Senior Manager, Infrastructure & Security

Archwest Capital; Irvine (CA); On-site; USD 150,000 - 175,000; Full time

Job summary

Archwest Capital is seeking a Senior Manager, Infrastructure & Security to lead our infrastructure and cybersecurity capabilities. The role spans cloud, identity management, endpoint management, and governance, with a near-term focus on a cybersecurity hardening program and SOC 2 readiness.

You will define roadmaps, manage partners, and mentor the team while getting into technical details as needed to mature Archwest's technology environment.

Qualifications

• Bachelor's degree or equivalent in related field.

Responsibilities

• Lead the cybersecurity hardening program and remediation efforts.

Skills

Infrastructure leadership

Cybersecurity leadership

Cloud computing

IAM

Microsoft 365

Education

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

Microsoft 365

Entra ID

Intune

Azure

Job description

Archwest Capital is looking for a Senior Manager, Infrastructure & Security to lead our infrastructure and cybersecurity capabilities and continue maturing our technology environment.

This is a hands-on leadership role spanning cloud and infrastructure, identity and access management, endpoint management, cybersecurity, networking, business continuity, and core technology operations. A major near-term focus is our cybersecurity hardening program: addressing findings from recent security assessments and putting sustainable controls and operating practices in place, with SOC 2 readiness as a longer-term objective.

The right person operates at both the strategic and technical levels – defining the roadmap, leading key initiatives, managing security and infrastructure partners, developing the team, and getting into the technical details when needed. This is an opportunity to shape and build the Infrastructure & Security function as Archwest continues to grow.

What You'll Do

Cybersecurity & Hardening

• Lead the remediation of findings and recommendations from cybersecurity assessments, penetration testing, vulnerability reviews, and other security initiatives.
• Develop and drive a prioritized security hardening roadmap, ensuring identified risks have clear owners, remediation plans, and target dates.
• Own key security capabilities including identity and access management, MFA, Conditional Access, privileged access, endpoint security, vulnerability management, logging, monitoring, and threat protection.
• Establish and maintain recurring security practices including access reviews, vulnerability scanning, patching, phishing testing, security awareness, configuration reviews, and control testing.
• Coordinate security monitoring and incident response activities and serve as a technical leader during cybersecurity incidents.
• Ensure security events and alerts are appropriately monitored, investigated, escalated, and resolved.
• Coordinate penetration testing, security assessments, and other independent testing and drive resulting findings through remediation.
• Partner with external security providers and specialists to strengthen detection, response, testing, and overall security posture.
• Support security reviews of new technologies, vendors, integrations, and architecture.

Infrastructure & Cloud

• Own the health, reliability, security, and continued evolution of Archwest's technology infrastructure.
• Lead the administration and improvement of our Microsoft environment, including Microsoft 365, Entra ID, Intune, Azure, and related technologies.
• Establish strong standards for endpoint configuration, device management, patching, software deployment, infrastructure configuration, and lifecycle management.
• Oversee networking, connectivity, collaboration, and other core infrastructure services.
• Develop and maintain an infrastructure roadmap aligned with business growth, security requirements, and Technology priorities.
• Identify opportunities to simplify the environment, reduce technical debt, improve reliability, and automate recurring work.
• Ensure infrastructure architecture, configurations, procedures, and operational processes are appropriately documented and maintained.

Security Governance & Resilience

• Help establish and mature security policies, standards, procedures, and technical controls.
• Build sustainable security practices that support Archwest's longer-term compliance and SOC 2 readiness objectives.
• Maintain evidence of key security controls and activities, including access reviews, security testing, vulnerability remediation, training, and backup and recovery testing.
• Translate security risks and technical findings into practical recommendations, priorities, and remediation plans.
• Provide Technology leadership with clear visibility into security posture, material risks, remediation progress, and areas requiring investment.
• Own technology disaster recovery and infrastructure recovery planning.
• Ensure critical systems and data have appropriate backup, recovery, and resiliency capabilities and that recovery procedures are tested regularly.

Technology Operations

• Establish disciplined operating practices across infrastructure and security, including monitoring, maintenance, change management, incident management, documentation, and escalation.
• Ensure technology issues are appropriately prioritized, owned, communicated, and driven through resolution.
• Proactively identify recurring issues and address root causes rather than relying on reactive support.
• Manage infrastructure and security vendors, managed service providers, licensing, services, renewals, and technical relationships.
• Participate in technology planning, architecture, budgeting, and prioritization.

Leadership

• Lead, mentor, and develop members of the Infrastructure & Security team.
• Establish clear ownership, priorities, standards, and expectations across the function.
• Build a culture of proactive management, strong technical fundamentals, documentation, accountability, and continuous improvement.
• Partner closely with other Technology functions and business teams to support company initiatives.
• Communicate technical issues, security risks, and recommendations clearly to both technical and non-technical stakeholders.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent combination of education and relevant professional experience.
• 8+ years of progressive experience across infrastructure, cloud, systems administration, cybersecurity, or related technology disciplines.
• Experience leading technical teams, major infrastructure/security initiatives, or a technology function.
• Strong hands-on experience with Microsoft 365, Entra ID, Intune, Azure, and modern Microsoft enterprise environments.
• Strong understanding of identity and access management, MFA, Conditional Access, privileged access, endpoint protection, vulnerability management, logging and monitoring, and incident response.
• Experience driving remediation of security assessments, penetration testing findings, vulnerabilities, and technical security gaps.
• Experience with endpoint management, patch management, device hardening, and security configuration.
• Working knowledge of networking, firewalls, VPNs, DNS, certificates, and related infrastructure technologies.
• Experience with backup, disaster recovery, business continuity, and recovery testing.
• Experience working with security providers, managed service providers, consultants, and other external technology partners.
• Strong troubleshooting and analytical skills with the ability to work through complex technical and operational problems.
• Ability to develop roadmaps, standards, and processes while remaining comfortable getting hands-on when needed.
• Strong written and verbal communication skills and the ability to explain technical risks and recommendations clearly.
• Demonstrated ability to take ownership and drive initiatives from identification through implementation and ongoing operation.

Preferred Qualifications

• Experience helping build or mature a cybersecurity program within a growing organization.
• Experience with SOC 2 readiness, audits, or similar security and compliance programs.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, or similar security frameworks.
• Experience with SIEM, MDR/XDR, Microsoft Defender, Microsoft Sentinel, or comparable security platforms.
• Experience with PowerShell, scripting, infrastructure automation, or related tools.
• Experience in financial services, lending, banking, real estate finance, or another regulated environment.
• Relevant Microsoft, security, or infrastructure certifications such as CISSP, CISM, CCSP, or Microsoft certifications are a plus.

What Success Looks Like

You take ownership of the environment and proactively identify what needs attention rather than waiting for issues to surface.

You can move comfortably between strategy and execution – developing a security roadmap, discussing risk and priorities with leadership, working with external security partners, and getting into a technical configuration or incident when needed.

You bring structure and follow-through. Security findings turn into remediation plans and get closed. Infrastructure is documented and proactively managed. Controls become repeatable operating practices rather than one-time exercises.

Most importantly, you help move the organization from reactive infrastructure and security management toward a disciplined, secure, and scalable technology environment.

About Archwest Capital

Archwest Capital is a leading private real estate lender focused on delivering innovative financing solutions to real estate investors across the United States. We believe technology is a strategic differentiator and are investing heavily in modern platforms, automation, analytics, and AI to support our continued growth.

Our Technology organization partners closely with every business function to deliver scalable solutions that improve efficiency, enhance decision-making, and create exceptional experiences for our customers and employees.

Salary range for this position is $150,000 - $175,000 + Bonus