Sr. Manager - IT Security

Position Information:

Job Title: Sr. Manager - IT Security

Location: Orange, CT

Salary Range: $155,600 - $194,500

Schedule: On Site - Office

Job Summary

The Sr. Manager, Network & Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid’s network security and enterprise infrastructure security platforms. This role leads two teams responsible for protecting connectivity and critical IT services across the enterprise: (1) Network Security (firewalls, IPS/IDS, network segmentation, perimeter security, and cloud network security) and (2) Infrastructure Security / IT Security (enterprise security platforms, identity & access management, privileged access, endpoint security, vulnerability management, and compliance support).

Key Responsibilities

Strategy, Roadmap and Operating Model

• Leads and integrates Network Security and Infrastructure Security capabilities, establishing a cohesive operating model, clear ownership, and measurable outcomes for protection of enterprise connectivity and IT platforms.
• Defines the technology strategy, target-state architecture, and multi-year roadmaps for network security and enterprise infrastructure security services, aligned to Avangrid standards, business priorities, and the enterprise risk posture.
• Establishes lifecycle management programs to ensure security technologies are correctly deployed, maintained, patched, and modernized; manages roadmaps aligned to enterprise strategy, technology evolution, and continuous transformation.

Network Security and Infrastructure Security Platforms

• Provides leadership over current and future enterprise security technologies and services, including platforms such as Fortinet, Palo Alto, Check Point, Cisco, WAF and edge security platforms such as Akamai WAF, secure web gateway/proxy platforms such as Zscaler, privileged access platforms such as CyberArk, network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.
• Defines and governs engineering standards, reference architectures, and technology guardrails for network security controls (e.g., perimeter, segmentation, IDS/IPS, and cloud network security) and infrastructure security platforms (e.g., identity and access management, privileged access, endpoint security, vulnerability management, and security tooling operations).
• Champions security-by-design by embedding security requirements into architecture, engineering standards, configuration baselines, and operational processes.
• Provides security leadership and architectural governance for cloud network and infrastructure security capabilities, in partnership with Cloud and Platform teams.
• Leads hardening management by selecting applicable standards and reference guides, defining configuration baselines, prioritizing controls, and establishing maturity levels for secure infrastructure and network security profiles.

Firewall, SD-WAN, Segmentation and Secure Connectivity

• Drives modernization and standardization of enterprise firewall and SD-WAN services, including policy governance, rule base optimization, segmentation alignment, VPN/NAT standards, high availability, logging, monitoring, change validation, and operational readiness.
• Defines segmentation and secure connectivity patterns (e.g., site-to-site connectivity, remote access, cloud connectivity, and third-party connectivity) that reduce exposure, support resiliency, and enable business outcomes.
• Partners with architecture and engineering stakeholders to ensure consistent implementation of perimeter, internal segmentation, and edge security controls across enterprise and cloud environments.

Operations, Resiliency and Compliance

• Delivers high levels of operational security, resiliency, and reliability for network and infrastructure security services; defines operational programs and identifies opportunities for improving operational efficiency and reliability as demanded by Avangrid corporate applications.
• Manages operational security performance, including service reliability, incident response partnership, threat containment support, vulnerability remediation execution, and continuous improvement of controls and monitoring.
• Ensures resiliency and availability of security services through capacity planning, high-availability design principles, disciplined change management, and operational readiness practices.
• Leads regulated-utility security alignment activities, including audit support, risk assessments, policy adherence, evidence collection, and remediation planning in partnership with compliance and control owners.
• Reduces operational bottlenecks by improvi