Senior Manager, Infrastructure Operations and Compliance

Cloudflare•San Francisco, CA

1d•Onsite

About The Position

Cloudflare is seeking a Senior Manager to lead a unified Infrastructure Operations function. This role oversees physical network reliability, operational security, and global regulatory compliance across over 750 data center sites in more than 125 countries. The leader will ensure 24x7 operational availability of the network infrastructure through incident response, hardware break-fix, circuit management, and physical hardware lifecycle operations. This role also owns physical access control policy and administration, periodic access reviews, and evidence-based compliance delivery for various frameworks including SOC 2 Type II, ISO 27001, FedRAMP, ISMAP, and IRAP. The position involves leading two teams (Operations and Security and Compliance), setting organizational direction, developing talent, and being accountable for the full lifecycle of Cloudflare's physical infrastructure. The ideal candidate can manage organizational tensions such as speed versus rigor, global scale versus precise detail, and partner dependency versus uncompromising standards. They should possess a strong understanding of data center colocation environments, network architecture, and hardware operations, as well as the ability to maintain audit readiness and navigate relationships with GRC, auditors, and global partners. A key focus will be on building smarter processes, better tooling, and AI-assisted operations to enhance team capacity.

Requirements

7+ years in infrastructure operations, data center operations, network operations, or a closely related field.
At least 3 years in a people management role.
Demonstrated experience managing managers and holding multiple teams accountable to operational SLAs simultaneously.
Direct experience with physical data center operations including hardware lifecycle management, decommissioning, colocation vendor management, or break-fix operations.
Familiarity with compliance frameworks relevant to physical infrastructure: SOC 2, ISO 27001, FedRAMP, or equivalent — at an operational (not auditor) level.
Strong program management instincts: comfortable running complex, multi-workstream initiatives with dependencies across teams, vendors, and time zones.
Proven track record of driving operational efficiency through process redesign or automation adoption.
Excellent written and verbal communication skills; able to translate technical operational details into executive-level reporting and vice versa.

Nice To Haves

Experience managing 24x7 on-call operations teams, including PagerDuty or equivalent tooling and incident escalation frameworks.
Familiarity with network infrastructure concepts (circuit management, cross-connect decommissioning, network operations).
Experience with physical access control systems, access control list management, or vendor portal administration at scale.
Knowledge of ITAD (IT Asset Disposition) vendor management and compliance requirements for secure destruction.
Background in a rapidly scaling, global infrastructure environment (hyperscaler, cloud provider, major CDN, or similar).
Experience driving SSO or identity federation projects across large third-party vendor ecosystems.
Familiarity with Jira-based operational workflows, Netbox or similar DCIM tools, and Confluence-based documentation practices.

Responsibilities

Lead two teams: the Operations team and the Security and Compliance team, setting goals, developing talent, and fostering a culture of operational excellence and compliance-consciousness.
Hold both teams accountable to shared SLAs and quality standards, balancing the urgency of 24x7 incident response with the rigor of compliance audit cycles.
Serve as the escalation point for cross-team issues, complex vendor negotiations, and decisions impacting both operational and regulatory domains.
Own the end-to-end decommissioning (DECOM) process, including physical collections, secure asset destruction, serial number verification, compliance evidence filing, and records closure.
Drive ITAD vendor relationships, escalation paths, and contractual SLAs for asset destruction across all regions.
Maintain audit-readiness of decommissioning records for SOC 2, ISO 27001, PCI DSS, and FedRAMP control requirements.
Be accountable for 24x7 incident response coverage across all Cloudflare locations, including carrier outages, DC facility issues, hardware degradation, and power/temperature events.
Oversee hardware break-fix operations, coordinating with Metro Technicians, third-party repair vendors, and remote contractors.
Drive maturity in circuit decommissioning, RMA management, and physical collections processes.
Ensure on-call schedules, handover protocols, and incident SLAs are consistently met across APAC, EMEA, and NASA shifts.
Be accountable for quarterly and monthly access review cycles across 750+ global data center sites covering SOC 2 Type II, ISO 27001, FedRAMP Moderate/High, ISMAP, and IRAP frameworks.
Own the physical access provisioning and deprovisioning function, ensuring SLA adherence and ACL integrity.
Serve as the senior owner of the team’s automation initiatives.
Maintain executive-level relationships with GRC leads across all active compliance frameworks and represent DCSC in audit conversations.
Represent DCSC at Monthly Business Reviews and executive infrastructure health checks.
Drive a significant reduction in manual operational burden by identifying and prioritizing automation opportunities in access reviews, decommissioning evidence collection, portal data extraction, and incident triage.
Sponsor and guide the development of internal tooling (DCSC Portal, automation scripts, AI-assisted workflows) to multiply team capacity.
Evaluate and adopt AI tooling for repetitive operational tasks, documentation acceleration, root-cause analysis, and compliance evidence generation.