We are seeking an accomplished Executive Director of IT Operations to provide senior operational leadership and hands-on technical expertise for our enterprise IT infrastructure and end-user services organization. This role reports to the VP of IT & Security and manages both the Director of Infrastructure Operations and ServiceDesk/Desktop Support operations while maintaining deep technical involvement in complex implementations and serving as the subject matter expert across our technology stack. The ideal candidate combines proven leadership capabilities with advanced technical skills, providing strategic planning, operational reporting, and direct technical execution for critical infrastructure initiatives while ensuring exceptional end-user service delivery.

ROLE AND RESPONSIBILITIES:

Organizational Scope & Direct Oversight

• Infrastructure Operations and End-User Services Leadership
• Direct management of Director of Infrastructure Operations and the manager of desktop support services.
• Operational oversight of Senior Systems Administrators, Network Engineers, and technical infrastructure staff
• Strategic coordination with infrastructure teams across Linux/Windows, Virtualization platforms such as VMware, storage, networking, and cloud platforms
• Technical mentorship for infrastructure professionals and career development planning
• Oversight of infrastructure Tier 1/2/3 support operations and escalation processes
• Demonstrated understanding of ITSM ticketing platform for incident, problem, and request management. ServiceNow experience preferable.
• Strategic planning for end-user experience improvement and support optimization
• Ensure all systems are patched and secured in accordance with company policy, servers, laptops, and network equipment

Strategic Planning & Operational Reporting

• Develop comprehensive operational plans, technology roadmaps, and capacity planning strategies for infrastructure and service delivery organizations
• Create detailed project plans, resource allocation strategies, and timeline management for major infrastructure and service delivery initiatives
• Generate executive-level reporting on infrastructure performance, service desk metrics, project status, and operational KPIs for VP leadership
• Coordinate budget planning, resource forecasting, and capital expenditure recommendations across infrastructure and end-user services
• Lead infrastructure architecture planning and technology standardization initiatives

Hands-On Technical Leadership & Implementation

• Personally lead complex technical implementations including major infrastructure upgrades, migrations, and architectural changes
• Serve as escalation point for critical technical issues requiring advanced expertise across multiple technology domains
• Conduct advanced troubleshooting and resolution for complex infrastructure problems spanning multiple platforms
• Design and implement enterprise-level solutions including virtualization clusters, storage architectures, and network infrastructures
• Lead proof-of-concept development and technical evaluation of new technologies and platforms
• Provide hands-on technical guidance during critical maintenance windows and emergency response situations

DESIRED QUALIFICATIONS:

Technology Stack Subject Matter Expertise

• Enterprise Infrastructure Platforms: Expert-level knowledge of virtualization (VMware vSphere, KVM), enterprise storage (SAN/NAS), Object based storage, Cisco switches, fiber channel switches, Load Balancers, Firewalls, and overall network architecture serving as foundation for all service.
• Data Centers: Primary contact for our collocation data centers day to day operations.  Hands on installation of technology during expansion and refresh projects. Capacity planning, Circuit inventory, IPAM and connectivity between data centers and branch offices.
• Container Platforms & Cloud-Native Architecture: Expert-level knowledge of on-premises Kubernetes platforms, container orchestration, microservices architectures, networking (CNI), storage (CSI), security contexts, RBAC, network policies, admission controllers, and multi-tenancy patterns. Experience building Kubernetes as an internal platform service for development teams.
• Compliance-Driven Infrastructure: Familiarity with NIST 800-53 Rev 5 controls and NIST SP 800-190 container security guidance; practical experience implementing compliance requirements in containerized environments; familiarity with CMMC Level 2 requirements and government contract security obligations
• Operating Systems: Microsoft Windows Server current versions, Active Directory design, support and GPO’s, Advanced expertise in Linux (RHEL, CentOS, Ubuntu)
• DevSecOps & CI/CD Security: Experience working with the security team to help design and secure CI/CD pipelines. Working to integrate security controls including remediation of the results from the security teams container image scanning, vulnerability management, and policy-as-code enforcement
• Automation and Infrastructure-as-Code: Deep technical knowledge of Terraform, Ansible, GitOps workflows, and automation frameworks for declarative infrastructure management
• Understanding of network segmentation, VLAN’s, routing , ACL’s, Illumio Micro segmentation, service mesh implementations (Istio, Linkerd), mutual TLS, and identity-aware access controls for containerized environments
• Observability and Monitoring: Expert knowledge of observability platforms including Prometheus/Grafana for infrastructure metrics and AppDynamics for application performance monitoring, ability to interpret metrics, define dashboard requirements, and collaborate with platform teams on monitoring strategies
• Endpoint Management: Knowledge of modern endpoint management solutions including SCCM, Intune, Autopilot for desktop deployment automation
• Service Delivery: Understanding of ITIL frameworks, service desk operations, and end-user support best practices
• Emerging Technologies: Technical evaluation and implementation of new platforms and architectural patterns in compliance-constrained environments
• Cloud Technologies: We are an on-premise environment, however, experience with AWS, Azure, Google Cloud platforms primarily for architectural reference and hybrid patterns
• Networking: Advanced knowledge of enterprise networking, software-defined networking, service mesh architectures (Istio, Linkerd), and zero-trust network design for containerized workloads
• Database Systems: Experience supporting database teams using enterprise database platforms (SQL Server, PostgreSQL, MySQL) including containerized database operations and persistent storage strategies. Backup and recovery.
• ITSM Platforms: Deep experience with ticketing platform capabilities including incident management, problem management, change management, and service catalog workflows; ability to define operational requirements and request platform enhancements and KPI’s

Education & Professional Experience

• Bachelor's degree in Engineering, Computer Science, Information Technology, or related technical field
• 12+ years of progressive experience in enterprise infrastructure management and technical leadership
• 5+ years of senior management experience.
• Proven track record leading large-scale infrastructure transformation and modernization projects
• 3+ years of experience managing service desk or end-user support operations in enterprise environments

Leadership & Management Skills

• Proven ability to lead technical teams while maintaining hands-on technical involvement
• Strong project management capabilities with PMP certification or equivalent experience
• Excellent communication skills for both technical teams and executive leadership
• Experience with vendor management, contract negotiation, and strategic technology partnerships
• Ability to balance strategic planning responsibilities with operational execution and technical implementation

Technical Certifications (Multiple Required)

• Virtualization: VMware VCP-DCV, VCAP-DCA, or equivalent advanced certifications
• Cloud Platforms: AWS Solutions Architect Professional, Azure Solutions Architect Expert, or Google Cloud Professional (for architectural reference)
• Project Management: PMP, Prince2, or equivalent project management certifications a plus
• ITIL: ITIL Expert or equivalent service management certifications a plus

*The salary range reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $200,000.00 annually. Pay varies by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

To learn more about our company and other opportunities visit us at www.mettel.net

Keywords: IT Infrastructure, IT Operations, New York Jobs, IT Jobs, Indeed, LinkedIn, Google, Lever, #ITInfrastructure, #ITOperations, #NewYorkJobs, #ITJobs, #Indeed, #LinkedIn, #Google, #Lever, #Ladders, Information Technology Operations, IT Management, Information Technology Infrastructure, Global IT Program Manager, Global IT Operations

We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC!

ROLE AND RESPONSIBILITIES:

The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk.  They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions.

Responsibilities:

Vulnerability & Threat Management

• Conduct vulnerability assessments across containerized and traditional infrastructure
• Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases.
  • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few.
• Lead remediation efforts and track vulnerability lifecycle management
• Analyze security alerts and incidents, performing root cause analysis
• Contribute to threat hunting activities and security monitoring

Security Platform Architecture support and administration

• Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms
• Manage security aspects of VMware infrastructure, storage systems, and network segmentation
• Configure and maintain authentication systems (SAML, RADIUS) and identity management platforms such as OKTA.

Security Tools Administration & Management

CyberArk Privileged Access Management

• Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components
• Configure privileged account onboarding, password management policies, and access workflows
• Implement CyberArk integrations with Active Directory, applications, and infrastructure systems
• Manage CyberArk clustering, disaster recovery, and high availability configurations
• Troubleshoot CyberArk performance issues and optimize system configurations

Splunk Enterprise & Security Operations

• Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders
• Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection
• Develop custom Splunk searches, dashboards, and alerts for security use cases
• Manage Splunk data models, knowledge objects, and correlation rules
• Optimize Splunk performance, storage management, and cluster operations

Vulnerability Management & Security Testing

• Administer Tenable Security Center and Nessus scanning infrastructure
• Configure vulnerability scanning policies, schedules, and remediation workflows
• Integrate vulnerability data with other security tools and ticketing systems
• Develop custom vulnerability reporting and metrics dashboards
• Coordinate vulnerability assessment activities and penetration testing support

Security Orchestration & Response (SOAR)

• Implement and maintain SOAR platforms for security automation
• Develop automated playbooks for incident response, threat hunting, and remediation activities
• Create custom integrations between the SOAR platform and existing security tools
• Design automated workflows for security alert triage and response coordination
• Maintain SOAR platform performance and troubleshoot automation issues

System Administration & Infrastructure

• Test disaster recovery, and business continuity procedures for security systems

Security Operations Support

• Provide Level 2/3 technical support for security incidents and tool-related issues
• Participate in incident response activities and forensic investigations
• Develop and maintain security procedures and troubleshooting guides
• Support 24/7 security operations center (SOC) activities and on-call rotation
• Collaborate with security analysts to optimize detection rules and reduce false positives

Compliance & Governance

• Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits
• Maintain security tool documentation, configurations, and change management procedures
• Implement logging and audit trail requirements for compliance frameworks
• Develop security metrics and KPI reporting for management and auditors
• Ensure security tools meet data retention and privacy requirements

Cross-functional Collaboration

• • Partner with IT infrastructure teams on security tool deployment and maintenance
  • Collaborate with application development teams on security tool integrations
  • Work with network teams to implement security monitoring and traffic analysis
  • Support risk management activities with technical security assessments
  • Provide security expertise for project planning and technology implementations

Desired Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent
• Vendor-specific certifications: CyberArk Defender/Sentry, Splunk Certified Admin/Architect, Tenable Certified Security Practitioner

Technical Skills - Core Platform:

Security Tools Proficiency (3+ years each)

• CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment
• Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization
• Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning
• SOAR Platforms: Hands-on experience with security orchestration tools (Phantom, Demisto, IBM Resilient, or similar)

System Administration (5+ years combined)

• Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation
• Windows Server administration including PowerShell scripting and Active Directory integration
• Network security concepts and implementation (firewalls, IDS/IPS, network segmentation)

Security Specializations

• Enterprise PKI and certificate management
• Log aggregation, analysis, and correlation techniques
• Incident response procedures and forensic analysis
• Threat intelligence integration and threat hunting methodologies
• Security automation and orchestration best practices

Professional Experience

• 4+ years of cybersecurity experience with focus on enterprise security tools
• 4+ years of hands-on system administration in enterprise environments
• Experience with self-hosted, on-premises security infrastructure
• Proven track record of security tool implementations and migrations
• Experience participating in and supporting compliance audits and regulatory requirements

Additional Skills

• Strong scripting abilities (Python, Bash, PowerShell) for automation and integration
• Experience with API integration and custom security tool development
• Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred
• Understanding of DevSecOps practices and CI/CD pipeline security
• Excellent troubleshooting and analytical problem-solving skills
• Strong documentation and technical writing capabilities

Key Competencies

• Technical Leadership: Ability to serve as subject matter expert across various Security tool sets.
• Problem-Solving: Advanced analytical skills for complex security tool issues and integrations
• Communication: Ability to explain technical concepts to both technical and non-technical stakeholders
• Project Management: Experience leading security tool implementations and upgrades
• Continuous Learning: Commitment to staying current with emerging security technologies and threats

Preferred Qualifications

• Degree in Cybersecurity or related field
• Experience in regulated industries (government)
• Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications
• Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike
• Background in security architecture and enterprise security frameworks

*The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering