Director, Infrastructure & Operations

ForeFlight•Centennial, CO

5h•$171,000 - $210,000•Hybrid

About The Position

The Director of Infrastructure & Operations owns Jeppesen ForeFlight’s network, identity, compute, and database platforms and leads the teams responsible for them. Reporting to the Head of IT & Business Operations, the director is accountable for completing initiatives already in progress and for keeping infrastructure reliable as it is rebuilt. This is a hands-on leadership role that sets direction, holds teams and vendors accountable to measurable outcomes, and leads teams distributed across Denver, Austin, Gdańsk, Germany, and India. The Principal IT Security Architect also reports to this role. The ideal candidate will work in a hybrid arrangement based in Austin, Texas, or Denver, Colorado. The role leads Network Infrastructure, Compute (including Citrix and Remote Compute Services), Database, and Identity teams. It owns network connectivity and platforms, workforce identity and access, IT service management partnerships, the infrastructure CMDB, IT self-service and automation, I&O budgeting and vendor management, and operational partnership with Security. Key owned platforms include Prisma, GlobalProtect, Okta, Entra ID, Active Directory, VMware, and Citrix. Jeppesen ForeFlight provides aviation software solutions for Commercial, Business, Military, and General Aviation sectors. Its products combine Jeppesen’s aeronautical data legacy with ForeFlight’s aviation technology.

Requirements

12 or more years of experience in infrastructure and operations, including 5 or more years leading managers and multidisciplinary engineering teams.
Experience leading a distributed team across US and European time zones, including building or transitioning capability to a new location.
Deep workforce identity experience with Okta and Entra ID/Active Directory, SSO (SAML/OIDC), MFA, and SCIM provisioning, including a completed identity consolidation.
Experience building or fixing an automated joiner/mover/leaver process integrated with an HRIS.
Experience operating hybrid infrastructure, including VMware, enterprise hardware, VDI, and AWS.
Experience running ITSM processes end to end, including incident, problem, change, request, and SLAs.
Experience building or rebuilding a CMDB with automated discovery and maintaining it well enough to drive patching, audit, and cost decisions.
Experience delivering IT automation that measurably reduces ticket volume, such as self-service portals, chat-based assistants, or ITSM workflow automation.
Experience working closely with a security organization on patching, vulnerability remediation, and incident response.
Clear executive communication skills and the ability to turn ambiguous ownership into written agreements.

Nice To Haves

Experience in aviation or another regulated industry with GDPR, ISO 27001, or CMMC obligations.
Scripting and automation experience with Python, PowerShell, or Ansible; experience building or running a Slack or Teams bot for IT requests.
Jira Service Management experience, including Assets and Automation, and a ServiceNow-to-JSM migration.
Experience with discovery and inventory tools such as Flexera.
Certifications such as PCNSE, CCNP, Okta Certified Professional, AWS Solutions Architect, or ITIL.
Pilot or aviation enthusiast.

Responsibilities

Lead network, identity, compute, and database teams across the US, Poland, Germany, and India.
Hire for open network, compute, and identity roles, and develop Poland-based engineers into full owners of I&O services.
Set team structures, career paths, and on-call coverage that work across time zones.
Own WAN, LAN, remote access, and the cloud network edge, including Prisma SD-WAN and Prisma Access.
Manage circuits, carriers, and site connectivity across regional offices, and plan network builds for new and relocating sites.
Own workforce identity end to end, including Okta, Entra ID, Active Directory, SSO, MFA, and directory services.
Drive the joiner/mover/leaver lifecycle in partnership with HR, Facilities, and application owners.
Define where IT holds privileged access and govern it using least privilege and periodic reviews.
Partner on Jira Service Management as the single front door for IT, with request types and SLAs designed around users.
Agree on and report SLAs with supported business units, including production operations in Europe.
Own the CMDB as the infrastructure asset system of record, including owners, dependencies, and patch status, using automated discovery across on-premises environments and AWS.
Maintain CMDB accuracy for use by Security, Finance, and auditors in asset inventory, cost forecasting, and decommission planning.
Own the IT self-service portal and Slack IT Assistant, expanding the access, account, password, distribution-list, and VM actions users can resolve without a ticket.
Automate request routing, approvals, and SLA escalation in Jira Service Management.
Manage automation as a product, including its roadmap, documentation, usage metrics, and coverage by multiple maintainers.
Partner with the CISO on vulnerability remediation, patch latency for internet-facing systems, and incident response.
Partner with Security on operational excellence in network, endpoint management, and messaging systems; security architecture for these areas is owned through the Principal IT Security Architect.
Own the I&O budget, renewals, and forecasts, and present the FY27 plan.
Manage managed-service, consulting, and contractor partners against defined deliverables.
Work with the CISO and Security; Engineering, Cloud Ops, and DevOps; End User Services; Business Applications; Finance and Procurement; HR and Facilities; and Global Data Management.