Infra Lead – Infrastructure Security & Release Operations

TECHJAYS

Lead – Infrastructure Security & Release Operations

Position

Lead – Infrastructure Security & Release Operations

Experience

8+ Years

Location

Coimbatore / Hybrid (Remote option available)

Joining

Immediate or within 30 days preferred

Core Focus: Production Release Management, Change Control, Security Operations, SOC 2 Compliance, Audit Evidence, Identity & Access Management.

Tools & Platforms: Octopus Deploy, TeamCity, AWS (IAM, Security Groups, CloudTrail), Status Page, Endpoint Security Tools, GRC Platforms (Vanta, Drata, or similar).

About the Role

We are looking for a senior, execution-focused professional to own production release management, change control, and day-to-day security and compliance operations.

This role focuses on ensuring production changes are deployed safely, maintaining accurate SOC 2 audit evidence, managing security operations, and enforcing disciplined access controls.

The ideal candidate will bring hands-on experience managing production deployment pipelines, coordinating change approvals, supporting external audits, and maintaining security and compliance processes in a production environment.

This is a hands-on execution role. Strategic roadmaps, architecture review boards, and cross-company leadership responsibilities remain with the existing leadership team and are outside the scope of this position.

Key Responsibilities

Production Release & Deployment Management

Own production release and deployment pipelines using Octopus Deploy and TeamCity.

Implement and maintain zero-downtime deployment practices and rollback procedures.

Troubleshoot failed or stuck deployments and coordinate timely resolution.

Approve production changes, hotfixes, and feature toggle changes.

Coordinate maintenance windows and communicate planned changes to customers through the status page.

Security, Compliance & Audit Management

Own SOC 2 change management processes and maintain complete, audit-ready evidence.

Work directly with external auditors throughout SOC 2, HIPAA, PCI, or equivalent audit cycles.

Track vulnerability remediation, security patches, and corrective actions.

Manage endpoint security tooling and triage externally reported vulnerabilities.

Support customer security questionnaires and security-related sections of RFPs.

Identity & Access Management

Administer identity and access management processes, including access reviews and MFA enforcement.

Manage privileged access controls and production access permissions.

Grant, review, and revoke access to databases, VPNs, and deployment tools.

Maintain appropriate access records and supporting compliance evidence.

Operational Support

Manage infrastructure and access-related tickets requiring change approval or production access.

Ensure production changes follow established approval and documentation procedures.

Provide occasional on-call and after-hours support when required for production operations.

Maintain clear documentation of releases, approvals, incidents, and security activities.

Must-Have Requirements

8+ years of overall infrastructure or release engineering experience.

5+ years of direct ownership of production release and deployment pipelines, including rollback procedures.

5+ years of ownership of SOC 2 or equivalent compliance change management and audit evidence processes.

5+ years of hands-on security operations experience.

Practical experience administering IAM, including access reviews and privileged access controls.

Experience supporting customer-facing security questionnaires and RFP security sections.

Direct experience working with external auditors through at least one complete audit cycle.

Nice-to-Have Skills

AWS security experience, particularly IAM, security groups, and CloudTrail.

Familiarity with vulnerability disclosure platforms such as HackerOne or Bugcrowd.

Experience coordinating third-party penetration tests.

Familiarity with GRC and compliance platforms such as Vanta, Drata, or similar tools.

Experience with customer trust and security review platforms such as Conveyor or CSA STAR.

Previous experience working at a SaaS company serving regulated industries.

What We're Looking For

Strong ownership

Takes responsibility for production releases, security operations, and compliance evidence.

Sound judgment

Willing to stop or reject a production change that does not meet the required standards and explain the decision clearly.

Incident management

Maintains a calm, structured approach when deployments fail or production incidents occur.

Clear communication

Communicates effectively with engineering teams, external auditors, and customer security stakeholders.

Attention to detail

Maintains accurate documentation, access records, approvals, and audit evidence.

Execution-focused mindset

Comfortable managing day-to-day operational responsibilities without relying on strategic leadership duties.

What We Offer

Flexible work environment with Coimbatore office, hybrid, and remote options.

Paid holidays and flexible time off.

Medical insurance coverage of up to ₹4 lakh per person for self and family.

Opportunities to support production infrastructure and security operations for global clients.

A culture that values clarity, integrity, accountability, and continuous growth.