Senior Manager, Infrastructure Operations and Compliance

Cloudflare•Washington, DC

2d•$156,000 - $251,000

About The Position

Cloudflare is seeking a Senior Manager to lead a unified Infrastructure Operations function covering physical network reliability, operational security, and global regulatory compliance across more than 750 data center sites in over 125 countries. The role is responsible for 24x7 availability of network infrastructure, including incident response, hardware break-fix, circuit management, and physical hardware lifecycle operations. It also owns physical access-control policy and administration, periodic access reviews, and evidence-based compliance delivery across frameworks including SOC 2 Type II, ISO 27001, FedRAMP, ISMAP, and IRAP. The Senior Manager leads the Operations team and the Security and Compliance team, setting organizational direction, developing talent, and owning results across the lifecycle of Cloudflare's physical infrastructure. This includes hardware deployment and maintenance, access controls and reviews, and secure asset retirement and audit evidence. The role requires balancing speed with rigor, global scale with detailed execution, and partner dependencies with consistent standards. The role combines infrastructure operations leadership with continuous audit readiness and stakeholder management involving GRC teams, government auditors, and global partners. The leader is expected to improve processes, tooling, and AI-assisted operations as the company's infrastructure footprint grows. This position reports to the Director, Infrastructure Operations (AMER) and is part of the broader Infrastructure Operations leadership team. Available locations are Austin, Seattle, Denver, Atlanta, and Washington, DC. The application deadline is December 16, 2026.

Requirements

At least 7 years of experience in infrastructure operations, data center operations, network operations, or a closely related field, including at least 3 years in people management.
Demonstrated experience managing managers and holding multiple teams accountable to operational SLAs simultaneously.
Direct experience with physical data center operations, including hardware lifecycle management, decommissioning, colocation vendor management, or break-fix operations.
Operational-level familiarity with physical-infrastructure compliance frameworks such as SOC 2, ISO 27001, or FedRAMP, or equivalent.
Strong program-management skills, including managing complex, multi-workstream initiatives with dependencies across teams, vendors, and time zones.
Proven track record of improving operational efficiency through process redesign or automation adoption.
Excellent written and verbal communication, including the ability to translate technical operational details into executive-level reporting and vice versa.
Ability to lead teams to 24x7 operational standards while advancing longer-term strategic work.
Understanding of physical access controls, decommissioning chain of custody, and the operational importance of compliance obligations.
Experience developing managers, setting clear expectations, giving direct feedback, building trust across functions, and representing an organization at the executive level.
Ability to operate effectively across APAC, EMEA, and NASA time zones, and across global vendors, data center providers, and regulatory jurisdictions.

Nice To Haves

Experience managing 24x7 on-call operations teams, including PagerDuty or equivalent tooling and incident escalation frameworks.
Familiarity with network infrastructure concepts such as circuit management, cross-connect decommissioning, and network operations.
Experience with physical access-control systems, access-control-list management, or large-scale vendor portal administration.
Knowledge of IT Asset Disposition vendor management and secure-destruction compliance requirements.
Experience in a rapidly scaling global infrastructure environment, such as a hyperscaler, cloud provider, or major CDN.
Experience driving SSO or identity federation projects across large third-party vendor ecosystems.
Familiarity with Jira-based operational workflows, Netbox or similar DCIM tools, and Confluence documentation practices.

Responsibilities

Lead the Operations and Security and Compliance teams; set goals, develop talent, and foster operational excellence and compliance-consciousness.
Hold both teams accountable to shared SLAs and quality standards, balancing 24x7 incident response with compliance audit cycles.
Act as the escalation point for cross-team issues, complex vendor negotiations, and decisions spanning operational and regulatory domains.
Own the end-to-end decommissioning workflow, including physical collections and unracking, secure asset destruction and Certificates of Destruction, ITAD vendor management, serial-number verification, compliance evidence filing, and records closure.
Create a unified, auditable decommissioning pipeline from trigger through evidence archiving, eliminating handoff gaps between physical operations and compliance oversight.
Manage ITAD vendor relationships, escalation paths, and contractual asset-destruction SLAs across APAC, EMEA, NASA, and South America.
Maintain audit-ready decommissioning records for SOC 2, ISO 27001, PCI DSS, and FedRAMP controls.
Ensure 24x7 incident-response coverage across Cloudflare locations for carrier outages, data center facility issues, hardware degradation, and power or temperature events.
Oversee hardware break-fix operations with Metro Technicians, third-party repair vendors, and remote contractors.
Improve circuit decommissioning, RMA management, and physical collections processes.
Ensure on-call schedules, handover protocols, and incident SLAs are met across APAC, EMEA, and NASA shifts.
Own quarterly and monthly access review cycles across more than 750 data center sites for SOC 2 Type II, ISO 27001, FedRAMP Moderate/High, ISMAP, and IRAP.
Own physical access provisioning and deprovisioning, including SLA adherence and access-control-list integrity.
Serve as the senior owner of the team's automation initiatives and represent DCSC control obligations in audit conversations with GRC leads.
Represent DCSC at Monthly Business Reviews and executive infrastructure health checks.
Identify and prioritize automation opportunities in access reviews, decommissioning evidence collection, portal data extraction, and incident triage.
Sponsor and guide internal tooling development, including the DCSC Portal, automation scripts, and AI-assisted workflows, to increase team capacity.
Evaluate and adopt AI tools for repetitive operations, documentation, root-cause analysis, and compliance evidence generation.
Manage managers, set expectations, provide direct feedback, and represent the organization at the executive level.

Benefits

Medical/Rx insurance
Dental insurance
Vision insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility and family-forming benefits
On-demand mental health support and Employee Assistance Program
Global travel medical insurance
Short- and long-term disability insurance
Life and accident insurance
401(k) retirement savings plan
Employee Stock Participation Plan
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
Eligibility to participate in Cloudflare's equity plan