Infrastructure Security and Release Operations Lead

About the role

We are seeking an experienced Infrastructure Security and Release Operations Lead to manage production release pipelines, change control, and security compliance for our client team in LATAM. This senior execution role focuses on day‑to‑day operations, ensuring safe deployments and maintaining SOC 2 evidence.

Key responsibilities

• Own production release and deployment pipelines (Octopus Deploy, TeamCity) with zero‑downtime and rollback practices.
• Approve production changes, hotfixes, and schedule maintenance windows with customer notice.
• Maintain SOC 2 change management, audit evidence, and coordinate with external auditors for SOC 2, HIPAA, or PCI audits.
• Run hands‑on security operations: vulnerability remediation, patch tracking, endpoint security tooling, and triage of external vulnerability reports.
• Administer identity and access management, including access reviews, MFA, privileged access controls, and granting/revoking production access.
• Support customer‑facing security questionnaires and RFP security sections.
• Handle approximately 25 monthly infrastructure and access tickets requiring change approval or production access grants.

Required profile

• 8+ years of infrastructure or release engineering experience.
• 5+ years owning production release pipelines and SOC 2 change management.
• 5+ years hands‑on security operations experience.
• Strong English communication skills and ability to work independently.

Required skills

• Octopus Deploy, TeamCity
• SOC 2, HIPAA, PCI audit processes
• Vulnerability remediation, endpoint security tools
• Identity and Access Management (IAM, MFA, privileged access)
• AWS security (IAM, security groups, CloudTrail)
• Familiarity with HackerOne, Bugcrowd, Vanta, Drata