Manager, Infrastructure Engineering

About the job

Purpose

Tiger BioSciences is seeking a hands-on, operationally focused Manager, Infrastructure Engineering to lead the day-to-day operation, security, and reliability of our enterprise infrastructure. This role is responsible for the network, wireless, and Microsoft Azure cloud environments that support all Tiger BioSciences facilities, as well as the daily execution of cyber operations, including security monitoring, incident response, and vulnerability remediation. The Manager serves as the primary day-to-day point of contact for our external cyber security advisory partner and ensures our infrastructure remains secure, resilient, and compliant as the organization grows through product launches, facility expansion, and M&A activities.

Responsibilities

Infrastructure Operations

• Manage the daily operation, configuration, and maintenance of enterprise network infrastructure, including firewalls, routers, switches, and wireless access points across all facilities.

• Administer and optimize the Microsoft Azure cloud environment, including virtual networks, compute, storage, identity (Microsoft Entra ID), and backup services.

• Maintain network segmentation, access control, VPN, and secure remote access solutions in line with security and regulatory requirements.

• Monitor infrastructure availability, performance, and capacity, and proactively identify and resolve issues before they impact the business.

• Lead patching, firmware updates, and lifecycle management for infrastructure hardware and software.

• Maintain backup, disaster recovery, and business continuity capabilities, including periodic recovery testing.

• Plan and execute network and infrastructure buildouts for new facilities, expansions, and acquired businesses.

• Maintain accurate network diagrams, configuration baselines, asset inventory, and operational runbooks.

• Support Azure cost management and FinOps practices, including resource right-sizing and usage reporting.

Cyber Operations

• Oversee daily security monitoring and triage of alerts from SIEM, EDR/XDR, firewall, and cloud security tools.

• Lead incident response activities, including detection, containment, eradication, recovery, and post-incident review, and maintain incident response playbooks.

• Manage the vulnerability management program, including scanning, risk-based prioritization, remediation tracking, and reporting to leadership.

• Serve as the primary day-to-day point of contact for the external cyber security advisory partner, coordinating monitoring, escalations, threat intelligence, and remediation activities.

• Support the operation of the Cyber Threat Operations Center and the continuous improvement of detection and response capabilities.

• Implement and enforce security hardening standards (e.g., CIS Benchmarks) across network, server, endpoint, and cloud environments.

• Support internal and external audits, cyber insurance requirements, and risk assessments by providing evidence and completing remediation actions.

• Support cyber awareness training and phishing simulation programs.

Change Management, IT Quality & Compliance

• Execute infrastructure changes in accordance with ITIL change management processes and controlled documentation practices.

• Partner with IT Quality to ensure infrastructure supporting GxP systems is qualified, documented, and maintained in a validated state.

• Maintain a working knowledge of FDA 21 CFR 1271, FDA 21 CFR 820, FDA 21 CFR Part 11, AATB standards, ISO standards, cGMP/CGTP, other relevant regulations/standards, and internal organizational policies and standard operating procedures.

Leadership & Vendor Management

• Manage relationships with infrastructure vendors, carriers, and service providers, and support budgeting, procurement, and contract renewals.

• Report infrastructure and security metrics, risks, and KPIs to the Director, Enterprise Technology and IT leadership.

• Participate in an on-call rotation and respond to outages and security incidents outside of normal business hours as needed.

• Travel domestically up to 20% to support multi-site operations, facility buildouts, and integration activities.

• Perform other duties as assigned.

Qualifications/Requirements

• 5+ years of experience in IT infrastructure or network engineering, with at least 3 years in a leadership or senior technical lead capacity.

• Hands-on experience managing enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco), routing and switching, and enterprise wireless networks.

• Demonstrated experience administering Microsoft Azure infrastructure and Microsoft Entra ID.

• Experience in security operations, including SIEM, EDR/XDR, vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7), and incident response.

• Experience working with managed security service providers or external cyber security advisory partners.

• Working knowledge of security frameworks such as NIST CSF, CIS Controls, or ISO 27001.

• Excellent communication, documentation, and problem-solving skills, with the ability to explain technical risk to non-technical stakeholders.

• Clearance of favorable background investigation required.

Preferred Qualifications

• Relevant certifications such as CCNP, PCNSE, Fortinet NSE, Microsoft Azure Administrator (AZ‑104), Azure Network Engineer (AZ‑700), Azure Security Engineer (AZ‑500), CompTIA Security+/CySA+, GCIH, or CISSP.

• Experience in a regulated industry such as medical device, life sciences, or pharmaceuticals, including GxP environments.

• Experience with ITIL processes and IT service management tools (e.g., ServiceNow, Jira Service Management).

• Experience with automation and infrastructure as code (e.g., PowerShell, Terraform, Bicep).

• Experience supporting manufacturing or OT networks, SD-WAN, and network access control (NAC).

• Experience supporting technology integration for mergers and acquisitions.