Infra Lead – Infrastructure Security & Release Operations

TECHJAYS

Lead – Infrastructure Security & Release Operations

Position: Lead – Infrastructure Security & Release Operations

Experience: 8+ Years

Location: Coimbatore / Hybrid (Remote option available)

Joining: Immediate or within 30 days preferred

Core Focus: Production Release Management, Change Control, Security Operations, SOC 2 Compliance, Audit Evidence, Identity & Access Management.

Tools & Platforms: Octopus Deploy, TeamCity, AWS (IAM, Security Groups, CloudTrail), Status Page, Endpoint Security Tools, GRC Platforms (Vanta, Drata, or similar).

About the Role

We are looking for a senior, execution-focused professional to own production release management, change control, and day-to-day security and compliance operations.

This role focuses on ensuring production changes are deployed safely, maintaining accurate SOC 2 audit evidence, managing security operations, and enforcing disciplined access controls.

The ideal candidate will bring hands-on experience managing production deployment pipelines, coordinating change approvals, supporting external audits, and maintaining security and compliance processes in a production environment.

This is a hands-on execution role. Strategic roadmaps, architecture review boards, and cross-company leadership responsibilities remain with the existing leadership team and are outside the scope of this position.

Key Responsibilities

1. Production Release & Deployment Management

• Own production release and deployment pipelines using Octopus Deploy and TeamCity.
• Implement and maintain zero-downtime deployment practices and rollback procedures.
• Troubleshoot failed or stuck deployments and coordinate timely resolution.
• Approve production changes, hotfixes, and feature toggle changes.
• Coordinate maintenance windows and communicate planned changes to customers through the status page.

2. Security, Compliance & Audit Management

• Own SOC 2 change management processes and maintain complete, audit-ready evidence.
• Work directly with external auditors throughout SOC 2, HIPAA, PCI, or equivalent audit cycles.
• Track vulnerability remediation, security patches, and corrective actions.
• Manage endpoint security tooling and triage externally reported vulnerabilities.
• Support customer security questionnaires and security-related sections of RFPs.

3. Identity & Access Management

• Administer identity and access management processes, including access reviews and MFA enforcement.
• Manage privileged access controls and production access permissions.
• Grant, review, and revoke access to databases, VPNs, and deployment tools.
• Maintain appropriate access records and supporting compliance evidence.

4. Operational Support

• Manage infrastructure and access-related tickets requiring change approval or production access.
• Ensure production changes follow established approval and documentation procedures.
• Provide occasional on-call and after-hours support when required for production operations.
• Maintain clear documentation of releases, approvals, incidents, and security activities.

Must-Have Requirements

• 8+ years of overall infrastructure or release engineering experience.
• 5+ years of direct ownership of production release and deployment pipelines, including rollback procedures.
• 5+ years of ownership of SOC 2 or equivalent compliance change management and audit evidence processes.
• 5+ years of hands-on security operations experience.
• Practical experience administering IAM, including access reviews and privileged access controls.
• Experience supporting customer-facing security questionnaires and RFP security sections.
• Direct experience working with external auditors through at least one complete audit cycle.

Nice-to-Have Skills

• AWS security experience, particularly IAM, security groups, and CloudTrail.
• Familiarity with vulnerability disclosure platforms such as HackerOne or Bugcrowd.
• Experience coordinating third-party penetration tests.
• Familiarity with GRC and compliance platforms such as Vanta, Drata, or similar tools.
• Experience with customer trust and security review platforms such as Conveyor or CSA STAR.
• Previous experience working at a SaaS company serving regulated industries.

What We're Looking For

• Strong ownership: Takes responsibility for production releases, security operations, and compliance evidence.
• Sound judgment: Willing to stop or reject a production change that does not meet the required standards and explain the decision clearly.
• Incident management: Maintains a calm, structured approach when deployments fail or production incidents occur.
• Clear communication: Communicates effectively with engineering teams, external auditors, and customer security stakeholders.
• Attention to detail: Maintains accurate documentation, access records, approvals, and audit evidence.
• Execution-focused mindset: Comfortable managing day-to-day operational responsibilities without relying on strategic leadership duties.

What We Offer

• Flexible work environment with Coimbatore office, hybrid, and remote options.
• Paid holidays and flexible time off.
• Medical insurance coverage of up to ₹4 lakh per person for self and family.
• Opportunities to support production infrastructure and security operations for global clients.
• A culture that values clarity, integrity, accountability, and continuous growth.

Skills

Release Management, octopus, Amazon Web Services (AWS), GRC