Director Infrastructure and Security

Job Description

Job Description

Purpose/Job Function:

The Director of Infrastructure & Security is a senior leadership role responsible for defining, implementing, and overseeing the organization's technology strategy across cloud and on-premises environments. Operating within a fast-paced logistics and transportation company, this individual will ensure that IT systems are secure, reliable, scalable, and aligned with business operations. This role serves as the primary authority on cloud architecture, infrastructure management, cybersecurity governance, and DevOps engineering practices. The Director will lead and develop a multi-disciplinary IT team spanning infrastructure, security, and DevOps, while collaborating closely with operations, finance, and executive leadership to drive digital transformation and operational resilience. In addition, this role is responsible for upholding our core values ethics, engagement, and excellence.

Essential Functions:

Cloud Infrastructure & Architecture

• Design, deploy, and manage cloud infrastructure across platforms such as Microsoft Azure, AWS, or Google Cloud, ensuring high availability, performance, and cost efficiency.
• Develop and maintain a hybrid IT architecture that integrates cloud-based services with on-premises systems including data centers, servers, and networking equipment.
• Oversee cloud provisioning, capacity planning, and lifecycle management of virtual machines, containers, storage, and networking resources.
• Implement Infrastructure-as-Code (IaC) practices using tools such as Terraform or Azure Bicep to automate and standardize deployments.
• Manage vendor relationships with cloud service providers, negotiating contracts and optimizing licensing costs.

Cybersecurity – Cloud & On-Premises

• Develop, enforce, and continuously improve the organization's cybersecurity framework, aligned with industry standards such as NIST CSF, ISO 27001, or CIS Controls.
• Lead the implementation and maintenance of security controls across all environments, including firewalls, endpoint protection, identity and access management (IAM), and SIEM solutions.
• Oversee vulnerability assessment programs, penetration testing engagements, and remediation planning.
• Manage cloud security posture, including configuration of security groups, zero-trust network access, data encryption, and compliance monitoring.
• Develop and maintain an Incident Response Plan; lead the organization's response to security incidents and breaches.
• Ensure compliance with applicable data protection regulations and industry standards, including those relevant to transportation logistics (e.g., CTPAT, TSA cybersecurity requirements).
• Provide cybersecurity awareness training programs for all staff to reduce human-related risk.

DevOps Management & Engineering Practices

• Lead and manage the DevOps function, overseeing CI/CD pipeline design, build automation, and release management across development and operations teams.
• Implement and maintain DevOps tooling including version control systems (e.g., Git/GitHub/GitLab), pipeline orchestration (e.g., Azure DevOps, Jenkins, GitHub Actions), and container platforms (e.g., Docker, Kubernetes).
• Drive a culture of collaboration between development, QA, and operations, reducing deployment friction and accelerating time-to-value for technology initiatives.
• Oversee environment management across development, staging, and production, ensuring consistency, stability, and security at every stage of the software delivery lifecycle.
• Define and enforce DevSecOps practices, embedding automated security scanning and compliance checks directly into CI/CD pipelines.
• Establish and track DevOps performance metrics including deployment frequency, lead time, change failure rate, and mean time to recovery (MTTR).

IT Operations & Infrastructure Management

• Manage and maintain on-premises infrastructure including servers, network switches, routers, VPNs, and storage area networks (SANs).
• Ensure business continuity through robust disaster recovery (DR) and backup strategies, conducting regular DR tests and updates.
• Oversee IT service desk operations, ensuring efficient resolution of employee technical issues and maintaining SLA standards.
• Manage software licensing, asset inventory, and hardware refresh cycles.
• Support the deployment and integration of logistics management systems (TMS, WMS, ERP) with underlying IT infrastructure.

Strategy, Leadership & Governance

• Develop and execute a multi-year IT roadmap aligned with the company's growth objectives and operational requirements.
• Build, lead, and develop a multi-disciplinary IT team spanning infrastructure, cybersecurity, and DevOps functions — setting clear goals, conducting performance reviews, and providing ongoing coaching and professional development opportunities.
• Define team structure, hiring plans, and resource allocation to support current operations and future growth, including the evaluation of contractors and managed service providers where appropriate.
• Foster a culture of accountability, continuous improvement, and psychological safety within the IT department.
• Own the annual IT budget lifecycle — from initial planning and capital/operational expenditure forecasting through to monthly variance reporting, year-end reconciliation, and executive-level financial presentations.
• Maintain transparent budget tracking and reporting dashboards, providing leadership with clear visibility into IT spending, project costs, and ROI on key technology investments.
• Present technology strategy, project updates, and security posture reports to executive leadership and the board as needed.
• Evaluate and recommend emerging technologies that improve logistics efficiency, fleet tracking, route optimization, or supply chain visibility.
• Champion the responsible adoption of generative AI tools across the organization, identifying use cases, evaluating platforms, and working with department heads to implement AI-assisted workflows that improve operational efficiency.
• Establish governance policies for generative AI usage, including data privacy guardrails, acceptable use standards, and integration with existing security frameworks.

Qualifications & Experience:

Required

• Bachelor’s degree in information technology, Computer Science, Information Systems, or a related field.
• 7+ years of progressive IT experience, with at least 3 years in a senior or managerial role.
• Demonstrated experience managing cloud environments (Azure, AWS, or GCP) in a production setting.
• Proven track record implementing and managing cybersecurity programs in both cloud and on-premises environments.
• Strong knowledge of network architecture, firewall management, and enterprise security tools.
• Experience with identity and access management (e.g., Azure AD / Entra ID, MFA, SSO).
• Hands-on experience with backup and disaster recovery solutions.
• Excellent communication skills, with the ability to translate complex technical concepts for non-technical stakeholders.

Preferred

• Experience in the logistics, transportation, freight, or supply chain industry.
• Familiarity with logistics platforms such as TMS (e.g., MercuryGate, McLeod), WMS, or fleet management systems.
• Relevant professional certifications, such as:
• CISSP, CISM, or CompTIA Security+
• AWS Certified Solutions Architect, Microsoft Azure Administrator (AZ-104), or equivalent
• ITIL Foundation
• Experience with regulatory compliance frameworks applicable to transportation (e.g., CTPAT, FMCSA cybersecurity guidelines).
• Prior experience managing IT for a distributed workforce across multiple sites or facilities.
• Demonstrated experience evaluating, piloting, or deploying generative AI solutions (e.g., Microsoft Copilot, OpenAI, or similar platforms) within a business environment.
• Hands-on experience managing a DevOps function or team, including CI/CD pipeline ownership, container orchestration, and DevSecOps integration.
• Familiarity with DevOps platforms such as Azure DevOps, GitHub Actions, Jenkins, or GitLab CI/CD.
• Experience managing IT budgets and producing financial reports for senior leadership, including capex/opex tracking and cost-benefit analysis.

Working Conditions: This position will be sitting in front of a computer for long hours at a time and may cause eye irritation or even muscle strain.

This position does not require any strenuous or physical activity.

Customary Work Hours: 8:00 A.M. to 5:00 P.M., Monday through Friday. Position may require extended hours including evenings and weekends for special events.

AFS is an equal opportunity employer and prohibits discrimination and harassment of any kind: AFS is committed to the principle of equal employment opportunity for all employees and to provide employees with a work environment free of discrimination and harassment.