Director, Development Operations Infrastructure Engineering

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. Planned Parenthood organizations serve all people with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions.

About the role

This position reports directly to the Senior Director of Development Operations and Infrastructure in the IT Ops department of PPFA. The IT Ops department implements the architectural and infrastructural components used by PPFA, critical to the success of Planned Parenthood, its patients, supporters, donors, and staff.

The Director of Development Operations (DevOps) Infrastructure Engineering is responsible for the design and governance of PPFA’s web server infrastructure, including compliance management (PCI), network (physical, virtual), security (firewalls, logging, IDP/IDS, CDN, access control), and server (physical, virtual, container) design. The role architects complex infrastructure systems to provide uninterrupted services for developers, users, patients, and staff. The Director defines the infrastructure technology stack, standards, and best practices for managing day-to-day operations and manages the Infrastructure shared service supporting Web Development, Quality Assurance, Security, and Product teams.

The role will work closely with the Application Development team, Information Security team, members of the TSS division, third-party vendors, and executive and operational staff within the PPFA National Office, affiliates, and ancillary organizations.

Responsibilities

• Establish strategies for ensuring high availability of mission-critical PPFA online properties, including:
  • Configuration management automation
  • Geo-distributed data centers
  • Content delivery network (CDN) and caching strategies
  • Automated DNS cutovers based on application health checks
  • DDoS protection and log analysis tools for intrusion correlation and mitigation
• Design infrastructure components to support high availability, including:
  • Virtual machine, container, and network architecture
  • Security systems and high availability architecture
  • GeoLocation failover, redundancy, and multi-availability failover strategies
  • Multi-region deployment, secure routing, and IDP management
• Conduct security reviews and testing, including:
  • Reviewing CVE and test reports for security flaws
  • Performing periodic security reviews and advising on code compliance
  • Ensuring compliance with NIST, CIS, OWASP, and HIPAA standards
• Manage the shared service capacity to support product development initiatives for AppDev, QA, Product/Business, and Information Security teams
• Co-govern the Infrastructure team portfolio, define the team roadmap, and set priorities for project delivery
• Set standards and best practices for managing day-to-day infrastructure operations
• Provide Level 3 issue resolution support for complex technical issues
• Ensure all AZ deployments are in sync and request routing aligns with performance strategies
• Define security policies and standards in collaboration with security and legal partners
• Ensure compliance with security policies and vulnerability mitigation
• Manage and perform security audits and remediations weekly, implementing proactive security measures
• Manage security access controls, DNS, and logging services
• Deliver hands-on engineering, including creating, assessing, monitoring, updating, and deploying infrastructure assets, CI/CD tooling, and security/compliance assets in AWS

Requirements

• Bachelor’s degree or equivalent experience, and 8+ years of industry experience
• Professional experience implementing nontrivial applications in Python, Typescript, and Bash
• Experience with compliance requirements and industry standards such as HIPAA, PCI, NIST, CIS, and OWASP
• Strong Linux System Administration skills and extensive knowledge of Infrastructure-as-Code tooling and server patch management
• 5+ years of experience using the following platforms/toolkits: Jenkins, Github, AWS, ECS, Nginx, Docker, PgSQL, Elasticache, Opensearch, Prometheus, Grafana, Tenable, Splunk, SaltStack, Terraform
• 5+ years of experience with system hardening regimes and techniques, and IDP/IDS tools like Palo Alto

Pay

$160,000 - $170,000 a year

Schedule

0-10% domestic travel, as needed