Head of Infrastructure & Security

Key Responsibilities

• Infrastructure Modernization & IaC: Transition existing distributed server environments into automated, codifiable, and declarative infrastructure (Infrastructure as Code).

• Delivery Pipelines: Design, implement, and institutionalize robust CI/CD pipelines to ensure predictable, zero-downtime application and service deployments.

• Resilience & Reliability: Architect and enforce enterprise-grade High Availability (HA) topologies, multi-region failover, and comprehensive Disaster Recovery (DR) strategies for latency-critical voice services.

• FinOps & Resource Optimization: Establish active infrastructure monitoring, capacity planning, and resource right-sizing to optimize operational spend without compromising performance.

• Proactive Security & VAPT: Lead hands-on vulnerability assessments and penetration testing (VAPT), prioritize exposure remediation, and establish continuous security hygiene across networks, endpoints, and containers.

• Voice Network Operations: Maintain, scale, and harden mission-critical VoIP infrastructure, ensuring carrier-grade uptime, minimal jitter, and zero packet loss.

Qualifications

Must-Have:

• 15+ years of progressive infrastructure, DevOps, and security experience, including leadership in architecting distributed systems.

• Deep domain expertise in real-time voice infrastructure: VoIP protocols (SIP, RTP/RTCP), Freeswitch, Asterisk PBX, SIP proxies/SBCs (Kamailio, OpenSIPS), and low-latency network tuning.

• Proven track record of leading zero-to-one infrastructure transformations, replacing manual server administration with automated Infrastructure as Code (Terraform, Ansible).

• Hands-on experience building and standardizing modern CI/CD pipelines from the ground up.

• Demonstrated success designing and validating production HA/DR architectures and business continuity plans.

• Hands-on proficiency conducting internal/external VAPT, threat modeling, and managing security incident remediation workflows.

• Strong command of Linux internals, network diagnostics (packet capture, QoS, routing), and cloud infrastructure architecture.

Good-to-Have:

• Familiarity with regulatory frameworks and compliance controls (PCI-DSS, HIPAA, SOC 2, ISO 27001).

• Experience with containerization and orchestration architectures tailored for real-time UDP/RTP media streaming.

• Relevant industry certifications (e.g., CISSP, CISM, CEH, or advanced Cloud Architect/Security credentials).