Director for Infrastructure & Security

Infrastructure Strategy & Architecture

• Develop and execute the infrastructure strategy for the C&MA, evaluating on-premises, cloud, and hybrid approaches based on organizational needs, security posture, and financial stewardship
• Design and maintain the organization’s network architecture, including firewalls, switches, VPN, Wi-Fi, and network segmentation across domestic and international locations
• Oversee server and storage infrastructure, including virtualization platforms (Dell VxRail, Nutanix), physical and virtual server environments, and storage systems
• Lead capacity planning for computing, storage, and network resources, ensuring infrastructure scales to meet current and future organizational requirements
• Evaluate emerging infrastructure technologies and make recommendations for adoption aligned with organizational strategy and budget
• Identify, catalog, and prioritize infrastructure technical debt, including aging hardware, out-of-support systems, and legacy configurations; develop remediation plans in coordination with budget planning and strategic priorities

Cybersecurity Program

• Build and mature the organization’s cybersecurity program, establishing policies, standards, and operational practices that protect organizational and constituent data
• Conduct or coordinate vulnerability scanning and penetration testing on a regular cadence
• Develop and maintain incident response plans and lead the response to security incidents
• Implement and manage identity and access management controls, including MFA, conditional access policies, and privileged access management
• Oversee M365 security hardening, including data loss prevention (DLP), endpoint protection, and email security
• Coordinate cybersecurity training and phishing awareness initiatives in partnership with IT Services
• Monitor the threat landscape and communicate risk posture to IT leadership and organizational stakeholders
• Support organizational compliance and data privacy obligations, including donor data privacy, PCI compliance for donation processing, and the heightened data handling requirements for international workers in sensitive and restricted-access contexts where a data breach carries physical safety implications

Operations & Service Reliability

• Ensure the reliability, availability, and performance of all infrastructure systems, including servers, networks, cloud services, and support platforms
• Establish and enforce infrastructure change management processes, including change advisory review, maintenance windows, rollback plans, and post-change verification
• Manage patch management strategy and execution across server and network infrastructure
• Oversee backup and recovery operations, ensuring regular testing and validation of backup integrity
• Implement and monitor system performance metrics, proactively identifying and resolving issues before they impact the organization
• Coordinate with IT Services on escalated infrastructure issues, ensuring timely resolution and clear communication

Disaster Recovery & Business Continuity

• Develop, document, and maintain disaster recovery plans with defined RPO/RTO targets for critical systems, aligned with organizational risk tolerance
• Develop and maintain business continuity plans that ensure the organization can sustain operations during extended outages or disruptions, with particular attention to international workers in sensitive contexts
• Conduct regular DR testing and exercises, documenting results and driving continuous improvement
• Ensure infrastructure resilience through redundancy, geographic distribution, and failover capabilities appropriate to organizational scale and risk profile

Endpoint & Asset Management

• Manage the hardware asset lifecycle from procurement through disposition, including inventory tracking, refresh planning, and responsible disposal
• Oversee endpoint management strategy and platform administration (e.g., Microsoft Intune), including device compliance policies, software deployment, and mobile device management
• Coordinate with IT Services on endpoint security baselines, ensuring devices meet organizational standards before and during deployment
• Maintain physical security of IT infrastructure, including server room access controls, environmental monitoring, and UPS/power management

Cloud & Hybrid Infrastructure

• Administer cloud infrastructure services, including Microsoft 365, Azure, and AWS environments
• Develop and maintain the cloud migration roadmap, making recommendations based on sound business cases, security requirements, and organizational readiness
• Manage cloud identity, tenant configuration, and service administration
• Optimize cloud resource utilization and costs, ensuring responsible stewardship of cloud investments

International IT Infrastructure

• Oversee infrastructure and security operations for international locations and international workers, ensuring consistent standards and appropriate support
• Coordinate with Alliance Missions through formal IT engagement channels on international infrastructure needs, projects, and support requirements
• Address unique international infrastructure challenges including connectivity in restricted regions, data sovereignty requirements, and geopolitical considerations

Documentation & Knowledge Management

• Establish and maintain documentation standards for infrastructure systems, network configurations, security procedures, and operational runbooks
• Lead the development of a centralized knowledge base for infrastructure and security documentation
• Reduce single-point-of-failure risk through cross-training, knowledge sharing, and documented procedures

Team Leadership & Development

• Lead and develop a team of systems administrators, providing mentorship, technical guidance, and performance management
• Conduct regular one-on-ones, set clear goals, and provide meaningful career development opportunities
• Foster a culture of collaboration, continuous improvement, and professional growth within the infrastructure and security team
• Manage relationships with external infrastructure and security vendors and partners

Stakeholder Partnership & Collaboration

• Support technology governance initiatives by providing infrastructure and security input for governance decisions and delivering on strategic infrastructure projects
• Coordinate with IT Services on platform-level configuration and support for end-user-facing technology platforms
• Coordinate with Software Engineering on deployment pipelines, production environment management, and platform dependencies
• Partner with the Director of Software Engineering to develop and mature deployment automation and DevOps practices as the organization’s technical maturity advances
• Communicate infrastructure and security concepts effectively to non-technical stakeholders

Budget & Financial Stewardship

• Provide oversight and direction for infrastructure and security budgeting, including hardware lifecycle planning, cloud service costs, vendor contracts, and security investments
• Contribute to overall IT budget planning through identification of infrastructure, security, CapEx, and operations resource needs

Benefits

• Health plan (medical/dental/vision/HSA)
• Life Insurance
• 403(b) retirement plan with a percentage of employer matching
• Retirement grant
• Long-Term disability
• Paid time off (vacation/holidays/personal days)
• Sick time (accrues, with additional extended illness bank for rollover hours)
• Other paid leave (compassionate care, jury duty, parental, etc.)
• Employee assistance program