Sr Manager, Site Reliability Engineering (InfoSec)

Job description

Job Description

Your Career

We are actively seeking a highly motivated DevOps/SRE Senior Manager to lead our Global InfoSec SRE team, based at our HQ in Santa Clara and in our offices in Tel Aviv.

This position is critical for ensuring leadership continuity and effective day-to-day oversight for our team, especially given the global distribution of our SRE group.

The InfoSec SRE group is fundamental to ensuring the reliability and availability of the production environment that hosts our InfoSec services.

We empower the entire InfoSec organization by developing and maintaining crucial tools, infrastructure, and automations.

In this role, you will play a key part in planning, executing, and reporting various infrastructure and security projects, as well as managing and resolving high-priority production maintenance issues and incidents.

As the Senior Manager for the Infosec SRE Group, you will lead a team in a cutting-edge environment.

Your role is crucial in steering the development and operation of our ability to secure our products’ development, which includes:

• AWS GCP and Azure as the cloud providers
• Terraform for Infrastructure as Code
• Microservices architecture over Kubernetes
• GitOps practices
• Prometheus as the observability platform
• Deployments automation
• Cloud cost optimization

As the Senior Manager, you will work closely with other leaders to coordinate priorities and efforts between requests from other teams, needs for the Product Security teams, FedRAMP strict infrastructure security requirements, and general requests for all InfoSec teams.

Your Impact

• Team Leadership and Development: Leading, mentoring, and fostering the growth of a high-performing team of SRE Engineers, promoting a culture of continuous improvement, innovation, and collaboration.
  
  You will provide hands-on guidance, coaching, and mentorship to support professional development, ultimately boosting team morale and retention.

• Automation Strategy and Execution: Taking full end-to-end responsibility for defining and building automation processes across diverse InfoSec services.
  
  This involves driving a transformative journey towards significant automation milestones, including:

  • Increase automation adoption across SRE processes within the next year, which will substantially reduce manual interventions.
  • Targeting time savings of hundreds of working hours per month through enhanced automation-driven efficiencies across workflows.
  • Reducing operational costs, achieved through optimized resource utilization and the reduction of labor-intensive manual tasks.
  • Accelerating incident resolution by aiming for a reduction in mean time to detect (MTTD) incidents and a reduction in mean time to respond (MTTR).
  • Improving change deployment efficiency by accelerating deployment cycles and reducing deployment..
  • Fostering a robust culture of automation within the team, providing necessary training, resources, and opportunities for skill development.

• Infrastructure Ownership and Security: Owning InfoSec cloud infrastructure that is managed through Infrastructure as Code, ensuring its reliability, scalability, and security.
  
  This includes:

  • Securing production environments and integrating new, market-leading security tools and features.
  • Overseeing the deployment, maintenance, upgrade, scaling, monitoring, and optimization of critical InfoSec services.
  • Implementing and maintaining robust Agent deployments, addressing any deployment gaps, and ensuring comprehensive coverage across organizational assets.
  • Remediating InfoSec's policy violations and leading vulnerability patching efforts to maintain zero fixable vulnerabilities.

• Advanced Monitoring and Alerting: Overseeing the implementation and continuous enhancement of advanced monitoring and alerting systems to proactively detect and respond to incidents.
  
  This involves configuring intelligent alerts that provide actionable insights and reduce alert fatigue.

• Dedicated FedRAMP Program Leadership: Acting as a dedicated leader for our FedRAMP environment, which is crucial for effective stakeholder management and project success within this highly regulated space.
  
  Your responsibilities will specifically include:

  • Engaging directly with FedRAMP stakeholders, managing expectations, and ensuring alignment with project objectives.
  • Overseeing the ownership of InfoSec services infrastructure within FedRAMP, and ensuring zero exploitable vulnerabilities within this environment.
  • Driving automation advancements tailored for the FedRAMP environment to significantly reduce manual involvement and optimize remediation processes.
  • Ensuring clear security status and coverage visibility for GCAT within the FedRAMP environment.
  • Addressing the unique challenges posed by the FedRAMP environment, such as frequent upgrade cycles and strict, short SLAs for identified vulnerabilities.

• Strategic Collaboration and Operational Efficiency: Collaborating effectively with Product teams and other cross-functional teams to integrate and refine processes, maximizing efficiency and ensuring alignment with overall business goals.
  
  You will also serve as a key point of escalation for customer issues during US and Tel Aviv working hours, ensuring prompt and effective resolution.

Your Experience 

• 5+ years of proven industry experience with DevOps methodologies, tools, and technologies, including a deep understanding of cloud security best practices and emerging industry trends.
• 4+ years of experience in leading engineering teams within large organizations or innovative startups.
• 6+ years of proficiency in managing cloud infrastructure, particularly with AWS and GCP, coupled with strong skills in Infrastructure as Code using Terraform/Terragrunt.
• High proficiency in scripting languages, with a preference for Shell scripts and Python.
• Extensive experience with Linux operating systems.
• High proficiency with virtualized and containerized environments, including Kubernetes and Docker.
• Familiarity with security-related infrastructure best practices and application security principles.
• Demonstrated ability to establish strong relationships with internal and peer stakeholders to understand and meet their needs while maintaining high-quality system operations.
• Excellent communication and interpersonal skills, with a proven track record of effective team leadership and cross-team coordination.
• Ability to quickly grasp new technologies, prioritize effectively, and manage multiple responsibilities simultaneously.
• Experience in navigating the complexities of business requirements and ensuring high service reliability in a dynamic environment.
• US citizenship for FedRAMP access.

Education

• BS/MS in Computer Science or a related technical field, or equivalent practical experience.

The Team

Think about it, security for an information security company.

Working at a high-tech cybersecurity company within the Information Security team is a once in a lifetime opportunity.

You’ll be joined with the brightest minds in technology, our global teams on the front line of defense against cyberattacks.

We’re joined by one mission – but driven by the impact of that mission and what it means to protect our way of life in the digital age.

Join a dynamic and fast-paced team that feels excitement at the prospect of a challenge and feels a thrill at resolving security gaps that inhibit our privacy.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location.

For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $180,000 - $275,500/YR.

The offered compensation may also include restricted stock units and a bonus.

A description of our employee benefits may be found .

Our Commitment



We’re problem solvers that take risks and challenge cybersecurity’s status quo.

It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability.

If you require assistance or accommodation due to a disability or special need, please contact us at  .

Palo Alto Networks is an equal opportunity employer.

We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Required Skill Profession

Operations Specialties Managers