Director, Network Infrastructure & Security

Allegheny County Airport Authority•Moon Township, PA

3d•Onsite

About The Position

Under the broad supervision of the Executive Vice President & CTO, the Director, Network Infrastructure & Security is a senior technical leadership role responsible for the design, implementation, and operational integrity of the organization's enterprise network, server, physical infrastructure, and cybersecurity programs. This leader will serve as the primary technical and business decision-maker across all infrastructure domains, guiding a high-performing team while aligning technology strategy with organizational objectives. Here is how the Director, Network Infrastructure & Security will help: Leadership & Strategic Direction Provide executive-level leadership across all technical domains including network, server, physical infrastructure, and cybersecurity. Own all technical and business decisions within these domains, ensuring alignment with enterprise goals, risk tolerance, and regulatory requirements. Communicate complex technical concepts, architectures, and risk postures clearly to non-technical senior leadership and board-level stakeholders. Build, mentor, and develop a high-performing infrastructure and security team, fostering a culture of accountability and continuous improvement. Project & Financial Management Lead and manage large-scale infrastructure projects from inception through delivery, ensuring on-time and on-budget execution. Develop, own, and balance both capital (CapEx) and operational (OpEx) budgets across all infrastructure domains. Evaluate and negotiate vendor relationships, contracts, and service agreements to optimize cost and performance. Establish and track KPIs and SLAs to measure infrastructure performance and team effectiveness. Network Infrastructure Architect, oversee, and continuously optimize enterprise network infrastructure including LAN, WAN, SD-Access, and data center fabrics. Direct the design and operations of Cisco Software-Defined Access (SDA), Cisco ACI, and Cisco Identity Services Engine (ISE) environments. Manage outside plant (OSP) fiber infrastructure, including carrier services, conduit systems, and field infrastructure. Oversee telecommunications cabling infrastructure in compliance with applicable industry standards (e.g., TIA/EIA, BICSI). Provide leadership over cellular communication systems and radio infrastructure, including in-building distributed antenna systems (DAS) and enterprise wireless deployments. Firewall & Perimeter Security Direct the architecture, deployment, and ongoing management of Palo Alto Networks firewall platforms across the enterprise. Ensure perimeter and internal segmentation strategies align with zero-trust principles and evolving threat landscapes. Server & Virtualization Infrastructure Oversee enterprise server and virtualization platforms, including VMware vSphere/vCenter, vSAN, and associated SAN/NAS storage architectures. Drive capacity planning, lifecycle management, and disaster recovery strategies for compute and storage environments. Cybersecurity Program Management Own and mature the organization's cybersecurity program in alignment with industry frameworks (e.g., NIST CSF, CIS Controls, ISO 27001). Provide technical oversight and strategic direction across the following security domains: Endpoint Protection — EDR/XDR platform management and policy enforcement Vulnerability Scanning — enterprise-wide scanning programs, remediation tracking, and reporting DNS Security — protective DNS filtering and threat intelligence integration SIEM — log aggregation, correlation, alerting, and incident response workflows Data Loss Prevention (DLP) — classification policies, monitoring, and enforcement Microsoft 365 Security — Defender suite, Purview compliance, conditional access, and secure configuration baselines Multi-Factor Authentication (MFA) — enterprise-wide MFA strategy, deployment, and exception management Lead incident response planning, tabletop exercises, and post-incident reviews to continually strengthen organizational resilience.

Requirements

Bachelor’s degree in Computer Science/Information Technology or equivalent
10+ years of progressive experience in enterprise network and infrastructure engineering
5+ years in a senior leadership or management capacity
Demonstrated experience managing complex, multi-site infrastructure environments
Proven track record of managing large capital projects and operating budgets
Possess, or obtain prior to employment, a valid driver’s license. Note: license must be maintained throughout employment
Deep technical understanding of Cisco SDA, Cisco ACI, and Cisco ISE architecture and design principles
Strong working knowledge of Palo Alto Networks firewall architecture, including Panorama, NGFW policy design, and Prisma integrations
Proficiency with VMware server virtualization and SAN/NAS storage architectures
Thorough understanding of cybersecurity best practices, frameworks, and enterprise security technologies
Experience with OSP fiber infrastructure, carrier services, and structured cabling standards
Familiarity with cellular communication systems, radio infrastructure, and distributed antenna systems (DAS)
Must be able to understand and speak clearly in English

Nice To Haves

Studies have shown that women and people of color are less likely to apply to jobs if they don’t meet every single qualification. As a Smarter Airport, we recognize that talent is not always related job history and skills come from valuable experiences that aren’t always shown on a resume. If you are excited to make a positive change for our region, but your experience doesn’t align perfectly, we encourage you to apply. You may be the right candidate for our organization, whether it be this role or another.

Responsibilities

Provide executive-level leadership across all technical domains including network, server, physical infrastructure, and cybersecurity.
Own all technical and business decisions within these domains, ensuring alignment with enterprise goals, risk tolerance, and regulatory requirements.
Communicate complex technical concepts, architectures, and risk postures clearly to non-technical senior leadership and board-level stakeholders.
Build, mentor, and develop a high-performing infrastructure and security team, fostering a culture of accountability and continuous improvement.
Lead and manage large-scale infrastructure projects from inception through delivery, ensuring on-time and on-budget execution.
Develop, own, and balance both capital (CapEx) and operational (OpEx) budgets across all infrastructure domains.
Evaluate and negotiate vendor relationships, contracts, and service agreements to optimize cost and performance.
Establish and track KPIs and SLAs to measure infrastructure performance and team effectiveness.
Architect, oversee, and continuously optimize enterprise network infrastructure including LAN, WAN, SD-Access, and data center fabrics.
Direct the design and operations of Cisco Software-Defined Access (SDA), Cisco ACI, and Cisco Identity Services Engine (ISE) environments.
Manage outside plant (OSP) fiber infrastructure, including carrier services, conduit systems, and field infrastructure.
Oversee telecommunications cabling infrastructure in compliance with applicable industry standards (e.g., TIA/EIA, BICSI).
Provide leadership over cellular communication systems and radio infrastructure, including in-building distributed antenna systems (DAS) and enterprise wireless deployments.
Direct the architecture, deployment, and ongoing management of Palo Alto Networks firewall platforms across the enterprise.
Ensure perimeter and internal segmentation strategies align with zero-trust principles and evolving threat landscapes.
Oversee enterprise server and virtualization platforms, including VMware vSphere/vCenter, vSAN, and associated SAN/NAS storage architectures.
Drive capacity planning, lifecycle management, and disaster recovery strategies for compute and storage environments.
Own and mature the organization's cybersecurity program in alignment with industry frameworks (e.g., NIST CSF, CIS Controls, ISO 27001).
Provide technical oversight and strategic direction across security domains: Endpoint Protection, Vulnerability Scanning, DNS Security, SIEM, Data Loss Prevention (DLP), Microsoft 365 Security, and Multi-Factor Authentication (MFA).
Lead incident response planning, tabletop exercises, and post-incident reviews to continually strengthen organizational resilience.

Benefits

Two plan options for healthcare coverage from high-quality insurance carriers
ACAA-funded Health Reimbursement Account (HRA) that will help offset the cost of many medical expenses
Dental plans (included with healthcare coverage) offer an option covering children’s orthodontia
Flexible Spending Account (FSA) to help pay for health care and dependent care expenses on a pre-tax basis
Allegheny County Employees Pension Plan, a defined-benefit plan that vests after 10 years of service
Deferred Compensation Plan, which allows employees to contribute part of their pay on a pre-tax basis into long-term retirement investments
Robust Employee Assistance Program (including access to free counselling sessions, financial guidance, and care coordination)
Life insurance options
Wellness program
Eligibility for the Public Service Loan Forgiveness program