Senior Manager, Infrastructure Security

Simpson-Thacher-; New York (NY); On-site; USD 190,000 - 220,000; Full time

Job summary

Simpson Thacher & Bartlett LLP seeks a Senior Manager, Infrastructure Security to set the security strategy for on‑prem, cloud, and hybrid environments. You will define standards, patterns, and guardrails and drive secure deployment and risk‑based decisions across teams including Infrastructure, Cloud, Architecture and IAM.

The role requires 10+ years in infrastructure security, deep OS/network/cloud knowledge, and strong leadership.

Qualifications

• Bachelor’s degree in information security, IT, risk management, related discipline, or equivalent experience.
• Professional certifications such as CISSP, CISM, or similar preferred.
• 10+ years of progressive experience in infrastructure/security domains.

Responsibilities

• Define and execute infrastructure security strategy, roadmap, and operating model.
• Lead security controls across Windows/Linux, cloud, and on‑prem environments.
• Drive automation via infra-as-code and security automation initiatives.

Skills

Infrastructure security

Security engineering

Cloud security

Zero Trust

Education

Bachelor’s degree in information security/IT

CISSP or CISM preferred

Tools

Terraform

PowerShell

Python

Job description

The Senior Manager, Infrastructure Security, is responsible for defining, maturing, and advancing the Firm's infrastructure security strategy across servers, operating systems, cloud platforms, data protection technologies, core infrastructure networks, and foundational technology services. This leader will establish security standards, drive engineering excellence, and ensure security controls are consistently designed, implemented, measured, and continuously improved across on-premises, cloud, and hybrid environments. The role partners closely with Infrastructure Engineering, Cloud Engineering, Architecture, Identity & Access Management, Network Engineering, Risk Management, and Technology Operations teams to reduce cyber risk while enabling business growth and innovation.The successful candidate combines deep technical expertise with strong leadership skills and is equally comfortable developing long-term security roadmaps and rolling up their sleeves to solve technical challenges. This individual must be highly analytical, detail-oriented, adaptable, and capable of navigating ambiguity while driving measurable security outcomes in a fast-paced enterprise environment.ESSENTIAL JOB DUTIES & RESPONSIBILITIESDefine and execute the Firm's infrastructure security strategy, roadmap, and operating model.Develop and maintain plans to mature infrastructure security capabilities aligned with business objectives and enterprise risk priorities.Establish security standards, architectural patterns, engineering principles, and technical guardrails across infrastructure platforms.Lead the design, implementation, and management of security controls across: Windows and Linux server environments, Endpoint platforms (Windows, macOS, mobile), Cloud environments (Azure, SaaS/PaaS etc.), Storage and data protection platforms, Network security technologies (Firewalls, IDS/IPS etc.), Virtualization and container platforms, Remote access technologiesPartner with cloud and infrastructure engineering teams to ensure secure deployment patterns for compute, storage, identity integration, and networking.Establish and execute governance and monitoring processes for cloud security posture management and workload protectionProvide strategic oversight for network security controls, segmentation, secure connectivity, and perimeter defense technologies.Govern and oversee optimization of security technologies such as firewalls, intrusion detection/prevention systems, network access control, and remote access (VPN).Drive automation and engineering excellence through infrastructure-as-code, policy-as-code, and security automation initiatives.Evaluate, select, and manage lifecycle of security-owned infrastructure protection technologies in partnership with enterprise infrastructure and application teams.Identify and drive remediation of infrastructure security risks including misconfigurations, missing controls, unpatched systems, and excessive system-level privileges.Support secure adoption of new infrastructure technologies including container platforms, platform services, and automation frameworks.Establish metrics, key performance indicators (KPIs), and key risk indicators (KRIs) to measure program effectiveness and security maturity.Influence engineering and technology decisions to ensure security requirements are integrated early in the design and delivery lifecycle.Communicate infrastructure security risks, tradeoffs, and recommendations to senior leadership and technical stakeholders.Stay current on emerging infrastructure threats, vulnerabilities, and defensive technologies.Drive continuous improvement of infrastructure security controls and detection capabilities.Build, mentor, and lead a high-performing team of infrastructure security engineers.Promote a security engineering culture focused on automation, resilience, and measurable risk reduction.Participate in on-call rotation to support after-hours incident response and critical security operations as needed.EDUCATIONBachelor’s degree in information security, IT, risk management, related discipline, or equivalent experienceProfessional certifications such as CISSP, CISM, or similar preferredSKILLS AND EXPERIENCE10+ years of progressive experience in infrastructure security, network security, cloud security, or related cybersecurity disciplines, including experience within complex, large-scale enterprise environmentsProven experience developing, implementing, and maturing security programs that protect critical infrastructure across on-premises, cloud, and hybrid technology environments.Demonstrated success leading security engineering initiatives that reduce risk, improve security posture, and strengthen resilience across enterprise technology platforms.Experience partnering closely with infrastructure, cloud, network, and application engineering teams to design and implement security controls at scale while enabling business and technology objectives.Deep technical knowledge across several of the following domains: Operating system security (Windows and Linux), Network security including firewalls, segmentation, remote access technologies, intrusion detection and prevention systems, and Zero Trust principles, Cloud security controls and configuration management for Azure and Saas/PaaS environments, Data protection and DLP technologies, Infrastructure logging, monitoring, and telemetry pipelines, Security automation and scripting using technologies such as PowerShell, Python, Terraform, or similar toolsExperience evaluating and implementing enterprise security tooling for infrastructure protection.Proven people leadership experience, including building, developing, mentoring, and managing high-performing technical teams.Demonstrated ability to influence senior executives and cross-functional stakeholders.Exceptional organizational, planning, and program management skills.Ability to manage multiple priorities, make sound decisions under pressure, balance strategic planning with hands-on technical engagement, and communicate effectively with both technical and business audiences.Highly analytical with exceptional problem-solving and critical-thinking abilities.Demonstrated ability to lead through ambiguity and drive results in complex, fast-paced environments.Salary InformationNY Only: The estimated base salary range for this position is $190,000 to $220,000 at the time of posting.The actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job. This role is exempt meaning it is not overtime pay eligible.Simpson Thacher will not sponsor applicants for work visas for this position.Privacy NoticeFor information about how Simpson Thacher & Bartlett LLP collects and processes your personal information, please refer to our Privacy Notice available at https://www.stblaw.com/other/privacy-notice .Simpson Thacher & Bartlett is committed to a collegial work environment in which all individuals are treated with respect and dignity. The Firm prohibits discrimination or harassment based upon race, color, religion, gender, gender identity or expression, age, national origin, citizenship status, disability, marital or partnership status, sexual orientation, veteran’s status or any other legally protected status. This Policy pertains to every aspect of an individual’s relationship with the Firm, including but not limited to recruitment, hiring, compensation, benefits, training and development, promotion, transfer, discipline, termination, and all other privileges, terms and conditions of employment.#LI-Hybrid