Title: Director of Infrastructure and Security
Reports to: VP of Technology
Summary:
The Director of Infrastructure and Security owns the day-to-day operations and security posture of the organization across multiple systems and business units. This is a working director role: the person in this seat is expected to operate as both a hands-on technical contributor and a leader. They will directly engage in senior level infrastructure and security work while building, mentoring, and motivating a high-performing team. The role spans legacy on-premise data center environments to modern cloud and SaaS platforms. This role will work with the VP of Technology to determine the appropriate architecture and cost structure supported by the business. This person is a self-starter who identifies risk and opportunity proactively, drives initiatives without waiting for direction, and sets the technical standard for the infrastructure and security function.
Major Duties:
· Own the architecture and roadmap for infrastructure and security across all systems and business units.
· Lead identification, assessment, and remediation of security vulnerabilities across endpoints, servers, network infrastructure, and cloud environments.
· Plan and execute consolidation of redundant infrastructure environments onto a standardized platform (networking, storage, compute, cloud platforms).
· Own backup and disaster recovery response operations and procedures.
· Decommission and retire legacy systems with minimal disruption to operations.
· Establish and maintain security policies, incident response procedures, and compliance documentation aligned to organizational risk tolerance and industry frameworks.
· Build, mentor, and motivate the infrastructure and security team
· Set technical direction and foster a culture of ownership, accountability, and continuous improvement.
· Own helpdesk operations; monitor SLA performance and ticket queue health.
· Coordinate infrastructure and security standards across multiple systems and business units, ensuring consistent practices and shared visibility across distinct organizational environments.
· Evaluate completing vendor solutions and contribute to recommendations for best fit.
Technical Knowledge:
- Direct knowledge of vulnerability mitigation techniques including threat modeling, penetration testing oversight, patch and vulnerability management, and security tooling such as EDR/XDR, SIEM.
- Hands-on knowledge of legacy Active Directory architecture, Group Policy, and on-premise identity infrastructure, including migration paths to modern identity platforms
- Hands-on knowledge of virtualization platforms connected to enterprise storage solutions
- Experience with Microsoft 365 and Entra ID (Azure AD) administration, tenant-to-tenant consolidation, including identity, mail flow, and collaboration tool migration
- General familiarity with Azure IaaS cloud platform
- Working knowledge of risk management and compliance frameworks (e.g., NIST, SOC) and the ability to translate framework requirements into practical operational controls
- Ability to plan and execute decommissioning of legacy and retired systems, including sequencing, risk assessment, and stakeholder coordination to ensure minimal disruption
Special Skills: Demonstrated self-starter who proactively identifies infrastructure and security risk and acts without waiting for direction. Ability to operate effectively as a working director, balancing hands-on technical execution with strategic leadership and team development. Skilled at bridging legacy on-premise systems and modern cloud and DevOps practices, making sound architectural tradeoffs that account for both technical debt and forward-looking modernization goals. Strong ability to motivate and develop a technical team, fostering accountability and a proactive security culture. Comfortable balancing strategic infrastructure ownership with operations management responsibility. Able to sequence and prioritize multiple large, concurrent initiatives without losing day-to-day operational stability. Effective communicator able to translate technical risk into business terms for leadership and stakeholders across the organization.
Education: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent demonstrated experience.
Experience: 4+ years of infrastructure and/or security experience, including direct hands-on work with both legacy and modern cloud platforms. Prior experience leading a technical team or working in a player-coach capacity required.
Physical:
Environmental: Office setting with periodic travel required to support infrastructure and security needs across multiple sites and business units.
WORKER ATTRIBUTES
Knowledge - An organized body of information usually of a factual or procedural nature which, if applied, makes adequate performance on the job possible. A body of information applied directly to the performance of a function.
- Technical and Systems: Comprehensive knowledge of enterprise infrastructure and security architecture spanning legacy on-premise systems, Active Directory, cloud platforms, DevOps practices, and modern networking, along with operations management knowledge for overseeing a service desk function. Ability to apply this knowledge across multiple systems and organizations with varying levels of technical maturity.
Skills - The proficient manual, verbal or mental manipulation of data or things. Skills can be readily measured by a performance test where quantity and quality of performance are tested, usually within an established time limit. Examples of proficient manipulation of things are skill in typing or skill in operating a vehicle. Examples of proficient manipulation of data are skill in computation using decimals; skill in editing for transposed numbers, etc.
- Technical Documentation: Ability to develop and maintain security policies, architecture documentation, and operational procedures suitable for audit, compliance, and cross-team reference.
- Leadership and Mentorship: Able to motivate and develop a technical team, set clear direction, and communicate security and infrastructure strategy effectively to both technical staff and executive leadership.
- Listening: Giving full attention to what others are saying, taking time to understand the points being made, asking questions when appropriate and not interrupting at inappropriate times.
- Critical Thinking: Applying advanced security and architectural reasoning to evaluate risk, tradeoffs, and long-term technical strategy across legacy and modern systems. Ability to weigh competing priorities across multiple business units and recommend direction that balances security, cost, and operational continuity.
- Time Management: Manage one’s own time and the time of others.
- Coordination: Adjusting actions in relation to others' actions.
- Service Orientation: Actively looking for ways to help people.
- Social Perceptiveness: Being aware of others' reactions and understanding why they react as they do.
- Operation and Control: Controlling operations of equipment or systems.
Ability - The power to perform an observable activity at the present time. This means that abilities have been evident through activities or behaviors that are similar to those required on the job, e.g., ability to plan and organize work. Abilities are different from aptitudes. Aptitudes are only the potential for performing the activity.
· Planning: Plan, organize and prioritize work.
· Data and Research: Gather facts and communicate findings.
· Interpersonal communication: Written and verbal expression and clarity.
· Problem Sensitivity: The ability to anticipate or recognize problems.
· Multi-tasking: The ability to shift between two or more activities or sources of information.
· Relator: Able to build lasting bonds with a wide variety of personality types.
Performance Dimensions - Performance dimensions are traits or characteristics used to describe observable workplace behaviors. They provide a framework for managers and employees in which performance can be discussed and evaluated.
· Service and Sensitivity: Actions that indicate a consideration for the feelings and needs of others. Responsiveness to the needs of drivers, internal and/or external customers.
· Listening: Ability to extract information in oral communication. Actively makes an effort to pay attention and hear what someone is saying.
· Oral and Written Communication: Effective expression in individual or group situations (includes gestures and non-verbal communications). Effective expression of thoughts and messages in a written format (includes clarity, grammar, spelling, conciseness, etc.).
· Planning and organization: Establishing a course of action for self and/or others to accomplish a specific goal: Prioritizing responsibilities and organizing efforts to ensure the timely completion of daily responsibilities, projects, etc.
· Judgment: Making rational and realistic decisions which are based on logical assumptions and which reflect factual information and consideration of company's mission and resources.
· Stress Tolerance: Stability of performance under pressure and/or opposition.
· Team player: Actions are consistent with overall corporate goals and objectives. Ability to work with others. Facilitates and supports cooperative actions. Listens to, and respects, other's contributions. Willingness to express ideas, opinions, and share information.
PTL/IPS/PLI is an equal opportunity employer.
Benefits:
- 401(k)
- Dental insurance
- Health insurance
- Life insurance
- Vision insurance
Work Location: In person
