Responsibilities
- Lead the design, deployment, and continuous improvement of network architecture spanning colocation facilities and cloud platforms.
- Design and manage network segmentation, VLAN configurations, VPN connections, routing protocols, DNS, and DHCP across geographically dispersed sites.
- Operate and fine-tune pfSense firewalls and Snort intrusion detection and prevention systems to maintain network security and segmentation compliance.
- Configure and manage Cloudflare WAF and proxy settings to safeguard public-facing dealer websites and e-commerce platforms.
- Develop hybrid networking solutions that integrate on-premises data centers with AWS as applications transition to the cloud.
- Administer and enhance Windows Server environments (versions 2016 through 2022) across production, staging, and development environments.
- Manage core Windows services including Active Directory, IIS, Group Policy, and related components supporting dealer-facing applications.
- Oversee Proxmox virtualization clusters, ensuring efficient resource utilization and infrastructure scalability.
- Design, implement, and test robust disaster recovery and data backup strategies to ensure business continuity.
- Participate in a round-the-clock on-call schedule to respond to critical infrastructure incidents.
- Assess and propose cloud-native alternatives for existing on-premises systems in compute, storage, networking, and monitoring.
- Build infrastructure solutions that support the migration and modernization of legacy applications and data platforms.
- Implement infrastructure-as-code practices using tools like Terraform or CloudFormation and define cloud operational standards.
- Act as the lead technical resource for achieving and maintaining PCI DSS 4.0 compliance across all relevant systems.
- Support ongoing ISO 27001 compliance and contribute to achieving SOC 2 certification.
- Conduct vulnerability assessments using Tenable/Nessus and lead remediation efforts across the infrastructure.
- Enhance and maintain security tools including Microsoft Defender, DUO MFA, and Cloudflare security configurations.
- Ensure encryption standards, access controls, and network segmentation testing align with current regulatory requirements.
- Create and maintain comprehensive documentation for network topologies, system configurations, and compliance records.
- Serve as the senior technical authority, guiding infrastructure and security strategy and setting architectural standards.
- Provide mentorship and knowledge transfer to junior team members through direct collaboration and coaching.
- Lead technical decision-making and promote a culture centered on automation, documentation, and iterative improvement.
- Work closely with development, product, and executive teams to plan and execute technology modernization roadmaps.
Work Arrangement
On-site — Atlanta, GA
Other
- On-site position requiring 2-3 days per week in Atlanta, GA.
- Participation in a 24/7/365 on-call rotation for urgent incident response.
