Click here to view our Philz Coffee Mandatory Vaccination Policy

As we continue to build out our IT team to support our exciting retail growth, we are adding a Director of Infrastructure and Security role. You will get to lead our high-performing computing infrastructure and ensure seamless execution of our computer operations and systems company wide. This dynamic role provides the opportunity to influence our technology roadmap, implement digital solutions, and collaborate with key stakeholders across Philz. If you are excited about working with a team of technologists that are passionate about Bettering Peoples' Day - keep reading!

This role must be based in the San Francisco Bay Area but has the flexibility to work from home.

WHAT YOU'LL DO

IT INFRASTRUCTURE

• Manage IT infrastructure operations including but not limited to delivery of infrastructure services and information security operations, policies, architecture, and governance
• Design, implement and manage network architecture for all network services for all Philz locations - retail, remote, home office and roasting plant
• Lead the development, implementation and management of up-to-date policies, procedures, standards and guidelines for company operations
• Responsible for the design, development, deployment and administration of identity and access management across the enterprise
• Develop and evolve business metrics to measure the efficiency and effectiveness of infrastructure and security technology and operations
• Manage the evaluation and adoption of emerging technologies
• Oversee service management activities including change and release management, testing, quality assurance and end-to-end technical integration
• Drive the delivery of technology infrastructure projects and service management improvements, ensuring that quality, productivity, and ROI goals are achieved
• Implement and maintain controls and monitoring procedures to ensure the availability of critical systems and minimal service interruptions
• Manage vendor contracts for all hardware and software within the company infrastructure

SECURITY & COMPLIANCE

• Evaluate the potential exposure to security risks / threats to maintain appropriate security measures and mechanisms to guard against unauthorized access to electronically stored and /or transmitted information
• Responsible for executing programs for user awareness, compliance monitoring, and security compliance; maintaining information security devices and software; monitoring compliance procedures; and resolving security policy issues
• Manage the facilitation of IT General Controls for Technology. Responsible for responding to and coordinating all inquiries from the Internal and External Audit teams related to the Technology services, initiatives, projects, platforms and products
• Lead technology compliance requirements including but not limited to PCI-DSS, EMV, CCPA, GDPR, HIPAA etc.) and partners with cross functional teams to advance IT management for maintaining compliance across all spectrums of company wide technology
• Lead the identification, forensics analysis, response, investigation, and remediation of potential security breaches and issues surrounding information security

SUPPORT & CUSTOMER SERVICE

• Develop and lead a high-performing infrastructure administration, engineering and operations team to ensure high availability and reliable delivery of IT services and operations
• Store knowledge/ background/understanding of store operations a plus
• Provide after-hours or weekend support on an as-needed basis

WHAT YOU'LL NEED

• A minimum of 10 years of information technology/information security/cybersecurity and business leadership experience, with an emphasis on infrastructure services required
• Multi-unit store operations experience a plus
• Bachelor's degree or equivalent, preferably in the areas of information technology, systems, engineering, or business
• In-depth understanding of network protocols including BGP, OSPF, EIGRP, IPSEC, HSRP, VDC, 802.11, 802.1x, SNMP
• Proven experience in hosted, SAAS, architecture, server, systems, network and telecom administration
• Professional certifications a plus: CCISO, CISSP, CISM, CGEIT, SANS/GIAC, CHISL, CBCP, BCM, ABCP etc.
• Experience with designing, implementing, and supporting large scale IP based networks, network routing, firewalls, switches, and inter-related networking and security technologies, WAN technologies (SD Wan, QOS…etc.), virtual server technologies, single sign-on and authentication, DHCP/DNS, AWS, Google Platform and Services, MS Azure, MS Office 365, SAN/NAS Storage
• Proven track record of implementing and troubleshooting Meraki, Fortinet, Juniper Networks, Cisco appliances including but not limited to Firewalls, Load Balancers, WAPs, and Managed Switches
• Professional level understanding of TCP and UDP mechanics including ability to interpret packet captures
• Expert understanding of Ethernet and the surrounding technology such as Spanning Tree Protocol (802.1w,
• Hands-on experience with network management and information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devices
• Strong knowledge of ITIL/ITSM and change management systems and methodologies
• Excellent communication, documentation and presentation skills
• Outstanding critical thinking and analytical skills
• Exceptional organizational, planning, and project management skills
• Some travel required

At Philz, we are an equal opportunity employer and embrace a diverse workforce.