Infrastructure & Security Manager

Sourceability•Austin, TX

8d•Hybrid

About The Position

Sourceability is building a new Global Engineering Organization (GEO) to strengthen technology ownership, improve production reliability, and build long-term internal engineering and infrastructure capability. We are looking for an Infrastructure & Security Manager to lead the infrastructure and security function within GEO. This role is responsible for server, network, data center, hybrid infrastructure, identity, access control, infrastructure security, vulnerability management, monitoring, disaster recovery readiness, and operational risk reduction for business-critical systems. This is a functional management role. The Infrastructure & Security Manager will manage infrastructure and security capacity, priorities, vendors, operational processes, team execution, and escalation handling. Platform / DevOps & Data will own CI/CD, deployment automation, environments, data platform, and release tooling. Software Engineering will own application code and application-level technical delivery. Business IT / end-user IT boundaries may be handled separately depending on the company operating model. The right candidate should be hands-on enough to understand technical details, challenge weak plans, manage urgent incidents, and guide infrastructure and security engineers, while also being able to build process discipline and communicate risk clearly to leadership. This is a hybrid role working from our Austin, TX office. This role focuses on technology infrastructure and security operations that support production systems, engineering teams, and critical business platforms. The role may coordinate with end-user IT or business technology teams, but it should not become a helpdesk or general desktop support manager role.

Requirements

7+ years of experience in infrastructure, systems engineering, network operations, security operations, or IT operations supporting production environments.
3+ years of experience in a management, team lead, or senior ownership role for infrastructure, SysOps, network, or security operations teams.
Strong hands-on understanding of Windows and Linux server environments, virtualization, storage, backup systems, networking, VPNs, firewalls, DNS, monitoring, and identity/access management.
Experience supporting business-critical systems where uptime, access control, backup/recovery, and incident response are important operational responsibilities.
Practical understanding of cybersecurity operations including vulnerability management, patching, endpoint/server protection, privileged access, incident response, and security monitoring.
Experience managing hybrid infrastructure environments with on-premise data centers, cloud services, remote access, and distributed office connectivity.
Ability to manage vendors and managed service providers while maintaining internal ownership and accountability.
Experience building operational processes such as runbooks, change control, access reviews, incident response, RCA, DR testing, and infrastructure documentation.
Ability to prioritize urgent production issues against longer-term infrastructure and security improvement work.
Strong communication skills with the ability to explain infrastructure risk, security risk, operational tradeoffs, and remediation needs to technical and non-technical stakeholders.
Ability to lead distributed teams and coordinate work across multiple regions and time zones.
Strong ownership mindset, practical judgment, and ability to make decisions under pressure during infrastructure or security incidents.

Nice To Haves

Experience with Microsoft-based enterprise environments including Active Directory, Azure AD / Entra ID, Group Policy, Windows Server, SQL Server infrastructure dependencies, and Microsoft 365 security controls.
Experience with virtualization platforms such as VMware or Hyper-V, storage platforms, backup platforms such as Veeam, and monitoring tools such as Zabbix or similar systems.
Experience with network/security platforms such as Fortinet, Barracuda, Meraki, UniFi, or similar firewall, VPN, SD-WAN, or secure access technologies.
Familiarity with endpoint management, RMM, patching, EDR/MDR, SIEM, vulnerability scanners, and security alert triage processes.
Experience with data center operations, hardware lifecycle planning, server/storage/network refresh projects, and vendor coordination.
Experience with compliance frameworks or practices such as SOC 2, ISO 27001, NIST, GDPR, or other audit/security programs.
Relevant certifications such as CISSP, CISM, CompTIA Security+, Microsoft, VMware, Fortinet, or cloud infrastructure/security certifications.
Experience in electronic components, technology distribution, supply chain, logistics, manufacturing, e-commerce, or similar B2B environments.

Responsibilities

Lead and manage the infrastructure and security function within GEO, including current and future SysOps, infrastructure, network, and cybersecurity resources.
Own operational reliability for infrastructure supporting business-critical systems, including servers, virtualization, storage, network connectivity, VPNs, firewalls, identity, and monitoring.
Establish clear infrastructure ownership, escalation paths, operational runbooks, change discipline, and incident response expectations.
Manage infrastructure and security priorities, capacity, vendors, and delivery risks in partnership with the CTO and other GEO leaders.
Partner with Platform, DevOps & Data teams to support stable environments, deployment needs, monitoring, observability, and release readiness.
Partner with Software Engineering teams to ensure infrastructure constraints, access needs, environment dependencies, and production risks are understood and addressed.
Lead practical vulnerability management, patch management, configuration hardening, access reviews, and remediation tracking across infrastructure and security tooling.
Own or coordinate response to infrastructure and security incidents, including triage, escalation, communication, root cause analysis, and remediation follow-up.
Ensure disaster recovery, backup, restore, and business continuity processes are documented, tested, and improved over time.
Manage infrastructure vendors, data center providers, cloud providers, network providers, managed security providers, and equipment suppliers with attention to service quality, cost, risk, and accountability.
Improve monitoring and alerting coverage for infrastructure and security events so production risks are detected before they become business outages.
Build practical security operations discipline without creating unnecessary bureaucracy or blocking engineering delivery.
Support compliance and audit evidence collection related to infrastructure, access control, vulnerability management, patching, and security operations.
Develop team members through coaching, clear expectations, performance feedback, documentation discipline, and operational standards.
Report infrastructure status, security risks, open incidents, remediation progress, vendor issues, and operational gaps to GEO leadership and senior stakeholders.