Director, Development Operations Infrastructure Engineering

Purpose:

Director, Development Operations (DevOps) Infrastructure Engineering is responsible for the design and governance of PPFA’s web server infrastructure. Functionally, this includes compliance management (PCI), network (physical, virtual), security (firewalls, logging, IDP/IDS, CDN, access control), and server (physical, virtual, container) design. The role architects the behavior of complex infrastructure systems to silently provide an uninterrupted array of services that are purposely invisible to developers and users of our technology including PP patients and staff. The role defines our infrastructure technology stack, standards, and best practices for managing day to day operations. From an organizational standpoint, the Director manages the Infrastructure shared service which supports Web Development, Quality Assurance, Security, Product teams.

Engagement:

The Director will be part of the IT Ops team with specific focus on PPOL, Planned Parenthood’s web properties, and will work closely with the Application Development team, Information Security team, and more broadly members of the TSS division, third party vendors, as well as executive and operational staff within the PPFA National Office, affiliates, and ancillary organizations.

Delivery:

The Director will deliver by being a hands-on engineering team member, creating, assessing, monitoring, updating, and deploying infrastructure assets, CI/CD Tooling, Security and Compliance assets, all relating to PPFA’s websites in AWS. 
 
Strategy & Architecture
• Establish strategies for ensuring high availability of mission-critical PPFA online properties
• Configuration management automation strategy
• Geo distributed data centers
• Content delivery network (CDN)
• Caching strategies
• Automated DNS cutovers based on application health checks
• DDoS protection
• Log Analysis Tools for intrusion correlation and mitigation 
• Designs infrastructure components to support our high availability strategy
• Virtual machine architecture
• Container architecture
• Network architecture
• Security systems architecture
• High availability architecture
• GeoLocation Failover and Redundancy 
• Designs multi-availability failover and cluster strategies
• GeoLocation Availability
• DNS Routing and Management Strategy
• Multi-Region Deployment and Updates
• Secure Routing and IDP Management 
• Security Reviews and Testing
• Review CVE and Test Reports for Security Flaws
• Perform Periodic Security Reviews
• Advise on code compliance and security best practices
• Ensure NIST, CIS, OWASP, and HIPAA regime compliance.
Management
• Manages the shared service capacity to support product development initiatives for AppDev, QA, Product/Business and Information Security teams.
• Co-Governs the Infrastructure team portfolio, helps define the team roadmap, and helps set priorities for project delivery Sets standards and best practices for managing day-to-day infrastructure operations
• Partners with Senior Director, Development Operations to support and complete their technology vision
• Provides Level 3 issue resolution support to resolve complex technical issues
• Ensures all AZ Deployments are in sync
• Ensures request routing aligns with performance strategies
Security
• Defines security policies and standards in collaboration with security and legal partners
• Ensures compliance with security policies and vulnerability mitigation through established standards and practices
• Manages and performs security audits and remediations on a weekly basis, and implements proactive security measures
• Manages security access controls, DNS, and Logging services
 

Knowledge, Skills and Abilities (KSAs):

• Bachelor’s degree or equivalent experience, and 8+ years of industry experience required
• Professional experience implementing nontrivial applications in Python, Typescript, and Bash required
• Experience with compliance requirements and industry standards such as HIPAA, PCI, NIST, CIS, OWASP required
• Strong Linux System Administration skills and extensive knowledge of Infrastructure-as-Code tooling and server patch management
• 5+ years experience using the following platforms/toolkits: Jenkins, Github, AWS, ECS, Nginx, Docker, PgSQL, Elasticache, Opensearch, Prometheus, Grafana, Tenable, Splunk, SaltStack, Terraform
• 5+ years experience with System Hardening Regimes and Techniques, and IDP/IDS tools like Palo Alto