The opportunity:

Flexport is a platform for global trade in an industry that comprises 12% of the global GDP.  We are the first licensed freight forwarder and customs brokerage built around a modern tech stack.  We help the world's fastest-growing brands manage their international supply chains, providing a fully-managed service for moving products between any two places on the planet.

Exceptional software development is integral in allowing us to fulfill our mission of fixing the user experience in global trade. At Flexport you’ll develop products that are at the forefront of reshaping the entire logistics & supply chain industries. You’ll work alongside self-starters interested in solving real-world problems and streamlining the inefficiencies in the complex global trade industry. You’ll have the opportunity to reshape an industry by creating the new operating system for global trade.

Our engineers are top-notch software developers who love listening to the users, working as a team, and proactively taking the lead whenever necessary. The role involves learning the business of freight forwarding, modeling the work that people do to move freight, designing solutions to make it more efficient, and thinking innovatively to automate much of it. In this role, you will have an opportunity to own the design and development of key parts of our forwarding systems. You will have influence on subsystem design and help contribute to a team culture around practices that are critical to a quality product. 

About the team:

We have multiple teams in Shanghai and Shenzhen working on a suite of core products and services that enable Flexport operation to scale, including Forwarding Application, Client Application, Shipper Application, WMS, Consol Planning Tool, Document Platform (AI empowered), Email Platform, Compliance Platform, Work Assignment Engine, Exception Management, AI Copilot, Insight Builder (AI Data Analytics) and so on. 

In addition, we have a NAWS (Native AWS) team that develops infrastructure solutions for our products and services using the latest Infrastructure as Code (IaC) technology: CDKTF (Cloud Development Kit for Terraform). Our scope includes, but is not limited to, CI/CD, observability, DevX, data subsetting (TS3), IaC, template engines, and various open-source projects. Additionally, the team provides technical guidance to engineers across the organization.

We are looking for engineers who love learning, are passionate about collaborating, and desire to build solutions with a global impact.

You will:

• Build highly available, secure, distributed systems in a microservice architecture.
• Build cutting edge infrastructure solutions to help improve development experience across the company. And, work closely with other engineering teams to help them solve infrastructure related problems.
• Design, develop, test and maintain systems that represent the real-world intricacies of logistics entities, such as shipper, client, cargo, document, carrier, container, email etc.
• Collaborate with some of the best engineers in the industry to work on complex business and technical problems.
• Work closely with business partners and product managers to distill complex business problems into elegant technical solutions.
• Build and launch products rapidly and incrementally. We ship to production dozens of times per day.
• Ensure our products maintain a high-quality bar. We believe in anticipating issues by obsessing over metrics and applying key learnings from post-mortems to all our services.
• Geek out about shipping and logistics. (We do this often.)

You should have:

Basic Qualifications

• 3+ years of experience writing software, and a strong engineering background.
• 2+ years of design and architecture knowledge as well as familiarity with object-oriented analysis and design patterns (OOA/OOD)
• Knowledge of at least one programming language such as TypeScript, Ruby, C, C++, Java, or Kotlin
• Bachelor's degree in Computer Science or related technical field, or equivalent experience

Preferred Qualifications

• A love of simple, well-tested code that is easy to extend and hard to break.
• A bias for action. When you see a problem, you solve it.
• The ability to convey technical ideas in common terms to business partners, product managers, and engineers alike.
• Experience building large scale, high-performance systems in a complex, multi-tiered, distributed environment
• Understanding of performance tradeoffs, load balancing and operational issues
• Knowledge of professional software engineering practices & best practices for full software development life cycle, including coding standards, code reviews, source control management, continuous deployments, testing, and operations
• Experience with Infrastructure as Code (IaC) tools such as CDKTF, Terraform, AWS CloudFormation, or similar.
• Having basic concepts in AWS services, including IAM, EC2, ECS, S3, Lambda, Step Functions, EventBridge, and VPC, or equivalent services from other cloud providers.
• Familiarity with CI/CD pipelines, infrastructure automation, and monitoring/observability tools.
• Ability to troubleshoot and optimize distributed systems and cloud deployments.
• Non-optional: an aptitude for learning quickly.

Engineering Culture and Values:

• Check out our Key Values profile.

#LI-onsite

Purpose of Position

• The Director, Operations and Cyber Security will be responsible for leading the strategy, governance, and execution of enterprise technology operations, infrastructure stability, cyber security, and service resilience across the organization. The incumbent will ensure that all technology platforms, operational processes, and security controls are scalable, reliable, compliant, and aligned with business growth objectives.
• The incumbent will collaborate closely with business stakeholders, product, engineering, legal, compliance, and external partners to establish a strong operational foundation, protect enterprise assets, and continuously enhance service quality, cyber resilience, and incident readiness in a fast-paced and dynamic environment.

Job Description

• Lead and oversee enterprise technology operations, infrastructure, service management, cyber security, and operational support functions to ensure stable, secure, and efficient business operations.
• Define and drive the operations and cyber security strategy, roadmap, governance model, and operating standards in alignment with business priorities and risk appetite.
• Ensure high availability, performance, resilience, and recoverability of all in-house and third-party platforms supporting eCommerce, retail, corporate systems, customer operations, and internal business functions.
• Establish and enforce best practices for IT operations, cyber security, access control, vulnerability management, data protection, system monitoring, backup, disaster recovery, and incident response.
• Build and maintain a strong security and compliance framework covering infrastructure, applications, endpoints, identities, vendors, and employee security awareness.
• Lead the governance and continuous improvement of operational processes including service request management, incident management, problem management, change management, release readiness, and escalation management.
• Partner with engineering and product teams to ensure operational readiness, security-by-design, and supportability are embedded into the technology delivery lifecycle.
• Oversee cyber risk identification, threat detection, vulnerability remediation, and security incident response, while ensuring timely communication, resolution, and post-incident review.
• Liaise with all business units to ensure operational requirements, resilience expectations, and security needs are understood, prioritized, and delivered effectively.
• Manage internal teams and external vendors/service providers to ensure service quality, cost efficiency, and compliance with agreed service levels and security standards.
• Drive business continuity and disaster recovery planning, testing, and improvement to minimize operational disruption and strengthen organizational resilience.
• Provide leadership, mentoring, and capability building for operations and security teams, fostering a culture of ownership, discipline, collaboration, and continuous improvement.

Requirements

• Strong hands-on leadership experience in technology operations, infrastructure, service management, and cyber security.
• Proven track record of leading operations and security functions for large-scale digital, eCommerce, or consumer-facing businesses.
• Deep knowledge of IT operations, cloud and on-prem infrastructure, network security, endpoint security, IAM, vulnerability management, backup, and disaster recovery.
• Strong experience in designing and implementing operational governance, service management processes, and cyber security controls in fast-paced environments.
• Experience in leading major incident management, crisis response, root cause analysis, and remediation programs.
• Strong understanding of security frameworks, policies, standards, and compliance practices, including risk management and audit readiness.
• Excellent stakeholder management with the ability to work across technology, business, legal, compliance, and external partners.
• Successfully delivered business results with a mix of in-house teams and external service providers or managed service partners.
• Built, led, and developed high-performing operations and/or security teams.
• Known for promoting best practices, governance discipline, and a strong culture of accountability and continuous improvement.
• At least 8 years of relevant working experience in technology operations, infrastructure, cyber security, or related leadership roles, with a proven track record in enterprise-scale environments.
• Strong analytical, problem-solving, decision-making, and communication skills.
• Previous experience in eCommerce, retail, omnichannel, or other high-transaction environments is highly preferred.
• Happy to work in a buzzing multicultural environment.
• Professional certifications such as CISSP, CISM, CISA, ITIL, ISO 27001, or relevant cloud/security certifications are a plus.
• Proficient in spoken and written Chinese and English.