Sr. Manager - IT Security

Sr. Manager - IT Security

Location:

Orange, CT

Salary Range: $155,600 - $194,500

Schedule:

On Site - Office

The Sr. Manager, Network & Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid's network security and enterprise infrastructure security platforms. This role leads two teams responsible for protecting connectivity and critical IT services across the enterprise: (1) Network Security (firewalls, IPS/IDS, network segmentation, perimeter security, and cloud network security) and (2) Infrastructure Security / IT Security (enterprise security platforms, identity & access management, privileged access, endpoint security, vulnerability management, and compliance support).

Strategy, Roadmap and Operating Model

• Leads and integrates Network Security and Infrastructure Security capabilities, establishing a cohesive operating model, clear ownership, and measurable outcomes for protection of enterprise connectivity and IT platforms.
• Defines the technology strategy, target-state architecture, and multi-year roadmaps for network security and enterprise infrastructure security services, aligned to Avangrid standards, business priorities, and the enterprise risk posture.
• Establishes lifecycle management programs to ensure security technologies are correctly deployed, maintained, patched, and modernized; manages roadmaps aligned to enterprise strategy, technology evolution, and continuous transformation.

Network Security and Infrastructure Security Platforms

• Provides leadership over current and future enterprise security technologies and services, including platforms such as Fortinet, Palo Alto, Check Point, Cisco, WAF and edge security platforms such as Akamai WAF, secure web gateway/proxy platforms such as Zscaler, privileged access platforms such as Cyber Ark, network detection and response platforms such as Extra Hop, or equivalent enterprise technologies.
• Defines and governs engineering standards, reference architectures, and technology guardrails for network security controls (e.g., perimeter, segmentation, IDS/IPS, and cloud network security) and infrastructure security platforms (e.g., identity and access management, privileged access, endpoint security, vulnerability management, and security tooling operations).
• Champions security-by-design by embedding security requirements into architecture, engineering standards, configuration baselines, and operational processes.
• Provides security leadership and architectural governance for cloud network and infrastructure security capabilities, in partnership with Cloud and Platform teams.
• Leads hardening management by selecting applicable standards and reference guides, defining configuration baselines, prioritizing controls, and establishing maturity levels for secure infrastructure and network security profiles.

Firewall, SD-WAN, Segmentation and Secure Connectivity

• Drives modernization and standardization of enterprise firewall and SD-WAN services, including policy governance, rule base optimization, segmentation alignment, VPN/NAT standards, high availability, logging, monitoring, change validation, and operational readiness.
• Defines segmentation and secure connectivity patterns (e.g., site-to-site connectivity, remote access, cloud connectivity, and third-party connectivity) that reduce exposure, support resiliency, and enable business outcomes.
• Partners with architecture and engineering stakeholders to ensure consistent implementation of perimeter, internal segmentation, and edge security controls across enterprise and cloud environments.

Operations, Resiliency and Compliance

• Delivers high levels of operational security, resiliency, and reliability for network and infrastructure security services; defines operational programs and identifies opportunities for improving operational efficiency and reliability as demanded by Avangrid corporate applications.
• Manages operational security performance, including service reliability, incident response partnership, threat containment support, vulnerability remediation execution, and continuous improvement of controls and monitoring.
• Ens…