About this opportunity
Rodan and Fields Beauty, LLC lists this Senior Engineer, IT Operations, Infrastructure & Cloud opportunity in san ramon, California. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Rodan and Fields Beauty
Job Description
Senior Engineer, IT Operations, Infrastructure & Cloud
Department: Information Technology | Employment Type: Full-Time | Work Arrangement: Hybrid | Experience: 5–8 Years
About the Role
Rodan and Fields Beauty is looking for a Senior Engineer, IT Operations, Infrastructure & Cloud to design, operate, and secure the systems that keep our business running. This role owns our cloud infrastructure on Google Cloud Platform (GCP), our on-premises network and security appliances (Fortinet firewalls and Extreme Networks switching), our content delivery and remote‑access layer (Akamai and OpenVPN), and our Microsoft 365 E5 security stack (Microsoft Defender, email security, and Microsoft Copilot security). The ideal candidate is a hands‑on engineer who thrives on solving complex infrastructure and security problems, automating manual work, and keeping critical systems highly available.
Key Responsibilities
Cloud Infrastructure & Operations (GCP)
Design, deploy, and manage infrastructure on Google Cloud Platform, including Compute Engine, VPC networking, IAM, Cloud Storage, and managed services.
Own cloud cost optimization, capacity planning, and performance tuning across GCP environments.
Build and maintain infrastructure-as-code (Terraform or Deployment Manager) and CI/CD pipelines to support repeatable, auditable deployments.
Monitor cloud environments proactively using tools such as Cloud Monitoring/Logging, and drive continuous improvement in uptime and reliability.
Network & Perimeter Security
Administer, configure, and troubleshoot Fortinet firewalls (FortiGate) including policies, VPN tunnels, SD-WAN, and high‑availability configurations.
Manage and maintain Extreme Networks switching infrastructure, including VLANs, routing, and network segmentation across corporate and data center environments.
Administer Akamai services (CDN, WAF, DNS, and/or bot/security products) to protect and optimize web-facing applications.
Manage OpenVPN infrastructure for secure remote access, including configuration, certificate lifecycle, and troubleshooting connectivity issues.
Monitor network performance and security events, and lead troubleshooting and root‑cause analysis for network incidents.
Microsoft 365 E5 Security & Collaboration
Administer and optimize the Microsoft E5 security suite, including Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365).
Manage email security controls (anti‑phishing, anti‑malware, Safe Links/Safe Attachments, DKIM/DMARC/SPF) to protect against email‑borne threats.
Support governance, deployment, and security posture management for Microsoft Copilot security and other AI‑enabled Microsoft 365 tools.
Partner with security and compliance stakeholders to maintain Microsoft Secure Score and remediate identified risks.
End User Compute & Service Desk Leadership
Provide functional leadership and direction to the TechBar/Service Desk team, ensuring timely, high-quality support for end user compute issues (laptops, mobile devices, peripherals, and workplace applications).
Establish and monitor service desk processes, ticket queues, and SLAs, and coach the team on escalation paths for complex infrastructure, network, or security issues.
Act as the escalation point between the Service Desk and infrastructure/security teams, ensuring end user issues are resolved efficiently and root causes are addressed.
Drive improvements to end user compute standards, imaging, and deployment processes in partnership with the Service Desk team.
General IT Operations
Serve as an escalation point for complex infrastructure, network, and security incidents; participate in an on‑call rotation as needed.
Maintain accurate documentation for systems, configurations, and standard operating procedures.
Support audits and compliance efforts (e.g., SOC 2, PCI, or similar) related to infrastructure and security controls.
Evaluate new tools and technologies, and provide recommendations to improve reliability, security, and operational efficiency.
Collaborate cross‑functionally with application, security, and business teams to support company initiatives and projects.
Required Qualifications
Education: Bachelor’s degree in computer engineering, Information Technology, or an equivalent combination of education.
5–8 years of experience in IT operations, infrastructure engineering, or cloud operations roles.
Hands‑on experience administering and operating Google Cloud Platform (GCP) in a production environment.
Working experience with Fortinet firewalls (FortiGate) and enterprise network switching (Extreme Networks or comparable).
Familiarity with Akamai services (CDN/WAF/DNS) and OpenVPN or similar remote‑access VPN technologies.
Solid understanding of Microsoft E5 security tools, including Microsoft Defender and email security/anti‑phishing controls.
Exposure to or working knowledge of Microsoft Copilot security and AI governance within Microsoft 365.
Strong understanding of networking fundamentals (TCP/IP, DNS, VPN, routing, and switching).
Excellent troubleshooting, documentation, and communication skills, with the ability to work cross‑functionally.
Experience leading or directing a TechBar/Service Desk or end user support team, including setting priorities, managing SLAs, and coaching staff.
Preferred Qualifications
Relevant certifications such as Google Professional Cloud Architect/Engineer, Fortinet NSE, Extreme Networks certifications, Akamai certifications, or Microsoft SC‑100/MS‑102 (or equivalent).
Experience with scripting or automation (Python, Bash, or PowerShell) and infrastructure‑as‑code (Terraform).
Experience in a retail, e‑commerce, or consumer products environment.
Familiarity with compliance frameworks such as SOC 2, PCI‑DSS, or ISO 27001.
Salary Range: $100,800 - $162,000 The pay range represents the low and high end of the salary range we reasonably expect to pay for this position at the time of posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the salary range will be based on several factors including, but not limited to, to geographic location, experience, education, skills, qualifications, performance, and business or organizational needs. The range listed is just one component of Rodan + Fields’ total compensation package for employees.
#J-18808-Ljbffr
Worksite address
san ramon, CA, 94583, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.