Director, Development Operations Infrastructure Engineering
Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. Planned Parenthood organizations serve all people with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions. We do all this because we care passionately about helping people lead healthier lives.
Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the independently incorporated Planned Parenthood affiliates, which operate non-profit health centers across the U.S. PPFA also works to educate the public on and advocate for issues of sexual and reproductive health. Formed as the advocacy and political arm of Planned Parenthood Federation of America, Planned Parenthood Action Fund is a separate non-profit membership organization tax-exempt under section 501(c)(4). The Action Fund engages in educational, advocacy, and limited electoral activity, including grassroots organizing, legislative advocacy, and voter education in furtherance of the Planned Parenthood mission.
Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seeks a dynamic and effective Director, Development Operations Infrastructure Engineering. This job reports directly to the Senior Director of Development Operations and Infrastructure in the IT Ops department of PPFA. The IT Ops department implements the architectural and infrastructural components used by PPFA, and is critical to the success of Planned Parenthood, its patients, supporters, donors, and staff.
Purpose:
Director, Development Operations (DevOps) Infrastructure Engineering is responsible for the design and governance of PPFA’s web server infrastructure. Functionally, this includes compliance management (PCI), network (physical, virtual), security (firewalls, logging, IDP/IDS, CDN, access control), and server (physical, virtual, container) design. The role architects the behavior of complex infrastructure systems to silently provide an uninterrupted array of services that are purposely invisible to developers and users of our technology including PP patients and staff. The role defines our infrastructure technology stack, standards, and best practices for managing day to day operations. From an organizational standpoint, the Director manages the Infrastructure shared service which supports Web Development, Quality Assurance, Security, Product teams.
Engagement:
The Director will be part of the IT Ops team with specific focus on PPOL, Planned Parenthood’s web properties, and will work closely with the Application Development team, Information Security team, and more broadly members of the TSS division, third party vendors, as well as executive and operational staff within the PPFA National Office, affiliates, and ancillary organizations.
Delivery:
- Establish strategies for ensuring high availability of mission-critical PPFA online properties
- Configuration management automation strategy
- Geo distributed data centers
- Content delivery network (CDN)
- Caching strategies
- Automated DNS cutovers based on application health checks
- DDoS protection
- Log Analysis Tools for intrusion correlation and mitigation
- Designs infrastructure components to support our high availability strategy
- Virtual machine architecture
- Container architecture
- Network architecture
- Security systems architecture
- High availability architecture
- GeoLocation Failover and Redundancy
- Designs multi-availability failover and cluster strategies
- GeoLocation Availability
- DNS Routing and Management Strategy
- Multi-Region Deployment and Updates
- Secure Routing and IDP Management
- Security Reviews and Testing
- Review CVE and Test Reports for Security Flaws
- Perform Periodic Security Reviews
- Advise on code compliance and security best practices
- Ensure NIST, CIS, OWASP, and HIPAA regime compliance.
- Manages the shared service capacity to support product development initiatives for AppDev, QA, Product/Business and Information Security teams.
- Co-Governs the Infrastructure team portfolio, helps define the team roadmap, and helps set priorities for project delivery Sets standards and best practices for managing day-to-day infrastructure operations
- Partners with Senior Director, Development Operations to support and complete their technology vision
- Provides Level 3 issue resolution support to resolve complex technical issues
- Ensures all AZ Deployments are in sync
- Ensures request routing aligns with performance strategies
- Defines security policies and standards in collaboration with security and legal partners
- Ensures compliance with security policies and vulnerability mitigation through established standards and practices
- Manages and performs security audits and remediations on a weekly basis, and implements proactive security measures
- Manages security access controls, DNS, and Logging services
The Director will deliver by being a hands-on engineering team member, creating, assessing, monitoring, updating, and deploying infrastructure assets, CI/CD Tooling, Security and Compliance assets, all relating to PPFA’s websites in AWS.
Strategy & Architecture
Management
Security
Knowledge, Skills and Abilities (KSAs):
- Bachelor’s degree or equivalent experience, and 8+ years of industry experience (required)
- Professional experience implementing nontrivial applications in Python, Typescript, and Bash required
- Experience with compliance requirements and industry standards such as HIPAA, PCI, NIST, CIS, OWASP (required)
- Strong Linux System Administration skills and extensive knowledge of Infrastructure-as-Code tooling and server patch management
- 5+ years experience using the following platforms/toolkits: Jenkins, Github, AWS, ECS, Nginx, Docker, PgSQL, Elasticache, Opensearch, Prometheus, Grafana, Tenable, Splunk, SaltStack, Terraform
- 5+ years experience with System Hardening Regimes and Techniques, and IDP/IDS tools like Palo Alto