About the Role
This role is scoped as a senior execution level position covering production release management, change control, and security and compliance operations. The strategic and cross company leadership pieces, roadmap ownership, architecture review boards, mentoring, are not part of this role, those stay with existing leadership. This role is about owning the day to day execution: getting changes out safely, keeping SOC 2 evidence current, and running security operations.
Ideally this is scoped as a managed service package along with the Infrastructure and Platform Operations Manager and the Senior Database Engineer/DBA
What this role will do
- Own production release and deployment pipelines (Octopus Deploy and TeamCity), including zero downtime deployment practices and fixing stuck or failed deploys
- Approve production changes, hotfixes, and feature toggle changes, and schedule maintenance windows with appropriate customer notice through the status page
- Own SOC 2 change management and audit evidence collection, and work directly with external auditors through full SOC 2, HIPAA, or PCI audit cycles
- Run hands on security operations: vulnerability and patch remediation tracking, endpoint security tooling, and triage of externally reported vulnerabilities
- Administer identity and access management: access reviews, MFA, privileged access controls, and granting or revoking production access to databases, VPN, and deployment tooling
- Support customer facing security questionnaires and RFP security sections
- Handle the roughly 25 monthly infrastructure and access tickets that require change approval or production access grants