DescriptionJob Overview and ResponsibilitiesThe Senior Manager - Infrastructure Cybersecurity is a technical leader responsible for managing a team of cybersecurity architects and engineers who design, implement, and maintain the security architecture, patterns, and controls that protect United's core infrastructure - network, compute, platform/operating systems, and cloud - along with enterprise mobile security and designated identity and access management (IAM) services. This leader sets the technical direction for infrastructure security and builds a high-performing team.
- Lead, recruit, and develop a team of infrastructure security architects and engineers, including performance and talent management
- Own the security architecture, reference patterns, and hardening baselines for network, platform/OS, cloud, mobile, and assigned IAM services
- Define and publish approved security patterns and reference architectures (secure-by-design blueprints, guardrails, and standards) that engineering teams build against
- Drive the Zero Trust network strategy, including macro- and micro-segmentation, software-defined perimeter, secure internet edge (SASE/SSE, ZTNA, secure web gateway, DNS security, DDoS protection), and secure remote access
- Advance security automation and policy as code so infrastructure controls are codified, repeatable, and continuously validated
- Coordinate remediation of infrastructure findings and non-compliant items to meet applicable compliance standards and best practices
- Monitor changes in regulations and compliance standards (e.g., NIST 800-53) and proactively update standards, patterns, and architectures
- Manage vendors and external partners that support infrastructure security tooling and services
- Assist with annual budgeting and monthly forecasting
QualificationsWhat's needed to succeed (Minimum Qualifications):- Bachelor's degree required, STEM field preferred
- 5+ years of cybersecurity or infrastructure engineering experience, including years of leading technical teams
- Strong knowledge of infrastructure security architecture and hardening across network, platform/operating system, and cloud environments
- Proficient knowledge of modern network security: zero trust architecture, macro/micro-segmentation, SASE/SSE and ZTNA, next-generation firewalls, secure web gateway, DNS security, and DDoS protection
- Proficient knowledge of cloud security (AWS and/or Azure), including cloud-native controls, landing zone design, and secure configuration
- Working knowledge of identity and access management (authentication, authorization, MFA, privileged access, directory services) and enterprise mobile/endpoint security
- Proficient knowledge of threat modeling and risk management; working knowledge of vulnerability remediation processes
- Experience authoring security patterns, reference architectures, technical standards, and SOPs
- Proficient understanding of compliance frameworks (e.g., NIST 800-53, CIS Benchmarks)
- Ability to manage business stakeholders, vendors, and external partners
- Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills
- Must be legally authorized to work in the United States for any employer without sponsorship
- Successful completion of interview required to meet job qualification
- Reliable, punctual attendance is an essential function of the position
What will help you propel from the pack (Preferred Qualifications):- Master's degree
- 12+ years of relevant experience
- Security leadership certifications such as CISSP, CISM, or CCSP
- Cloud and platform security certifications such as AWS Certified Security - Specialty, Microsoft AZ-500 or SC-100, or GIAC (GSEC, GCIA, GDSA)
- Identity certifications such as Microsoft SC-300 or Okta Certified Administrator
- Experience designing and rolling out enterprise segmentation and zero trust network strategies across data center, campus, and cloud, with platforms such as next-generation firewalls, NAC, and SASE/SSE
- Hands-on experience securing enterprise mobile fleets (e.g., Intune, Workspace ONE, Jamf) and mobile threat defense
- Hands-on experience with identity platforms (e.g., Active Directory / Entra ID, Okta), privileged access management, and zero trust access models
- Experience transforming traditional data center security controls into cloud-native architectures and CSPM-driven guardrails
- Proficiency with infrastructure as code, policy as code, and security automation (e.g., Terraform, PowerShell, Python)
- Proficient knowledge of PKI, certificate lifecycle management, and cryptography
- Demonstrated ability to think strategically about business, product, and technical challenges
- Experience in airlines, transportation, or other regulated and critical-infrastructure environments
Posting End Date: 11/15/2026
