Infrastructure & Security Lead

Role overview

Cloud and infrastructure

• Design, implement, provision, and administer public and private cloud services, including AWS, to support platform and product development.
• Deliver infrastructure focused on user experience, resilience, performance, scalability, security, high availability, continuous support, and cost of ownership.
• Automate infrastructure, security services, and system administration tasks where possible.

Security and service operations

• Lead platform security architecture and develop application- and infrastructure-level security guidelines.
• Support IAM, endpoint, network, and perimeter security services.
• Implement security and service monitoring to identify operational and security issues proactively.
• Support incident, request fulfillment, problem, and change management with service coordinators and vendors.

Planning and team leadership

• Lead strategic and tactical operations planning, service improvement, and contingency planning, including BCDR.
• Build a high-performing Infrastructure and Security Operations team and grow its people and knowledge capabilities.
• Lead budget planning for infrastructure assets and services.
• Work with service owners to identify performance issues and improvements, define action plans, and optimize service request workflows.

Procedures and standards

• Maintain technical procedures, installation and configuration instructions, and runbooks to support operational standards.
• Review processes and work instructions for compliance with security policies and standards.

Required experience and expertise

• At least two large, globally scoped cloud-based e-business platform projects in the previous role.
• Five or more years in a senior role architecting and implementing data-center IT infrastructure using industry-standard monitoring tools and security standards.
• Expertise in AWS, development infrastructure, mature DevOps processes, and CI/CD.
• Experience with subscription management, IAM roles, Certificate Manager, WAF management, threat detection, and DDoS protection.
• Advanced information security knowledge applicable to internet-facing platforms.
• Knowledge of IT governance, enterprise architecture, IT policies and procedures, and BCDR processes, policies, and standards.
• Ability to document procedures and policies clearly.

Role capabilities

• Hands-on knowledge of public and private cloud computing.
• Infrastructure and security architecture, implementation, administration, and automation.
• Team development and cross-functional collaboration.