Senior Engineer, IT Operations, Infrastructure & Cloud

Rodan and Fields Beauty

Job Description

Department:
Information Technology |

Employment Type:

Full-Time | Work Arrangement:
Hybrid |

Experience:

5–8 Years

Rodan and Fields Beauty is looking for a Senior Engineer, IT Operations, Infrastructure & Cloud to design, operate, and secure the systems that keep our business running. This role owns our cloud infrastructure on Google Cloud Platform (GCP), our on-premises network and security appliances (Fortinet firewalls and Extreme Networks switching), our content delivery and remote‑access layer (Akamai and OpenVPN), and our Microsoft 365 E5 security stack (Microsoft Defender, email security, and Microsoft Copilot security).

The ideal candidate is a hands‑on engineer who thrives on solving complex infrastructure and security problems, automating manual work, and keeping critical systems highly available.

• Cloud Infrastructure & Operations (GCP)
• Design, deploy, and manage infrastructure on Google Cloud Platform, including Compute Engine, VPC networking, IAM, Cloud Storage, and managed services.
• Own cloud cost optimization, capacity planning, and performance tuning across GCP environments.
• Build and maintain infrastructure-as-code (Terraform or Deployment Manager) and CI/CD pipelines to support repeatable, auditable deployments.
• Monitor cloud environments proactively using tools such as Cloud Monitoring/Logging, and drive continuous improvement in uptime and reliability.
• Network & Perimeter Security
• Administer, configure, and troubleshoot Fortinet firewalls (Forti Gate) including policies, VPN tunnels, SD-WAN, and high‑availability configurations.
• Manage and maintain Extreme Networks switching infrastructure, including VLANs, routing, and network segmentation across corporate and data center environments.
• Administer Akamai services (CDN, WAF, DNS, and/or bot/security products) to protect and optimize web-facing applications.
• Manage OpenVPN infrastructure for secure remote access, including configuration, certificate lifecycle, and troubleshooting connectivity issues.
• Monitor network performance and security events, and lead troubleshooting and root‑cause analysis for network incidents.
• Microsoft 365 E5 Security & Collaboration
• Administer and optimize the Microsoft E5 security suite, including Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365).
• Manage email security controls (anti‑phishing, anti‑malware, Safe Links/Safe Attachments, DKIM/DMARC/SPF) to protect against email‑borne threats.
• Support governance, deployment, and security posture management for Microsoft Copilot security and other AI‑enabled Microsoft 365 tools.
• Partner with security and compliance stakeholders to maintain Microsoft Secure Score and remediate identified risks.
• End User Compute & Service Desk Leadership
• Provide functional leadership and direction to the Tech Bar/Service Desk team, ensuring timely, high-quality support for end user compute issues (laptops, mobile devices, peripherals, and workplace applications).
• Establish and monitor service desk processes, ticket queues, and SLAs, and coach the team on escalation paths for complex infrastructure, network, or security issues.
• Act as the escalation point between the Service Desk and infrastructure/security teams, ensuring end user issues are resolved efficiently and root causes are addressed.
• Drive improvements to end user compute standards, imaging, and deployment processes in partnership with the Service Desk team.
• General IT Operations
• Serve as an escalation point for complex infrastructure, network, and security incidents; participate in an on‑call rotation as needed.
• Maintain accurate documentation for systems, configurations, and standard operating procedures.
• Support audits and compliance efforts (e.g., SOC 2, PCI, or similar) related to infrastructure and security controls.
• Evaluate new tools and technologies, and provide recommendations to improve reliability, security, and operational efficiency.
• Collaborate cross‑functionally with application, security, and business teams to support company initiatives and projects.

• Educat…