Infrastructure Security & Release Operations Lead
First seen by Alion on Nov 7, 2026.
Role : Lead - Infrastructure Security & Release Operations.
Position : Lead - Infrastructure Security & Release Operations.
Experience : 8+ Years.
Location : Coimbatore / Hybrid (Remote option available).
Joining : Immediate or within 30 days preferred.
Core Focus : Production Release Management, Change Control, Security Operations, SOC 2 Compliance, Audit Evidence, Identity & Access Management.
Tools & Platforms : Octopus Deploy, TeamCity, AWS (IAM, Security Groups, CloudTrail), Status Page, Endpoint Security Tools, GRC Platforms (Vanta, Drata, or similar).
About The Role :
We are looking for a senior, execution-focused professional to own production release management, change control, and day-to-day security and compliance operations.
This role focuses on ensuring production changes are deployed safely, maintaining accurate SOC 2 audit evidence, managing security operations, and enforcing disciplined access controls.
The ideal candidate will bring hands-on experience managing production deployment pipelines, coordinating change approvals, supporting external audits, and maintaining security and compliance processes in a production environment.
This is a hands-on execution role.
Strategic roadmaps, architecture review boards, and cross-company leadership responsibilities remain with the existing leadership team and are outside the scope of this position.
Key Responsibilities :
- Own production release and deployment pipelines using Octopus Deploy and TeamCity.
- Implement and maintain zero-downtime deployment practices and rollback procedures.
- Troubleshoot failed or stuck deployments and coordinate timely resolution.
- Approve production changes, hotfixes, and feature toggle changes.
- Coordinate maintenance windows and communicate planned changes to customers through the status page.
- Own SOC 2 change management processes and maintain complete, audit-ready evidence.
- Work directly with external auditors throughout SOC 2, HIPAA, PCI, or equivalent audit cycles.
- Track vulnerability remediation, security patches, and corrective actions.
- Manage endpoint security tooling and triage externally reported vulnerabilities.
- Support customer security questionnaires and security-related sections of RFPs.
- Administer identity and access management processes, including access reviews and MFA enforcement.
- Manage privileged access controls and production access permissions.
- Grant, review, and revoke access to databases, VPNs, and deployment tools.
- Maintain appropriate access records and supporting compliance evidence.
- Manage infrastructure and access-related tickets requiring change approval or production access.
- Ensure production changes follow established approval and documentation procedures.
- Provide occasional on-call and after-hours support when required for production operations.
- Maintain clear documentation of releases, approvals, incidents, and security activities.
Must-Have Requirements :
- 8+ years of overall infrastructure or release engineering experience.
- 5+ years of direct ownership of production release and deployment pipelines, including rollback procedures.
- 5+ years of ownership of SOC 2 or equivalent compliance change management and audit evidence processes.
- 5+ years of hands-on security operations experience.
- Practical experience administering IAM, including access reviews and privileged access controls.
- Experience supporting customer-facing security questionnaires and RFP security sections.
- Direct experience working with external auditors through at least one complete audit cycle.
What We Offer :
- Flexible work environment with Coimbatore office, hybrid, and remote options.
- Paid holidays and flexible time off.
- Medical insurance coverage of up to 4 lakh per person for self and family.
- Opportunities to support production infrastructure and security operations for global clients.
- A culture that values clarity, integrity, accountability, and continuous growth.
Skills
DevOps, Release Management, Security, Identity Management, Octopus Deploy, IT Infrastructure, GRC, CI/CD Pipeline, Configuration Management, IT Compliance, TeamCity