Contract Senior IT Infrastructure Engineer

At Keros, our mission is to deliver significant clinical benefit to a wide range of patients with disorders that are linked to dysfunctional signaling of the transforming growth factor-beta (TGF-ß) family of proteins. With a focus on developing differentiated product candidates that are designed to alter TGF-β signaling, we aim to target the pathways critical for the growth, repair and maintenance of blood cells and a number of tissues, including bone, skeletal muscle, adipose and heart tissue. We believe our product candidates have the potential to unlock the full therapeutic benefits of modulating the TGF-β superfamily and provide disease-modifying benefit to patients.

Job Summary

The Sr. IT Infrastructure Engineer is Keros' senior individual contributor for enterprise infrastructure, cloud, identity, endpoint, network, cybersecurity operations, and resilience. This role establishes technical direction, reference architectures, engineering standards, and long-range improvements across multiple related disciplines while remaining hands-on with the most critical and complex assignments. 

Operating with broad latitude, the Sr. Infrastructure Engineer advises IT leadership and key decision-makers, resolves issues affecting multiple functions, and guides the adoption of secure, scalable, supportable, and compliant technology platforms. The role provides technical direction and mentorship but does not carry formal people-management accountability.

Primary Responsibilities

 Sr. Technical Authority and Architecture

• Serve as the Senior advisor and final technical escalation point for enterprise infrastructure, cloud, identity, endpoint, network, backup, and cybersecurity operations.
• Define target architectures, engineering standards, reference patterns, technical roadmaps, and lifecycle strategies that support organizational goals and future requirements.
• Evaluate significant technology risks, dependencies, and design tradeoffs; make recommendations where precedent is limited and decisions affect multiple functions.

Cybersecurity Operations and Resilience

• Establish technical direction for the Rapid7 security platform, security monitoring, vulnerability management, incident handling, remediation, detection coverage, and operational reporting.
• Lead resolution of critical security and infrastructure events, including advanced troubleshooting, root-cause analysis, containment, recovery, corrective actions, and validated closure.
• Define resilience, backup, recovery, hardening, and zero-trust engineering practices; guide testing and continuous improvement of those controls.

Cloud, Identity, Endpoint, and Network Engineering

• Lead the architecture and continual improvement of Microsoft cloud, identity, endpoint, collaboration, application-deployment, automation, and patch-management services.
• Guide enterprise networking, secure access, office and lab connectivity, backup, recovery, and integration patterns for scientific systems and regulated business applications.
• Develop automation and engineering solutions that improve reliability, security, observability, supportability, and operational efficiency across platforms.

Governance, Influence, and Technical Leadership

• Guide complex cross-functional initiatives and architecture decisions, building alignment among IT, cybersecurity, scientific, quality, finance, legal, and technology partners.
• Establish and maintain architecture records, standards, SOPs, runbooks, technical decision documents, knowledge, and evidence required for sustainable operations and assurance.
• Support GxP, SOX ITGC, 21 CFR Part 11, NIST Cybersecurity Framework, audits, vendor risk, and security assessments through technical leadership and control design.
• Mentor engineers, review complex designs, and raise engineering capability through standards, reusable patterns, technical coaching, and knowledge transfer. 

Technology Environment

• Microsoft Azure, Microsoft 365, Entra ID, Intune, Defender, Rapid7, Cisco Meraki, Zscaler, Commvault, and Egnyte, along with additional enterprise, collaboration, security, and scientific platforms.

Core Competencies (Required Skills)

• Senior-level expertise: Recognized expertise across enterprise infrastructure and several related disciplines, with the judgment to advise on critical issues and set technical direction.
• Architecture and strategy: Demonstrated success defining standards, reference architectures, roadmaps, lifecycle strategies, and long-range solutions across multiple platforms.
• Complex problem solving: Ability to resolve significant and unique issues using conceptual thinking, limited precedent, independent judgment, and a long-term view.
• Microsoft and automation: Deep Microsoft cloud, identity, endpoint, security, and PowerShell expertise.
• Security and resilience: Advanced experience with SIEM/XDR, vulnerability management, incident handling, network security, secure access, backup, recovery, and control engineering; Rapid7 strongly preferred.
• Influence and technical leadership: Ability to guide critical assignments, align decision makers, mentor engineers, and drive adoption without formal authority.
• Regulated operations: Strong documentation, ITSM, change-management, risk, audit, and compliance discipline in environments handling sensitive or regulated information.

Preferred Skills

• Experience in biotechnology, pharmaceutical, life sciences, healthcare, or another regulated industry.
• Experience guiding complex technology programs or standards that span infrastructure, cybersecurity, scientific systems, and corporate platforms.
• Experience with Rapid7, Cisco Meraki, Zscaler, Commvault, and scientific or lab technology environments.
• Relevant Microsoft, Rapid7, Cisco/Meraki, Zscaler, CISSP, CISM, GIAC, or comparable expert-level certifications.

Education Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. Equivalent senior-level professional experience may be considered.
• Minimum of 12 years of progressive IT infrastructure, cloud, security operations, or systems-engineering experience, including Level 3 responsibilities.

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, and other relevant factors. 

Potential base pay range

$95—$119 USD

Our Diversity, Equity & Inclusion Mission Statement:  Keros is an inclusive company.  We believe that diversity drives innovation.  We continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees.  As such, Keros takes a holistic approach in mentoring, coaching, and developing all of our Keros team members.

Keros Therapeutics is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Recruitment & Staffing Agencies:

Keros Therapeutics does not accept unsolicited resumes from any source other than the candidate directly.  Any unsolicited submission by an agency to Keros is prohibited.  Any resume submitted by an agency without a signed contract or expressed consent by a member of the Keros Therapeutics Human Resources Department, will be considered property of Keros Therapeutics, and no fee shall be owed with respect thereto.