Infrastructure and Security Manager

Description

Summary: 

The Infrastructure and Security Manager is responsible for ensuring the organization’s technology infrastructure is secure, reliable, scalable, and resilient. This role designs, implements, administers, and optimizes AWS cloud environments and supporting infrastructure while advancing automation, infrastructure as code, DevOps practices, disaster recovery, monitoring, and operational efficiency. The position also leads cybersecurity strategy, governance, risk management, vulnerability management, identity and access management, security monitoring, and incident response. Working closely with IT, organizational leaders, vendors, and other stakeholders, the role balances operational requirements with security and risk considerations to protect organizational assets, maintain compliance, support business continuity, and drive ongoing technology modernization.

Mission:

The Infrastructure and Security Manager supports the National Registry’s mission by ensuring the technology infrastructure underlying the organization’s assessment, certification, research, and stakeholder services is secure, reliable, scalable, and resilient. This role protects the availability and integrity of critical systems and data, enabling the National Registry to consistently deliver trusted assessment services to EMS professionals and stakeholders.

Essential Functions:

• Design, implement, administer, and optimize AWS cloud infrastructure and cloud-native services to ensure secure, scalable, reliable, and high-performing technology operations.
• Manage cloud infrastructure, including compute, storage, networking, identity services, containerized and serverless environments, to support development, testing, and production workloads. 
• Automate infrastructure provisioning, configurations, and development using Infrastructure as Code, scripting, and DevOps/CI/CD practices..
• Monitor and maintain infrastructure performance, availability, security, backups, patching, disaster recovery, and business continuity while leading incident response, root cause analysis, and operational improvement initiatives.
• Develop and maintain infrastructure architecture, technical standards, operational documentation, lifecycle plans, performance metrics, and capacity planning while driving cloud modernization and cost optimization efforts. 
• Coordinate vendor and third-party infrastructure services and evaluate emerging technologies to enhance operational efficiency and resilience.
• Lead the organization’s cybersecurity program by developing and maintaining security strategies, policies, standards, and governance practices that protect organizational assets and support regulatory compliance. 
• Conduct security risk assessments, vulnerability management, penetration testing, threat detection, security monitoring, and incident response while coordinating remediation across infrastructure, applications, and cloud environments. 
• Oversee identity and access management, including privileged access, IAM governance, least-privilege principles, and Zero Trust security practices across enterprise and cloud platforms.  
• Promote a strong cybersecurity culture by supporting security awareness initiatives, compliance activities, incident response planning, tabletop exercises, security reporting, and collaboration with leadership to prioritize cybersecurity investments and risk reduction.

Requirements

Qualifications

• 7+ years of progressively responsible experience in IT infrastructure, cloud administration, cybersecurity, or related disciplines.
• Strong experience administering AWS cloud environments and supporting cloud-native, containerized, and microservices-based applications.
• Experience with scripting, automation, and Infrastructure as Code technologies.
• Experience supporting disaster recovery, backup, monitoring, and operational resilience programs.
• Experience managing vulnerability management, remediation, penetration testing, and security assessments.
• Knowledge of security frameworks, risk management, security governance, identity and access management, and security monitoring.
• Familiarity with incident response and threat detection practices.

Competencies:

• Strong understanding of networking, DNS, VPNs, firewalls, secure connectivity, and hybrid cloud environments.
• Ability to balance operational needs with risk-based security decision-making.
• Ability to communicate complex technical concepts, risks, and recommendations clearly to both technical and non-technical audiences. 
• Ability to build partnerships with business leaders, IT team, vendors, and stakeholders to deliver secure and reliable technology solutions. 

Other Requirements:

• Must be able to successfully work in an office environment.
• Must be able to travel up to 5 nights per year.