Infrastructure Platform Lead - IaC, CI/CD & DevSecOps

WME is seeking a Infrastructure Platform Manager to lead hands-on delivery of infrastructure and operations outcomes through Infrastructure as Code, CI/CD automation, and DevSecOps practices. Your job is to build and run a secure, repeatable, self-service infrastructure platform that enables teams to deliver faster with strong guardrails. You should be a deeply technical, delivery-oriented manager who can set direction and still jump into repos, pipelines, and runbooks. You’ll work closely across infrastructure, security, and application teams to establish clear standards and controls aligned to sound frameworks and best-practice doctrines (e.g., CIS Benchmarks, NIST CSF) while removing friction from day-to-day delivery. You have hands-on experience building and operating infrastructure platforms across cloud and hybrid environments, and you are fluent in modern automation patterns including Terraform/OpenTofu, GitHub Actions and/or Spacelift, policy-as-code, secrets management, and end-to-end pipeline governance. You will have direct impact on reliability, security posture, and delivery velocity across WME’s technology platform. The role will report to WME’s Sr. Global Director of Infrastructure and Enterprise Solutions based in Beverly Hills, CA. Responsibilities Platform Delivery & Team Leadership: Lead hands-on execution for the infrastructure platform backlog, balancing reliability, security, and developer experience. Manage, mentor, and grow engineers while remaining technically engaged in design reviews, pull requests, and incident/problem management. Infrastructure as Code (Terraform/OpenTofu) Standards: Own module patterns, naming/tagging conventions, state strategy, environment promotion, and reusable blueprints. Establish contribution rules, versioning, testing, documentation, and reference implementations that enable safe self-service provisioning at scale. CI/CD Platform (GitHub Actions and/or Spacelift): Design and operate pipeline standards for lint/validate/plan/apply, approvals, change promotion, and release management. Implement guardrails such as branch protection, required reviews, artifact integrity, and environment isolation to ensure repeatable, auditable delivery. DevSecOps & Controls: Embed security into the delivery system: secrets management, RBAC, policy-as-code, SAST/DAST and IaC scanning, dependency hygiene, and continuous compliance evidence. Partner with security teams to translate frameworks (CIS Benchmarks, NIST CSF) into practical platform controls and automated checks. Operations, Reliability & Day-2 Automation: Own operational outcomes for the infrastructure platform, including observability (metrics/logs/traces), runbooks, incident response, problem management, and continuous improvement. Implement drift detection, automated remediation where appropriate, and operational patterns that reduce toil and improve mean-time-to-recovery. Governance, Documentation & Enablement: Establish platform documentation, reference architectures, and operational playbooks. Drive adoption through training and office hours, and ensure platform changes are traceable, measurable, and aligned to agreed controls and risk posture. Requirements 8+ years of experience in infrastructure, DevOps, SRE, or platform engineering, including 2+ years leading engineers (formal people management or clear technical leadership with delivery ownership) Strong hands-on expertise with Terraform and/or OpenTofu in production, including modules, remote state/state locking, workspaces, environment strategy, and drift detection Hands-on experience building CI/CD automation using GitHub Actions and/or Spacelift, including PR gates, approvals, release tagging, and environment promotion (Dev → Test → Prod) Demonstrated ability to establish engineering standards and platform controls, and to drive adoption through clear documentation, enablement, and stakeholder management Working knowledge of DevSecOps practices and tools (policy-as-code, secrets management, IaC security scanning, least-privilege access, auditability) aligned to frameworks such as CIS Benchmarks and NIST CSF Experience owning operations and reliability for production platforms, including observability, incident/problem management, and continuous improvement (SLOs/SLIs preferred) Self-directed, curious, and addicted to solving hard problems WME is an equal opportunity employer committed to a diverse and inclusive work environment. Per local requirements and in the interest of transparency, the rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings. Hiring Rate Minimum:

• 120,000 annually (minimum will not fall below the applicable state/local minimum salary thresholds) Hiring Rate Maximum:
• 160,000 annuallyWME is an equal opportunity employer and encourages applications from qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, or religion or belief.

#J-18808-Ljbffr WME - William Morris Endeavour