is running AI agents somewhere in production now. Almost none of them have figured out how to operate them the way we operate everything else that touches customer data.
Jul 14, 2026 · 11 min read
Read →
Latest post
Every engineering org I talk to is running AI agents somewhere in production now. Almost none of them have figured out how to operate them the way we operate everything else that touches customer data.
Jul 14, 2026 · 11 min read
Read →
All posts

Archive

We scheduled a Technology Connect event for our engineering team and built a lineup of games around AI and infrastructure topics. Here's how we put it together and what I'd do differently.
← Back to posts
Personal Jan 22, 2026 · 8 min read

What Ten Years in Financial Services Technology Actually Looks Like

What Ten Years in Financial Services Technology Actually Looks Like

People sometimes ask how I ended up in asset management infrastructure. The honest answer is that I did not plan it. I planned to be a systems administrator, which I was, and then a sequence of opportunities appeared and I kept choosing the most interesting one. Looking back, there is a coherent arc. At the time it mostly felt like following my curiosity.

Here is the actual path, with the parts that are usually left out of career summaries.

2013 to 2015: data centers and physical infrastructure

My first job out of university was infrastructure engineering at a mid-sized technology company in the Boston area. I spent a meaningful chunk of the first two years in data centers. Racking servers, running cable, labeling everything, learning the physical reality of the systems that most people only ever interact with through a browser.

The work was unglamorous by any measure. But it gave me something that I have drawn on continuously since: an understanding of the physical layer. How data actually moves. What latency means when it is determined by physics rather than code. What a network looks like when something at layer one or two is broken and the symptoms appear at layer seven.

A specific thing I learned in those years: unlabeled cables are a promise that someone else will suffer later. In a large enough environment, that someone is usually you, six months from now, in a hurry. I still label everything.

I also learned what an incident looks like in an environment where the consequences of downtime are modest. The applications we were supporting were internal tools and developer infrastructure. When something broke, people were frustrated. Nobody lost money. The stakes were low enough that you could afford to learn from mistakes in real time. I made a lot of mistakes in those two years and learned from most of them, which is the correct order of operations early in a career.

2015 to 2018: retail technology, scale, and real-time systems

My move into retail technology was motivated partly by salary and partly by wanting to work on systems that more people depended on. Retail at scale is a surprisingly demanding infrastructure environment. Millions of transactions per day. Inventory that has to be consistent across hundreds of locations simultaneously. Promotional pricing that changes dynamically and has to apply correctly everywhere at once.

The first thing retail taught me was what real-time actually means in a production context. In development, real-time is a vague aspiration. In retail with a large online and physical footprint, it is a specific requirement with measurable consequences when it fails. If inventory data is wrong by even a few minutes, customers order things that do not exist and the downstream problems multiply quickly through fulfillment, customer service, and supplier relationships.

The second thing it taught me was what system failure looks like at scale. Consumer-facing outages in retail are public and immediate. You know something is broken because the volume of incoming support tickets changes visibly in the dashboard and the phones start ringing. That visibility creates a discipline. You either build reliable things or you face the consequences in a form that is impossible to ignore. There is no hiding behind "the system is mostly working."

I ran my first significant incident during peak season in retail and it was formative in a way I could not have manufactured in a lower-stakes environment. The specifics of what broke are less important than the experience of coordinating a response in real time, communicating with a business that is actively losing money, and making decisions with incomplete information on a timeline that does not allow you to wait for certainty. Every subsequent incident I have managed has drawn on that one.

2018 to 2022: private equity, data quality as a first principle

The move to private equity was the biggest context shift of my career. The transaction volumes went from millions of events per day to hundreds. The data was not streaming -- it was structured, periodic, and often manually entered. By every quantitative measure it was a smaller engineering problem.

By every consequential measure it was a larger one.

Private equity infrastructure exists to support investment decisions and investor reporting for funds that manage hundreds of millions or billions of dollars. A wrong number in a portfolio monitoring report does not cause an immediate visible incident. It causes a question in a partner meeting six weeks later, by which point reconstructing what happened requires imperfect records and careful forensics. The consequence of a data quality failure is not a spike in the support ticket volume. It is a conversation that damages trust in the data team, which is extraordinarily difficult to rebuild.

I became, in PE, obsessive about data provenance in a way I had not been before. Where did this number come from? What was the calculation method? When was the source data last updated? Is this an actual value or an estimate? Is the estimate methodology documented? These questions sound administrative. Making a system that answers them reliably, consistently, and in a form that a CFO or a limited partner can interrogate is a serious engineering problem.

I also learned something in PE that I would not have learned elsewhere: how technology looks from the investment side of a financial firm. I spent enough time with deal teams to understand how investment decisions are actually made, what data inputs matter and at what stage, and what the cost of bad data is in terms that are not abstractions. That understanding changed how I approached infrastructure decisions in a way that technical training alone would not have.

2022 to present: asset management, operational pressure and regulatory reality

Asset management is where the three previous environments converge. The data discipline of private equity. The real-time operational pressure of retail. The infrastructure depth of my early years, now applied to trading systems and investment operations.

The specific thing that distinguishes asset management from the other environments is the non-negotiability of the operating window. Markets open at a specific time. Regulatory reporting has specific deadlines. Counterparty confirmation cutoffs are not flexible. In retail, if the inventory system is degraded at 10pm, you deal with it and the day-over-day impact is limited. In asset management, if the order management system is degraded at 9:25am, you have a problem that is measured in regulatory exposure and client impact simultaneously.

This creates an engineering culture that takes reliability seriously in ways that are different from other industries. Change management is rigorous. Incident response is practiced. Runbooks are maintained because the cost of not having them is too high.

I have also found, working in this environment, that the regulatory dimension shapes technical decisions at every level. Not just security and compliance controls, but architecture choices, data retention, audit logging, vendor selection. Understanding why these requirements exist -- not just that they exist -- makes you a fundamentally different engineer in this context. Most engineers working in regulated industries comply with requirements without understanding their purpose. The ones who understand the purpose make better decisions when the requirement does not perfectly fit the situation.

What I would tell someone starting this path

The most useful thing I can say is this: learn the business of whatever industry you are working in. Not at a surface level. Deeply enough that you understand why the technology matters to the people using it.

I spent my first two years in financial services understanding the systems without understanding trading. I could trace exactly what happened technically when an order left our infrastructure. I could not tell you what happened to it after that or why it mattered. Closing that gap took deliberate effort and it changed how I work in ways that are difficult to fully quantify.

The technology is the how. The business is the why. Both matter, and the why is usually harder to learn because nobody teaches it to engineers directly. You have to go looking for it. Have conversations with people outside your team. Ask questions that make you feel underqualified. Read the firm's regulatory filings and investor materials. The engineers who do this consistently end up in different conversations than the ones who stay in the technical lane.

The other thing I would say is that the unglamorous early work is not a phase to get through. The years in the data center, the tedious incident response, the careful debugging of a system that is behaving strangely in production -- this is where judgment is built. The senior engineers I have respected most in this industry are the ones who still care about the details, not the ones who have figured out how to work at a level of abstraction that lets them ignore them.

The details are where the interesting problems live. Stay close to them.

Found this useful?
☕ Buy Michael a Coffee
← More posts

Hey, I'm Michael Harlow.

Senior Systems Engineer · Boston, MA · Writing as sys.ghost

I have spent over a decade building and maintaining infrastructure at the intersection of technology and financial services. My career has taken me through three distinct sectors -- technology, private equity, and asset management -- and each one changed how I think about what reliable infrastructure actually requires.

I started in general IT, which is where most engineers who did not go straight into software end up. Data centers, networking, on-call rotations, learning to label cables properly because unlabeled cables are a promise that someone else will suffer later. The work taught me that almost every sophisticated system is, one layer down, a collection of unglamorous fundamentals that either hold or do not. I still believe that. I still label everything.

Private equity came next, and it was a different world. The infrastructure stakes there are less about uptime and more about data integrity. When deal teams are making acquisition decisions based on data you are responsible for, and when a due diligence process has a hard deadline that does not move regardless of what broke overnight, your relationship with reliability changes. A wrong number in an LP report does not cause an immediate incident. It causes a conversation in a partner meeting six weeks later, and by then you need to reconstruct what happened from imperfect records. I became obsessive about data provenance in PE and I have not stopped.

For the past several years I have been in asset management, supporting trading and investment operations infrastructure. This is the environment I find most technically interesting. The compliance requirements are demanding, the legacy systems have long institutional memories, and the tolerance for operational errors is genuinely low -- not just in terms of business impact, but in terms of regulatory consequence. When markets are open, there is no fixing it after the weekend.

I started Packet & Profit in January 2026 because I kept looking for the kind of writing I wanted to read and finding it mostly did not exist. There is a lot of content for engineers online. There is much less written by engineers working specifically inside regulated financial services firms, being honest about what that actually involves day to day. The compliance conversations, the legacy constraints, the incident management in front of stakeholders who measure downtime in dollars per minute. That is what I write about here.

Outside of work I have been running a Saturday morning robotics course at my local YMCA for kids aged 10 to 14. It is one of the better decisions I have made.

Certifications

Red Hat Certified Engineer (RHCE)
Certified Kubernetes Administrator (CKA)
AWS Solutions Architect -- Associate
CompTIA Security+
HashiCorp Vault Associate

My Stack

RHEL / Ubuntu
Kubernetes
OpenShift
Terraform
Ansible
Prometheus
Grafana
Python / Bash
AWS / Azure
Cisco / Palo Alto
PostgreSQL
Redis
HashiCorp Vault
Fluent Bit
Helm
ArgoCD

Career

2022 -- Present
Senior Systems Engineer, Asset Management -- Boston, MA
Leading infrastructure for trading operations and investment management systems. Responsibilities span network security, cloud migration strategy, Kubernetes platform engineering, and incident response. Deeply involved in T+1 settlement infrastructure work and the shift from overnight batch processing to near-real-time event-driven architecture.
2018 -- 2022
Systems Engineer, Private Equity -- Boston, MA
Built and maintained data infrastructure supporting deal teams, portfolio monitoring, and investor reporting. Managed infrastructure through multiple due diligence cycles with hard deadlines and high data integrity requirements. Led a major data platform migration from on-premises to cloud-hosted infrastructure, including security controls satisfying LP and regulatory requirements.
2015 -- 2018
Infrastructure Engineer, Retail Technology
Supported inventory management, real-time pricing, and supply chain integration systems across a high-SKU retail environment. Operated under peak load conditions where scale was a concrete engineering problem rather than an abstract one. Built out monitoring and alerting infrastructure from scratch and managed a full data center relocation.
2013 -- 2015
IT Engineer, Technology Sector
Established the professional fundamentals: data center operations, network infrastructure, endpoint management, and the on-call rotations that teach you more about system fragility than any textbook. Developed an appreciation for cable labeling that has never left me.

Get in Touch

If you are an engineer working in financial services, curious about the career path, or have a question about something I have written, I would genuinely like to hear from you. Use the and I will get back to you. If something here has been useful, a coffee is always appreciated.

A note on anonymity: I write under my own name but keep my current employer private. The financial services industry is small, the regulatory environment is real, and I want to write honestly without those constraints. All incidents and case studies on this site are anonymised. The technical content is real; identifying details are not.
Get in touch

Contact

Whether you are an engineer in financial services, have a question about something I have written, or just want to say hello - feel free to reach out. I read everything.

Powered by Resend · No spam, ever

Legal

Privacy Policy

Last updated: April 2026

This policy explains what information Packet & Profit collects when you visit this site, how it is used, and what choices you have.

Information We Collect

We do not require you to create an account or provide personal information to read this blog. The only personal information we collect is what you voluntarily submit through the contact form: your name, email address, and message. This information is transmitted via Resend and used solely to respond to your enquiry.

Google AdSense and Advertising

This site uses Google AdSense to display advertisements. Google AdSense uses cookies and similar tracking technologies to serve ads based on your prior visits to this and other websites. This means Google may use information about your visits to this site to show you personalised ads on other sites across the web.

You can opt out of personalised advertising by visiting Google Ads Settings, aboutads.info, or optout.networkadvertising.org. See Google advertising policies for more.

Cookies

This site uses a single first-party cookie to remember your theme preference (light or dark mode). This cookie contains no personal information. Third-party cookies may be set by Google AdSense for advertising purposes as described above.

Analytics

This site does not currently use any analytics platform beyond what Vercel provides as part of its standard hosting service (aggregated, anonymised traffic data).

Contact Form

When you submit the contact form, your name, email address, subject, and message are transmitted to the blog author via Resend. This data is not stored by this site and is not shared with any third party beyond Resend. See Resend's privacy policy for details.

Third-Party Links

Posts on this site may link to external websites. We are not responsible for the privacy practices or content of those sites.

Your Rights

If you have submitted a message via the contact form and would like that information removed, or if you have any questions about this policy, please use the contact form to get in touch.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised.

Legal

Terms of Service

Last updated: April 2026

By accessing and using Packet & Profit (packetandprofit.com), you agree to be bound by these Terms of Service. If you do not agree, please do not use this site.

Use of Content

All written content, illustrations, and code examples published on this site are the original work of Michael Harlow unless otherwise stated. You are welcome to share links to posts and quote brief excerpts (with attribution), but you may not reproduce full articles, copy content to other websites, or use the content for commercial purposes without written permission.

No Professional Advice

Content published on this site reflects personal opinions and professional experience. It is provided for informational and educational purposes only. Nothing on this site constitutes financial, investment, legal, or professional advice of any kind. See the for more detail.

Third-Party Links

This site may contain links to third-party websites. These links are provided for convenience and do not constitute an endorsement of the linked site or its content. We have no control over and accept no responsibility for external sites.

Advertising

This site participates in Google AdSense, which displays advertisements from third-party advertisers. The presence of an advertisement does not constitute an endorsement of the advertiser's products or services. Ad content is determined by Google based on the content of this site and your browsing history.

Accuracy of Information

While we make every effort to ensure the accuracy of information published on this site, technology and financial markets change rapidly. Information that was accurate at the time of publication may become outdated. We do not warrant the completeness, accuracy, or timeliness of any content on this site.

Limitation of Liability

To the fullest extent permitted by law, Packet & Profit and its author shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of, or inability to use, this site or its content.

Changes to These Terms

We reserve the right to update these terms at any time. Continued use of the site following any changes constitutes your acceptance of the revised terms. The date at the top of this page reflects the most recent revision.

Contact

If you have questions about these terms, please use the .

Legal

Disclaimer

Last updated: April 2026

Packet & Profit is a personal blog written by Michael Harlow, a Systems Engineer based in Boston, MA. The views expressed here are entirely his own and do not represent those of any employer, client, or organisation he is affiliated with.

Not Financial or Investment Advice

This site discusses financial services technology, investment management infrastructure, and related engineering topics from a technical practitioner's perspective. Nothing published here is financial advice, investment advice, or a recommendation to buy, sell, or hold any security, asset, or financial instrument. The author is not a registered financial adviser, broker, or investment professional.

Content that references financial markets, trading systems, or investment firms is provided for technical and educational context only. Any figures, case studies, or examples are illustrative and should not be relied upon for financial decisions.

Not Legal or Professional Advice

Nothing on this site constitutes legal, compliance, regulatory, or professional advice. Readers should consult qualified professionals for advice specific to their circumstances.

Professional Experience

Posts on this site draw on the author's professional experience in systems engineering across private equity, retail technology, and asset management. Specific details about employers, clients, projects, and colleagues have been anonymised or generalised. Any resemblance to specific organisations is incidental.

Accuracy

The author makes reasonable efforts to ensure published information is accurate at the time of writing. The technology and financial services landscape changes quickly. Readers should verify any technical or regulatory information against current primary sources before acting on it.

Affiliate Links and Advertising

This site displays advertisements through Google AdSense. The site may also contain links to tools, services, or products that the author uses or finds useful. These are not paid endorsements unless explicitly stated. The author's opinions are his own and are not influenced by advertisers.

Questions

For questions about anything on this site, please use the .

This site uses cookies for theme preferences and displays ads via Google AdSense, which may use cookies to personalise ads.