Note: The job is a remote job and is open to candidates in USA. United Airlines is hiring a Senior Manager – Infrastructure Cybersecurity to lead the team and technical direction responsible for protecting its core infrastructure, enterprise mobile environments, and designated identity and access management services. The role oversees security architecture, Zero Trust strategy, automation, compliance remediation, vendors, and team development.
Responsibilities
- Lead, recruit, and develop a team of infrastructure security architects and engineers, including performance and talent management
- Own the security architecture, reference patterns, and hardening baselines for network, platform/OS, cloud, mobile, and assigned IAM services
- Define and publish approved security patterns and reference architectures (secure-by-design blueprints, guardrails, and standards) that engineering teams build against
- Drive the Zero Trust network strategy, including macro- and micro-segmentation, software-defined perimeter, secure internet edge (SASE/SSE, ZTNA, secure web gateway, DNS security, DDoS protection), and secure remote access
- Advance security automation and policy as code so infrastructure controls are codified, repeatable, and continuously validated
- Coordinate remediation of infrastructure findings and non-compliant items to meet applicable compliance standards and best practices
- Monitor changes in regulations and compliance standards (e.g., NIST 800-53) and proactively update standards, patterns, and architectures
- Manage vendors and external partners that support infrastructure security tooling and services
- Assist with annual budgeting and monthly forecasting
Skills
- Bachelor's degree required
- 5+ years of cybersecurity or infrastructure engineering experience, including years of leading technical teams
- Strong knowledge of infrastructure security architecture and hardening across network, platform/operating system, and cloud environments
- Proficient knowledge of modern network security: zero trust architecture, macro/micro-segmentation, SASE/SSE and ZTNA, next-generation firewalls, secure web gateway, DNS security, and DDoS protection
- Proficient knowledge of cloud security (AWS and/or Azure), including cloud-native controls, landing zone design, and secure configuration
- Working knowledge of identity and access management (authentication, authorization, MFA, privileged access, directory services) and enterprise mobile/endpoint security
- Proficient knowledge of threat modeling and risk management; working knowledge of vulnerability remediation processes
- Experience authoring security patterns, reference architectures, technical standards, and SOPs
- Proficient understanding of compliance frameworks (e.g., NIST 800-53, CIS Benchmarks)
- Ability to manage business stakeholders, vendors, and external partners
- Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills
- Must be legally authorized to work in the United States for any employer without sponsorship
- STEM field
- Successful completion of interview required to meet job qualification
- STEM field preferred
- Master's degree
- 12+ years of relevant experience
- Security leadership certifications such as CISSP, CISM, or CCSP
- Cloud and platform security certifications such as AWS Certified Security – Specialty, Microsoft AZ-500 or SC-100, or GIAC (GSEC, GCIA, GDSA)
- Identity certifications such as Microsoft SC-300 or Okta Certified Administrator
- Experience designing and rolling out enterprise segmentation and zero trust network strategies across data center, campus, and cloud, with platforms such as next-generation firewalls, NAC, and SASE/SSE
- Hands-on experience securing enterprise mobile fleets (e.g., Intune, Workspace ONE, Jamf) and mobile threat defense
- Hands-on experience with identity platforms (e.g., Active Directory / Entra ID, Okta), privileged access management, and zero trust access models
- Experience transforming traditional data center security controls into cloud-native architectures and CSPM-driven guardrails
- Proficiency with infrastructure as code, policy as code, and security automation (e.g., Terraform, PowerShell, Python)
- Proficient knowledge of PKI, certificate lifecycle management, and cryptography
- Demonstrated ability to think strategically about business, product, and technical challenges
- Experience in airlines, transportation, or other regulated and critical-infrastructure environments
Benefits
- Medical, dental, vision, life, accident and disability coverage
- Parental leave
- Employee assistance program
- Commuter benefits
- Paid holidays
- Paid time off
- 401(k)
- Flight privileges, including space-available travel
- Employee-run Business Resource Group communities
- Bonus and/or long-term incentive compensation awards
- Remote work
Company Overview