Senior Engineer, IT Operations, Infrastructure & Cloud

Rodan and Fields Beauty, LLC; San Ramon (CA); On-site; USD 101,000 - 162,000; Full time

Job summary

Rodan and Fields Beauty is seeking a Senior Engineer, IT Operations, Infrastructure & Cloud to design and operate our cloud and on-premises infrastructure, including GCP, Fortinet security, Akamai, OpenVPN, and Microsoft 365 E5 security.

This hands-on role leads cloud performance, automation, and the Service Desk collaboration, owning incident response, capacity planning, and security posture across hybrid environments.

Qualifications

• Bachelor’s degree in computer engineering or IT.
• 5–8 years of IT operations, infrastructure engineering, or cloud operations roles.
• Hands-on experience administering and operating Google Cloud Platform (GCP) in production.
• Working experience with Fortinet firewalls (FortiGate) and enterprise network switching (Extreme Networks or comparable).
• Familiarity with Akamai services (CDN/WAF/DNS) and OpenVPN or similar remote-access VPN technologies.
• Solid understanding of Microsoft E5 security tools, including Microsoft Defender and email security/anti-phishing controls.
• Exposure to or working knowledge of Microsoft Copilot security and AI governance within Microsoft 365.
• Strong understanding of networking fundamentals (TCP/IP, DNS, VPN, routing, and switching).
• Excellent troubleshooting, documentation, and communication skills, with the ability to work cross-functional.
• Experience leading or directing a TechBar/Service Desk or end user support team, including setting priorities, managing SLAs, and coaching staff.

Responsibilities

• Design, deploy, and manage infrastructure on Google Cloud Platform, including Compute Engine, VPC networking, IAM, Cloud Storage, and managed services.
• Own cloud cost optimization, capacity planning, and performance tuning across GCP environments.
• Build and maintain infrastructure-as-code (Terraform or Deployment Manager) and CI/CD pipelines to support repeatable deployments.
• Monitor cloud environments proactively using Cloud Monitoring/Logging, and drive uptime and reliability.
• Administer, configure, and troubleshoot Fortinet firewalls (FortiGate) including policies, VPN tunnels, SD-WAN, and high-availability configurations.
• Manage Extreme Networks switching infrastructure, including VLANs, routing, and network segmentation.
• Administer Akamai services (CDN, WAF, DNS, and security products) to protect and optimize web-facing apps.
• Manage OpenVPN infrastructure for secure remote access, including configuration and cert lifecycle.
• Monitor network performance and security events, lead root-cause analysis for incidents.
• Administer and optimize the Microsoft E5 security suite, including Defender and email security controls.
• Support governance, deployment, and security posture management for Copilot security and other AI-enabled tools.
• Partner with security and compliance stakeholders to maintain Secure Score and remediate risks.
• Provide leadership to the TechBar/Service Desk, ensuring timely, high-quality end-user support and escalation handling.
• Maintain documentation for systems, configurations, and SOPs; support audits and compliance efforts.

Skills

GCP

Terraform

Security

Networking

Automation

Leadership

OpenVPN

Education

Bachelor’s degree in computer engineering or IT

Tools

Fortinet FortiGate

Extreme Networks

Akamai

Microsoft Defender

OpenVPN

Deployment Manager

Job description

Rodan and Fields Beauty

Job Description

Senior Engineer, IT Operations, Infrastructure & Cloud

Department: Information Technology | Employment Type: Full-Time | Work Arrangement: Hybrid | Experience: 5–8 Years

About the Role

Rodan and Fields Beauty is looking for a Senior Engineer, IT Operations, Infrastructure & Cloud to design, operate, and secure the systems that keep our business running. This role owns our cloud infrastructure on Google Cloud Platform (GCP), our on-premises network and security appliances (Fortinet firewalls and Extreme Networks switching), our content delivery and remote‑access layer (Akamai and OpenVPN), and our Microsoft 365 E5 security stack (Microsoft Defender, email security, and Microsoft Copilot security). The ideal candidate is a hands‑on engineer who thrives on solving complex infrastructure and security problems, automating manual work, and keeping critical systems highly available.

Key Responsibilities

• Cloud Infrastructure & Operations (GCP)
• Design, deploy, and manage infrastructure on Google Cloud Platform, including Compute Engine, VPC networking, IAM, Cloud Storage, and managed services.
• Own cloud cost optimization, capacity planning, and performance tuning across GCP environments.
• Build and maintain infrastructure-as-code (Terraform or Deployment Manager) and CI/CD pipelines to support repeatable, auditable deployments.
• Monitor cloud environments proactively using tools such as Cloud Monitoring/Logging, and drive continuous improvement in uptime and reliability.
• Network & Perimeter Security
• Administer, configure, and troubleshoot Fortinet firewalls (FortiGate) including policies, VPN tunnels, SD-WAN, and high‑availability configurations.
• Manage and maintain Extreme Networks switching infrastructure, including VLANs, routing, and network segmentation across corporate and data center environments.
• Administer Akamai services (CDN, WAF, DNS, and/or bot/security products) to protect and optimize web-facing applications.
• Manage OpenVPN infrastructure for secure remote access, including configuration, certificate lifecycle, and troubleshooting connectivity issues.
• Monitor network performance and security events, and lead troubleshooting and root‑cause analysis for network incidents.
• Microsoft 365 E5 Security & Collaboration
• Administer and optimize the Microsoft E5 security suite, including Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365).
• Manage email security controls (anti‑phishing, anti‑malware, Safe Links/Safe Attachments, DKIM/DMARC/SPF) to protect against email‑borne threats.
• Support governance, deployment, and security posture management for Microsoft Copilot security and other AI‑enabled Microsoft 365 tools.
• Partner with security and compliance stakeholders to maintain Microsoft Secure Score and remediate identified risks.
• End User Compute & Service Desk Leadership
• Provide functional leadership and direction to the TechBar/Service Desk team, ensuring timely, high-quality support for end user compute issues (laptops, mobile devices, peripherals, and workplace applications).
• Establish and monitor service desk processes, ticket queues, and SLAs, and coach the team on escalation paths for complex infrastructure, network, or security issues.
• Act as the escalation point between the Service Desk and infrastructure/security teams, ensuring end user issues are resolved efficiently and root causes are addressed.
• Drive improvements to end user compute standards, imaging, and deployment processes in partnership with the Service Desk team.
• General IT Operations
• Serve as an escalation point for complex infrastructure, network, and security incidents; participate in an on‑call rotation as needed.
• Maintain accurate documentation for systems, configurations, and standard operating procedures.
• Support audits and compliance efforts (e.g., SOC 2, PCI, or similar) related to infrastructure and security controls.
• Evaluate new tools and technologies, and provide recommendations to improve reliability, security, and operational efficiency.
• Collaborate cross‑functionally with application, security, and business teams to support company initiatives and projects.

Required Qualifications

• Education: Bachelor’s degree in computer engineering, Information Technology, or an equivalent combination of education.
• 5–8 years of experience in IT operations, infrastructure engineering, or cloud operations roles.
• Hands‑on experience administering and operating Google Cloud Platform (GCP) in a production environment.
• Working experience with Fortinet firewalls (FortiGate) and enterprise network switching (Extreme Networks or comparable).
• Familiarity with Akamai services (CDN/WAF/DNS) and OpenVPN or similar remote‑access VPN technologies.
• Solid understanding of Microsoft E5 security tools, including Microsoft Defender and email security/anti‑phishing controls.
• Exposure to or working knowledge of Microsoft Copilot security and AI governance within Microsoft 365.
• Strong understanding of networking fundamentals (TCP/IP, DNS, VPN, routing, and switching).
• Excellent troubleshooting, documentation, and communication skills, with the ability to work cross‑functionally.
• Experience leading or directing a TechBar/Service Desk or end user support team, including setting priorities, managing SLAs, and coaching staff.

Preferred Qualifications

• Relevant certifications such as Google Professional Cloud Architect/Engineer, Fortinet NSE, Extreme Networks certifications, Akamai certifications, or Microsoft SC‑100/MS‑102 (or equivalent).
• Experience with scripting or automation (Python, Bash, or PowerShell) and infrastructure‑as‑code (Terraform).
• Experience in a retail, e‑commerce, or consumer products environment.
• Familiarity with compliance frameworks such as SOC 2, PCI‑DSS, or ISO 27001.

Salary Range: $100,800 - $162,000

The pay range represents the low and high end of the salary range we reasonably expect to pay for this position at the time of posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the salary range will be based on several factors including, but not limited to, to geographic location, experience, education, skills, qualifications, performance, and business or organizational needs. The range listed is just one component of Rodan + Fields’ total compensation package for employees.