Financial Infrastructure · DevOps · Boston

Engineering inside
financial services.

Ten years across private equity, retail, and asset management. Real technical experience covering infrastructure, cloud, security, and trading systems. Written plainly to help other engineers navigate this world.

Michael Harlow
Michael Harlow // sys.ghost  ·  Boston, MA
☕ Buy me a coffee
Latest post
Every vendor pitch says Snowflake will fix your data problems. It won't, by itself. What it does do is remove an entire category of infrastructure pain that anyone who has run overnight ETL against positions and transactions data will recognize immediately.
Sep 22, 2026 · 11 min read
Read →
All posts

Archive

← Back to posts
Data Engineering Sep 22, 2026 · 11 min read

What Snowflake Actually Changes About Data Pipelines in Investment Management

What Snowflake Actually Changes About Data Pipelines in Investment Management

For most of the last decade, the data warehouse at an investment management firm has looked roughly the same regardless of the vendor logo on it. A SQL Server or Oracle box, sized for peak load that only happens a few days a month, running overnight batch jobs that pull from custodians, prime brokers, market data vendors, and the OMS, then land everything into a set of tables that the performance and compliance teams query the next morning. If a job fails at 3 a.m., someone gets paged, and the first question in the incident channel is always some version of "will positions be ready by open."

I have spent a fair amount of the last year moving pieces of that stack onto Snowflake, and I want to write about what actually changes, because the marketing version of this story and the operational version of this story are not the same thing. Snowflake does not make your data pipelines good. It removes a specific, painful category of infrastructure work that has nothing to do with your actual data problems, which frees you up to focus on the parts that do.

The Problem It Actually Solves

The core architectural idea in Snowflake is that storage and compute are separate. That sentence gets repeated so often in vendor decks that it stops meaning anything, so here is what it means in practice for a firm running nightly position reconciliation.

In a traditional warehouse, your compute and your storage live on the same box, sized together. If your month-end NAV process needs a large instance for four hours and your intraday reporting needs a small one the other twenty, you either provision for the peak and pay for idle capacity the rest of the time, or you provision for the average and watch month-end jobs run long. I have lived both versions of this at different firms, and neither is good.

In Snowflake, the data sits in cloud object storage, and you spin up independent "virtual warehouses" - just compute clusters - against it, sized for whatever job is running. Month-end NAV gets a large warehouse for four hours and auto-suspends the second it's idle. Intraday compliance queries run on a small warehouse that's usually asleep. They are billed separately, by the second, and they do not contend with each other for resources because they are not the same hardware. That last part matters more than it sounds: the number of "why is my dashboard slow, is it the overnight load" incidents I have investigated over the years, where the actual answer was resource contention between two workloads that had no business sharing a box, is not small.

What a Real Pipeline Looks Like

Here is roughly the shape of what we built, stripped of anything firm-specific. Raw files land first, transforms happen in the warehouse, not before it.

sql
-- Raw custodian file lands as-is, no transformation on the way in
CREATE OR REPLACE STAGE custodian_raw
  URL = 's3://firm-data-landing/custodian/'
  STORAGE_INTEGRATION = s3_prod_integration
  FILE_FORMAT = (TYPE = CSV FIELD_OPTIONALLY_ENCLOSED_BY = '"');

-- Snowpipe auto-ingests new files as they arrive, no cron job to babysit
CREATE OR REPLACE PIPE custodian_ingest_pipe
  AUTO_INGEST = TRUE
  AS
  COPY INTO raw.custodian_positions
  FROM @custodian_raw
  FILE_FORMAT = (TYPE = CSV SKIP_HEADER = 1);

That "land it raw, transform it in the warehouse" pattern is the part that took the most convincing internally, because it inverts how a lot of legacy ETL teams think. The instinct with a traditional pipeline is to clean and validate data on the way in, because compute is expensive and you don't want to be reprocessing garbage. With cheap, elastic compute and cheap storage, the calculus flips: land everything exactly as the custodian sent it, keep it, and do your validation and transformation as a queryable, versioned step downstream. When a custodian silently changes a file format at 11 p.m. - and they will - you have the raw file to diff against, instead of a corrupted table and a guessing game.

For the transform layer itself, we run dbt on top of Snowflake, which is a genuinely good combination. Positions, transactions, and performance marts are built as dbt models with tests attached - things like "position quantity should never be null" or "every transaction should map to a known security" - and those tests run as part of every deploy, not as a separate QA pass someone remembers to do occasionally.

The Two Features That Change Daily Operations

Two Snowflake-specific features have had more day-to-day operational impact on my team than anything else, and neither gets much attention in the sales materials.

Zero-copy cloning. You can clone a multi-terabyte production database in seconds, and it does not duplicate the underlying storage - it just creates new metadata pointers, with storage only diverging as data actually changes.

sql
CREATE DATABASE positions_dev CLONE positions_prod;

Before this, giving a developer a realistic dataset to test a positions reconciliation fix meant either testing against a stale, scrubbed subset that didn't reproduce the bug, or getting DBA time allocated to carve out a real copy, which took days and ate real storage. Now any engineer can clone full production scale in under a minute, test against it, and drop it. This alone changed how confidently people ship fixes to reconciliation logic, because they can actually reproduce the bug they're fixing before they fix it.

Time travel. Snowflake keeps a queryable history of every table for a configurable retention window, so you can query the exact state of a table as of any past timestamp.

sql
SELECT *
FROM raw.custodian_positions
AT (TIMESTAMP => '2026-09-15 06:00:00'::timestamp);

For a compliance team, this is not a convenience feature, it is close to a requirement. "What did the position table say at 6 a.m. on the day of this trade" is a question that comes up during audits and investigations, and answering it used to mean digging through backup tapes or nightly snapshot tables that someone remembered to build. Now it's one query, against live data, going back however many days retention is configured for.

Where the Real Work Still Is

None of this replaces actual data engineering discipline, and I want to be honest about where the effort still goes.

Cost governance is a real job, not a footnote. Auto-suspend and auto-scaling on virtual warehouses are the mechanism, but someone still has to set sensible defaults, review the query history for runaway costs, and catch the analyst who left a large warehouse running against a Cartesian join over the weekend. We built a scheduled job that flags any warehouse running more than fifteen minutes past its typical job duration and pages the data team, because "the bill was unexpectedly high" is a conversation you only want to have once.

Security and access control took longer than the pipeline work itself, which is normal for a regulated firm and shouldn't surprise anyone. Snowflake's row-level security and dynamic data masking are genuinely good primitives - you can mask a client's SSN or account number for anyone outside a specific role without maintaining a second, redacted copy of the table - but designing the actual policy, mapping who should see what across compliance, trading, and client service, is a governance exercise that the tooling does not do for you.

sql
CREATE OR REPLACE MASKING POLICY mask_ssn AS (val STRING) RETURNS STRING ->
  CASE
    WHEN CURRENT_ROLE() IN ('COMPLIANCE_ADMIN') THEN val
    ELSE 'XXX-XX-' || RIGHT(val, 4)
  END;

And semi-structured data is still messy data. Snowflake's VARIANT type makes it straightforward to land a vendor's nested JSON market data feed without pre-defining a rigid schema, which is genuinely useful given how often those feeds change shape without notice. But "we can ingest it easily" and "we understand what's in it" are different problems, and the second one is still on you.

Is It Worth the Migration

For a firm still running batch ETL against an on-prem warehouse sized for month-end peak, I think the honest answer is yes, with a caveat: the value is concentrated in removing infrastructure toil - the capacity planning, the contention between workloads, the "can I get a realistic test environment" friction - and not in some vague AI-readiness story the vendor decks lean on. If your actual bottleneck is that nobody trusts the data, or the transformation logic has been undocumented tribal knowledge for six years, Snowflake will let you build the fix faster, but it will not build the fix for you.

The team that got the most value out of this migration was not the one that migrated fastest. It was the one that used the migration as a forcing function to finally write down what every transform was actually supposed to do, test it, and put it in version control. Snowflake made that easier to do. It didn't make it optional.

Found this useful?
☕ Buy Michael a Coffee
← More posts

Hey, I'm Michael Harlow.

Senior Systems Engineer · Boston, MA · Writing as sys.ghost

I have spent over a decade building and maintaining infrastructure at the intersection of technology and financial services. My career has taken me through three distinct sectors -- technology, private equity, and asset management -- and each one changed how I think about what reliable infrastructure actually requires.

I started in general IT, which is where most engineers who did not go straight into software end up. Data centers, networking, on-call rotations, learning to label cables properly because unlabeled cables are a promise that someone else will suffer later. The work taught me that almost every sophisticated system is, one layer down, a collection of unglamorous fundamentals that either hold or do not. I still believe that. I still label everything.

Private equity came next, and it was a different world. The infrastructure stakes there are less about uptime and more about data integrity. When deal teams are making acquisition decisions based on data you are responsible for, and when a due diligence process has a hard deadline that does not move regardless of what broke overnight, your relationship with reliability changes. A wrong number in an LP report does not cause an immediate incident. It causes a conversation in a partner meeting six weeks later, and by then you need to reconstruct what happened from imperfect records. I became obsessive about data provenance in PE and I have not stopped.

For the past several years I have been in asset management, supporting trading and investment operations infrastructure. This is the environment I find most technically interesting. The compliance requirements are demanding, the legacy systems have long institutional memories, and the tolerance for operational errors is genuinely low -- not just in terms of business impact, but in terms of regulatory consequence. When markets are open, there is no fixing it after the weekend.

I started Packet & Profit in January 2026 because I kept looking for the kind of writing I wanted to read and finding it mostly did not exist. There is a lot of content for engineers online. There is much less written by engineers working specifically inside regulated financial services firms, being honest about what that actually involves day to day. The compliance conversations, the legacy constraints, the incident management in front of stakeholders who measure downtime in dollars per minute. That is what I write about here.

Outside of work I have been running a Saturday morning robotics course at my local YMCA for kids aged 10 to 14. It is one of the better decisions I have made.

Certifications

✓Red Hat Certified Engineer (RHCE)
✓Certified Kubernetes Administrator (CKA)
✓AWS Solutions Architect -- Associate
✓CompTIA Security+
✓HashiCorp Vault Associate

My Stack

RHEL / Ubuntu
Kubernetes
OpenShift
Terraform
Ansible
Prometheus
Grafana
Python / Bash
AWS / Azure
Cisco / Palo Alto
PostgreSQL
Redis
HashiCorp Vault
Fluent Bit
Helm
ArgoCD

Career

2022 -- Present
Senior Systems Engineer, Asset Management -- Boston, MA
Leading infrastructure for trading operations and investment management systems. Responsibilities span network security, cloud migration strategy, Kubernetes platform engineering, and incident response. Deeply involved in T+1 settlement infrastructure work and the shift from overnight batch processing to near-real-time event-driven architecture.
2018 -- 2022
Systems Engineer, Private Equity -- Boston, MA
Built and maintained data infrastructure supporting deal teams, portfolio monitoring, and investor reporting. Managed infrastructure through multiple due diligence cycles with hard deadlines and high data integrity requirements. Led a major data platform migration from on-premises to cloud-hosted infrastructure, including security controls satisfying LP and regulatory requirements.
2015 -- 2018
Infrastructure Engineer, Retail Technology
Supported inventory management, real-time pricing, and supply chain integration systems across a high-SKU retail environment. Operated under peak load conditions where scale was a concrete engineering problem rather than an abstract one. Built out monitoring and alerting infrastructure from scratch and managed a full data center relocation.
2013 -- 2015
IT Engineer, Technology Sector
Established the professional fundamentals: data center operations, network infrastructure, endpoint management, and the on-call rotations that teach you more about system fragility than any textbook. Developed an appreciation for cable labeling that has never left me.

Get in Touch

If you are an engineer working in financial services, curious about the career path, or have a question about something I have written, I would genuinely like to hear from you. Use the and I will get back to you. If something here has been useful, a coffee is always appreciated.

A note on anonymity: I write under my own name but keep my current employer private. The financial services industry is small, the regulatory environment is real, and I want to write honestly without those constraints. All incidents and case studies on this site are anonymised. The technical content is real; identifying details are not.
Get in touch

Contact

Whether you are an engineer in financial services, have a question about something I have written, or just want to say hello - feel free to reach out. I read everything.

Powered by Resend · No spam, ever

Legal

Privacy Policy

Last updated: April 2026

This policy explains what information Packet & Profit collects when you visit this site, how it is used, and what choices you have.

Information We Collect

We do not require you to create an account or provide personal information to read this blog. The only personal information we collect is what you voluntarily submit through the contact form: your name, email address, and message. This information is transmitted via Resend and used solely to respond to your enquiry.

Google AdSense and Advertising

This site uses Google AdSense to display advertisements. Google AdSense uses cookies and similar tracking technologies to serve ads based on your prior visits to this and other websites. This means Google may use information about your visits to this site to show you personalised ads on other sites across the web.

You can opt out of personalised advertising by visiting Google Ads Settings, aboutads.info, or optout.networkadvertising.org. See Google advertising policies for more.

Cookies

This site uses a single first-party cookie to remember your theme preference (light or dark mode). This cookie contains no personal information. Third-party cookies may be set by Google AdSense for advertising purposes as described above.

Analytics

This site does not currently use any analytics platform beyond what Vercel provides as part of its standard hosting service (aggregated, anonymised traffic data).

Contact Form

When you submit the contact form, your name, email address, subject, and message are transmitted to the blog author via Resend. This data is not stored by this site and is not shared with any third party beyond Resend. See Resend's privacy policy for details.

Third-Party Links

Posts on this site may link to external websites. We are not responsible for the privacy practices or content of those sites.

Your Rights

If you have submitted a message via the contact form and would like that information removed, or if you have any questions about this policy, please use the contact form to get in touch.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised.

Legal

Terms of Service

Last updated: April 2026

By accessing and using Packet & Profit (www.packetandprofit.com), you agree to be bound by these Terms of Service. If you do not agree, please do not use this site.

Use of Content

All written content, illustrations, and code examples published on this site are the original work of Michael Harlow unless otherwise stated. You are welcome to share links to posts and quote brief excerpts (with attribution), but you may not reproduce full articles, copy content to other websites, or use the content for commercial purposes without written permission.

No Professional Advice

Content published on this site reflects personal opinions and professional experience. It is provided for informational and educational purposes only. Nothing on this site constitutes financial, investment, legal, or professional advice of any kind. See the for more detail.

Third-Party Links

This site may contain links to third-party websites. These links are provided for convenience and do not constitute an endorsement of the linked site or its content. We have no control over and accept no responsibility for external sites.

Advertising

This site participates in Google AdSense, which displays advertisements from third-party advertisers. The presence of an advertisement does not constitute an endorsement of the advertiser's products or services. Ad content is determined by Google based on the content of this site and your browsing history.

Accuracy of Information

While we make every effort to ensure the accuracy of information published on this site, technology and financial markets change rapidly. Information that was accurate at the time of publication may become outdated. We do not warrant the completeness, accuracy, or timeliness of any content on this site.

Limitation of Liability

To the fullest extent permitted by law, Packet & Profit and its author shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of, or inability to use, this site or its content.

Changes to These Terms

We reserve the right to update these terms at any time. Continued use of the site following any changes constitutes your acceptance of the revised terms. The date at the top of this page reflects the most recent revision.

Contact

If you have questions about these terms, please use the .

Legal

Disclaimer

Last updated: April 2026

Packet & Profit is a personal blog written by Michael Harlow, a Systems Engineer based in Boston, MA. The views expressed here are entirely his own and do not represent those of any employer, client, or organisation he is affiliated with.

Not Financial or Investment Advice

This site discusses financial services technology, investment management infrastructure, and related engineering topics from a technical practitioner's perspective. Nothing published here is financial advice, investment advice, or a recommendation to buy, sell, or hold any security, asset, or financial instrument. The author is not a registered financial adviser, broker, or investment professional.

Content that references financial markets, trading systems, or investment firms is provided for technical and educational context only. Any figures, case studies, or examples are illustrative and should not be relied upon for financial decisions.

Not Legal or Professional Advice

Nothing on this site constitutes legal, compliance, regulatory, or professional advice. Readers should consult qualified professionals for advice specific to their circumstances.

Professional Experience

Posts on this site draw on the author's professional experience in systems engineering across private equity, retail technology, and asset management. Specific details about employers, clients, projects, and colleagues have been anonymised or generalised. Any resemblance to specific organisations is incidental.

Accuracy

The author makes reasonable efforts to ensure published information is accurate at the time of writing. The technology and financial services landscape changes quickly. Readers should verify any technical or regulatory information against current primary sources before acting on it.

Affiliate Links and Advertising

This site displays advertisements through Google AdSense. The site may also contain links to tools, services, or products that the author uses or finds useful. These are not paid endorsements unless explicitly stated. The author's opinions are his own and are not influenced by advertisers.

Questions

For questions about anything on this site, please use the .

This site uses cookies for theme preferences and displays ads via Google AdSense, which may use cookies to personalise ads.