Engineering Manager, Network and Endpoint - USDS

About the role

The Security and Information Technology team is missioned to run and operate security infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in deploying and maintaining scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

About the team

The Network and Endpoint teams sit within Security and Information Technology and jointly own the foundation of how our employees connect to and work on our corporate environment, balancing a strong end-user experience with the security controls that protect the company. The Network team designs, operates, and secures our global corporate network, including Palo Alto Prisma and Panorama, Cisco Meraki, Verizon MPLS, and a range of related cloud networking components. The team has a dual remit: delivering a high-quality user experience on our office Wi-Fi, and owning the network security posture that sits behind it. The Endpoint team has a similar dual remit across our fleet of corporate devices. They own MDM, laptop performance monitoring, and OS testing and rollout, while also ensuring that our security agents — including CrowdStrike, our custom HIDS, DTEX, Tenable, etc. — are deployed and healthy on every host in the environment.

Responsibilities

• Automate diagnostics & monitoring: Design telemetry-driven workflows for root-cause analysis and proactive alerting to reduce outages and manual triage.
• Drive Infrastructure as Code (IaC) & API-first operations: Migrate infrastructure to code (Terraform, Ansible) via CI/CD pipelines, replacing GUI administration with API integrations across all platforms (Palo Alto, Workspace ONE, CrowdStrike, etc.).
• Streamline release & change management: Implement automated testing frameworks for infrastructure deployments, OS upgrades, and security rule changes.
• Transform the engineering culture: Evolve the team toward an automation-first model, mentoring staff on scalable architectures, code reviews, and SLO-driven operations.
• Own the technology roadmap: Define architecture and platform consolidation plans, partnering cross-functionally to align security capabilities with business growth.
• Foster AI & innovation: Rapidly evaluate and integrate emerging AI tools and modern automation platforms into daily operational workflows.
• Drive security governance: Automate compliance audits, policy enforcement, and regulatory responses for network and endpoint domains.
• Manage complex security operations: Oversee the end-to-end lifecycle of cross-departmental projects, incident response, and vulnerability management across multiple teams and vendors.

Qualifications

• Minimum Qualifications - 5 years in network, endpoint, or infrastructure security (Bachelor's degree preferred), including 3 years in management leading teams of software and infrastructure engineers.
• Proven leadership in team transformation, with experience reshaping traditional IT ops teams into high-performing, automation-first engineering organizations.
• Deep technical expertise in Infrastructure as Code (Terraform, Ansible), CI/CD, and at least two core areas: enterprise firewalls (Palo Alto preferred), UEM/MDM, cloud networking, or endpoint security.
• API-first mindset & automation experience: Practical experience integrating vendor platforms (REST, GraphQL) and applying modern automation or AI tools to solve operational challenges.
• Strong project management & communication: Ability to drive cross-functional initiatives, manage complex deployments, and deliver executive-level updates.
• Thorough understanding of InfoSec technologies, compliance standards, and governance frameworks.

Preferred Qualifications

• Enterprise-scale experience with Palo Alto (Panorama/Prisma), Workspace ONE, CrowdStrike, Meraki, Infoblox, or Akamai WAF.
• Experience building AI-assisted operational workflows (e.g., using LangChain, LLM orchestration, or similar frameworks).
• Strong background operating in a GitOps model and implementing modern observability platforms (Prometheus, Datadog, Splunk).