• Maintain the tools used by Cloud Services to manage vulnerability remediation tasks • Respond to SIEM and FIM detections and collaborate with Information Security on Identity Protection and Exposure Management solutions • Provide tactical support for regulatory compliance efforts (SOC2, PCI DSS, GDPR) • Deploy, Configure and maintain virtual servers • Manage backup systems and perform system restores • Disaster Recovery planning • Manage technologies supporting vulnerability scanning, cloud technologies, data loss prevention • Maintain systems relating to endpoint detection and response (EDR), identity and access management • Follow security policies, procedures, and standards to ensure compliance • Collaborative involvement with assessments and audits to identify vulnerabilities and remediation actions • Collaborate with cross-functional teams to integrate controls and best practices into our systems and applications • Provide guidance to cross functional teams, fostering a culture of awareness and best practices • Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate • Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight

• Team leadership and collaboration: Recruit, guide, coach, and mentor developers, making sure issues and projects are delivered on time, within scope, and to the company’s quality standards. • Stakeholder management: Collaborate closely with engineering leadership to understand and document issues and priorities, aligning development and support work with engineering and business objectives, including managing expectations. • Team oversight: Fluent in Jira for issue tracking, workflow management, and reporting. Keep the team aligned and using Jira to its fullest potential. • Project and issue management: Oversee task boards, backlog management, and workload planning. Monitor progress and clear any impediments or bottlenecks to keep support on track. • Continuous improvement: Advocate for and put in place best practices, efficiency improvements, and new technology. • Cross-functional communication: Work seamlessly across the organization to drive strong inter-team collaboration and efficiency. • Goal setting and accountability: Set direct-report goals tied to company OKRs, drive accountability, and make sure team KPIs and commitments are met, with a focus on high employee satisfaction (Employee NPS).

• Manage a team of Engineers: conduct 1:1s, performance reviews, hiring, and career development in a distributed remote friendly environment. • Own the technical roadmap for shared cloud infrastructure across Azure and AWS, balancing reliability work against longer-term platform improvements. • Set and enforce standards for infrastructure-as-code (Terraform, Helm, Kubernetes), documentation, and operational readiness. • Make technical decisions and trade-offs for application-layer infrastructure including Elasticsearch, RabbitMQ, and Redis, and serve as the escalation point for the team. • Run sprint planning, manage cross-team dependencies, and keep delivery on track. • Lead post-incident reviews and ensure follow-up items get resolved. • Work with Security and Compliance to keep FedRAMP and SOC 2 controls current. • Be the main engineering contact and collaborate with Development, Product, and Security teams, turning their requirements into platform priorities. • Represent the team in architecture reviews and planning discussions with leadership. • Use and promote the use of AI-assisted tooling including LLM-based automation and AI-driven observability for use in engineering workflows.

Role Description The Cloud Infrastructure Administrator II will maintain the tools used by Cloud Services to manage vulnerability remediation tasks, respond to SIEM and FIM detections and collaborate with Information Security on Identity Protection and Exposure Management solutions. Provide tactical support for regulatory compliance efforts (SOC2, PCI DSS, GDPR). The position will be responsible for adhering to the security policies, procedures, and standards set by Jenzabar's Compliance and Information Security team. - Deploy, Configure and maintain virtual servers - Manage backup systems and perform system restores - Disaster Recovery planning - Manage technologies supporting vulnerability scanning, cloud technologies, data loss prevention - Maintain systems relating to endpoint detection and response (EDR), identity and access management - Follow security policies, procedures, and standards to ensure compliance set by Jenzabar's Compliance and Information Security team - Collaborative involvement with assessments and audits of Jenzabar Cloud to identify vulnerabilities and remediation actions - Collaborate with cross-functional teams to integrate controls and best practices into our systems and applications - Provide guidance to cross functional teams, fostering a culture of awareness and best practices - Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate - Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight - Other duties and responsibilities as assigned Qualifications - Bachelor’s degree in computer science, cloud systems, information technology, cybersecurity, or a related field (or equivalent work experience) - Minimum of 4 years’ experience in a cloud service-related role, or in a development role with a strong background in system experience as an information security analyst or similar role - Hands-on experience with technologies such as vulnerability scanning, cloud technologies, SIEM, IDS/IPS, file integrity monitoring, data loss prevention, firewalls, endpoint protection, etc. - Strong analytical and problem-solving skills, with the ability to analyze complex systems and identify security issues - Excellent communication skills, both verbal and written, with the ability to effectively communicate technical information to non-technical stakeholders - Ability to work independently and collaboratively in a fast-paced environment, prioritizing and managing multiple tasks effectively Preferred Qualifications - Experience/knowledge of: Atlassian Suite, Terraform, Cloudflare, Kubernetes, Rapid7 and CrowdStrike solutions - Industry certifications such as CISSP, CISM, CEH, or equivalent - Knowledge of regulatory requirements and standards (e.g., SOC2, PCI DSS, GDPR) and their implications - Experience with cloud principles and practices (AWS, Azure, GCP) - Knowledge of secure software development practices and principles - Experience with security incident response and forensic investigations Benefits - Medical Insurance - Life Insurance - Dental Insurance - Vision Insurance - PTO - Paid Parental Leave - Paid Holidays - Short Term Disability - Long Term Disability - 401K - Educational Assistance Compensation The pay range for this position is $61,000-$74,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of benefits. Company Description Jenzabar does not discriminate in employment opportunities or practices on the basis of race, color, sex, gender, gender identity, pregnancy, childbirth and related medical conditions, genetics, genetic markers and carrier status, creed, religion, national origin, ancestry, age, disability, medical condition, marital status, sexual orientation, military service, veteran status, or any other status protected by state and federal laws. Please Note: Jenzabar does not sponsor applicants for work visas. Electronic Monitoring Notice Job applicants are advised that Jenzabar reserves the right to monitor, access, review, and disclose electronic activity conducted on Company‑owned devices, networks, and systems, as well as activity involving Jenzabar applications or accounts accessed on personal devices. Monitoring may include email, messaging, internet usage, files, applications, and other electronic communications or data, and is performed for security, compliance, and operational purposes.