VP, Head of Cloud Solutions

CFSB•New York, NY

7d•$170,500 - $215,000•Hybrid

About The Position

Community Federal Savings Bank (CFSB) is seeking a senior technology leader to own the bank’s cloud strategy, platform engineering, and cloud operating model. Reporting to the CIO/CTO, this role owns the multi-year cloud roadmap and leads the team responsible for building and operating the cloud platform, including landing zones, automation, networking, and controls used by other technology teams. This is a hands-on leadership position in a regulated environment, combining executive-level investment planning, technical review, and support for explaining cloud controls to examiners. The role manages five to eight cloud engineers and partners with Information Security, Risk, Compliance, Enterprise Architecture, and product squads. It is the accountable technology owner for implementing and evidencing security and regulatory requirements in the cloud. The team participates in a shared on-call rotation and provides after-hours business support; this role is the senior escalation point. The position is hybrid, two days per week, for candidates located in the NYC Metro Area, or fully remote in 23 select states. Applicants must be permanently authorized to work for any U.S. employer; visa sponsorship is not available. CFSB is a federally chartered bank founded in 2001 and headquartered in New York City. It provides loans, bill payments, card services, internet banking, and merchant processing, with a focus on relationship banking. CFSB is an equal opportunity employer.

Requirements

Deep hands-on AWS expertise across IAM, networking, compute, storage, database, and cost management.
Strong cloud networking expertise, including VPC and subnet design, Transit Gateway, CloudWAN, segmentation, and hybrid connectivity.
Proven infrastructure-as-code experience; Terraform is preferred, including modules, state, and refactoring into code.
Experience with Git-based workflows, CI/CD, and production-scale container platforms such as ECS or EKS.
Cloud security and multi-account governance experience, including least-privilege IAM, encryption, secrets, and Control Tower.
Ability to lead complex, multi-step, large-scale infrastructure activities such as data-center exit migrations, VPN cutovers, and database migrations.
Sound judgment under constraint, balancing delivery speed against risk, cost, and regulatory obligations.
Technical credibility with engineers and fluency with executives, auditors, and examiners.
Ability to succeed across Security, Risk, and delivery teams, with a strong hiring and development record.
Track record of leading teams to successfully and timely execute commitments to executive leadership and the board of directors.
Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.
At least 10 years in technology infrastructure, platform, or cloud engineering, including at least 3 years leading technical teams.
Demonstrated ownership of a production cloud environment at enterprise scale; advisory-only, architecture-only, or program-management-only exposure is insufficient.
Experience in a regulated industry with formal audit, control, and change-management discipline, including direct support of audits or examinations.
Permanent authorization to work for any employer in the United States; the employer cannot sponsor or take over sponsorship of temporary employment visas.

Nice To Haves

Terraform experience is preferred.
Financial services experience and familiarity with FFIEC guidance and GLBA are preferred.

Responsibilities

Own and maintain the multi-year cloud strategy and migration roadmap, sequenced against business priorities, risk appetite, and budget cycles.
Translate strategy into executive-ready business cases and committee materials, and secure funding and alignment for cloud investments.
Set cloud target architecture and standards with Enterprise Architecture, including reference patterns, approved services, and guardrails.
Define and report program metrics covering migration progress, platform reliability, control coverage, and unit cost trends; advise leaders on build-versus-buy and cloud-versus-on-premises decisions.
Lead design, build, and operation of the cloud platform, including multi-account landing zones, identity and access, network architecture and hybrid connectivity, observability, backup, and resilience.
Establish infrastructure-as-code and pipeline-based delivery as the default provisioning mechanism and eliminate manual, undocumented change.
Own the cloud CI/CD, container, and DevOps tooling consumed by squads; enforce standards for code review, environment promotion, change management, and documentation.
Ensure environments meet availability and recovery objectives, lead resilience testing, and serve as senior escalation point for major incidents through permanent corrective action.
Own implementation and evidence of cloud technical controls that satisfy policies and standards set by Information Security, Risk, and Compliance; escalate gaps between cloud practices and policy.
Serve as cloud subject matter expert in internal and external audits and regulatory examinations, including FFIEC and GLBA obligations; produce control evidence and remediation plans.
Embed guardrails as code, including configuration baselines, encryption and key management, privileged access controls, and continuous compliance monitoring; remediate findings and drift to agreed timelines.
Contribute cloud expertise to risk assessments, third-party technology reviews, and change and exception review boards; review cloud policies while ownership, approval, and risk acceptance remain with second-line functions.
Own the cloud budget, forecast spend, develop cost savings plans, and explain variances to Finance and the CIO/CTO.
Manage the AWS relationship, including account-team engagement, support-tier decisions, and technical escalation; provide technical input to procurement and renewals while Procurement and Vendor Management lead commercial negotiations.
Recruit, develop, and retain cloud engineers; set goals, coach, conduct performance reviews, and create technical development paths that avoid single-person critical capabilities.
Balance squad-embedded assignments against core platform work as priorities shift, and represent cloud engineering in technology leadership forums.