Ziply Fiber

Lead and scale enterprise cybersecurity strategy and operations ensuring alignment with business priorities and regulatory requirements. | Requires 15+ years cybersecurity experience with 7+ years leadership managing managers, expertise in security frameworks, incident response, and executive stakeholder influence. | This is a remote position. Position Title: Director, Cyber Security Base Salary:$165,000 to $200,000 annually DOE Bonus:Target annual bonus Benefits:Medical, dental, vision, 401k, flexible spending account, paid sick leave and paid time off, parental leave, quarterly performance bonus, training, career growth and education reimbursement programs. Ziply Fiber is a local internet service provider dedicated to elevating the connected lives of the communities we serve. We offer the fastest home internet in the nation, a refreshingly great customer experience, and affordable plans that put customers in charge. As our state-of-the-art fiber network expands, so does our need for team members who can help us grow and realize our goals. Our Company Values: • Genuinely Caring:We treat customers and colleagues like neighbors, with empathy and full attention. • Empowering You:We help customers choose what is best for them, and we support employees in implementing new ideas and solutions. • Innovation and Improvement:We constantly seek ways to improve how we serve customers and each other. • Earning Your Trust:We build trust through clear, honest, human communication. Job Summary The Director, Cyber Security is a senior technology leader responsible for defining, advancing, and operationalizing an enterprise cybersecurity strategy and multi-year roadmap that protects the organization’s digital assets, systems, and sensitive information against an increasingly complex threat landscape. This role provides both strategic direction and operational oversight of the cybersecurity function, ensuring alignment with business priorities, regulatory requirements, and risk tolerance. The Director partners closely with VP-level leadership and cross-functional stakeholders to embed cybersecurity into all aspects of the organization, enabling secure growth while maintaining a strong risk posture. The successful candidate brings deep cybersecurity expertise, executive presence, and a demonstrated ability to lead organizations, influence senior stakeholders, and drive measurable improvements in security maturity across a dynamic, fast-paced environment. Essential Duties and Responsibilities: The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed. People Leadership & Talent Management ·Build, lead, and scale a high-performing cybersecurity organization, including management of managers and senior individual contributors. ·Establish organizational priorities, operating models, and accountability frameworks to ensure consistent delivery of security outcomes. ·Create and sustain a culture of continuous learning, leadership development, and technical excellence across the cybersecurity function. ·Drive succession planning and long-term talent strategy, ensuring depth of leadership capability across the organization. ·Partner with executive leadership and HR to attract, develop, and retain top-tier cybersecurity leadership and technical talent. Cybersecurity Strategy, Governance & Program Management ·Own and continuously evolve the enterprise cybersecurity strategy, ensuring alignment with corporate objectives, risk tolerance, and business growth initiatives. ·Establish and report on KPIs, metrics, and maturity models to measure program effectiveness, risk reduction, and return on investment. ·Serve as a key advisor to VP-level leadership, translating cybersecurity risks into clear, actionable business decisions. ·Oversee the development, implementation, and governance of enterprise cybersecurity policies, standards, and frameworks aligned to industry best practices. ·Own cybersecurity financial planning, including budgeting, forecasting, and investment prioritization. ·Drive continuous optimization of cybersecurity investments while maintaining strong protection and scalability. Risk Management, Compliance & Third-Party Security ·Oversee enterprise-wide cyber risk management strategy, including risk identification, prioritization, and mitigation aligned to business objectives. ·Drive risk mitigation strategies embedded within business and technology processes. ·Ensure implementation and ongoing enforcement of security controls across infrastructure, cloud environments, and applications. ·Provide executive oversight of third-party risk management programs, including vendor security reviews and contractual requirements. ·Set compliance strategy across applicable regulatory frameworks (e.g., NIST, ISO, SOX, PCI DSS), ensuring audit readiness and operational adherence. ·Act as the escalation point for high-impact cybersecurity risks, partnering with senior leadership on mitigation decisions. Incident Response, Business Continuity & Disaster Recovery ·Oversee enterprise incident response capabilities, ensuring readiness, governance, and continuous improvement. ·Provide senior leadership during major cybersecurity incidents, coordinating across business and technology stakeholders. ·Drive executive-level post-incident reviews, including root cause analysis and long-term remediation strategies. ·Partner with Technology leadership to integrate cybersecurity into enterprise business continuity and disaster recovery planning. ·Ensure ongoing testing, validation, and improvement of resilience capabilities through simulations and exercises. Security Operations, Architecture & Technology Enablement ·Provide strategic oversight of security operations, including SOC capabilities, monitoring, detection, and response maturity. ·Define and drive the cybersecurity technology roadmap, including evaluation and adoption of emerging solutions. ·Ensure alignment of cybersecurity architecture with enterprise infrastructure, cloud platforms, and application strategies. ·Establish and enforce security architecture standards across all environments, including network, endpoint, cloud, and data systems. ·Ensure implementation of data protection strategies, including encryption, DLP, and secure data handling practices. ·Direct the engineering, deployment, and lifecycle management of the enterprise security technology stack, including SIEM platforms, IDS/IPS, EDR/XDR, firewalls, VPNs, and vulnerability scanning and penetration testing tooling. ·Oversee the secure architecture and hardening of core infrastructure services — including DNS, DHCP, and identity and access management platforms such as LDAP and Active Directory — and enforce system hardening baselines such as CIS Controls, DISA STIGs, and USGCB. ·Drive the maturation of 24/7 SOC capabilities and the enterprise adoption of zero-trust architecture and AI-driven threat detection and response automation. ·Ensure secure configuration and protection across cloud platforms (AWS, Azure, and Google Cloud), IoT devices, and mobile endpoints. AI Governance & Emerging Technology Risk ·Sponsor and set the strategic direction for the enterprise AI governance program for the secure and responsible adoption of artificial intelligence and machine learning across the organization, providing executive oversight of the supporting policies, standards, and acceptable-use guidelines. ·Provide executive oversight of AI and machine-learning security risk assessments, including model integrity, training-data protection, and defenses against prompt injection, model evasion, and data-poisoning attacks. ·Partner with Legal, Privacy, and business leadership to align AI adoption with regulatory expectations and emerging AI-specific frameworks (e.g., NIST AI RMF and ISO/IEC 42001). ·Govern the secure use of generative AI and AI-enabled security tooling, balancing innovation and productivity with data protection, intellectual-property safeguards, and risk reduction. ·Monitor the evolving AI threat landscape and direct the responsible integration of AI-driven automation into detection, response, and operational workflows. Awareness, Cross-Functional Partnership & Reporting ·Deliver executive-level reporting on cybersecurity posture, risk trends, and program performance. ·Oversee enterprise-wide cybersecurity awareness and training programs, driving cultural adoption and measurable risk reduction. ·Serve as a strategic partner across Technology, Legal, HR, Compliance, and business functions to embed cybersecurity into operations. ·Influence major business and technology initiatives by integrating cybersecurity considerations early in planning and execution. ·Promote a culture of shared accountability for cybersecurity across the organization. Other Duties ·Must be available to work regular business hours Pacific Standard Time. ·Must also be available to work on-call, evenings and weekends as needed. ·Performs other duties as required to support the business and evolving organization. Required Qualifications: ·High school diploma or GED. ·Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related field. Equivalent professional experience may be considered. ·Minimum of fifteen (15) years of progressive experience in cybersecurity, information security, or related technical fields. ·Minimum of seven (7) years of progressive leadership experience, including direct management of managers within a cybersecurity or technology function. ·Demonstrated experience leading enterprise-scale cybersecurity programs and influencing VP-level stakeholders. ·Proven experience balancing strategic planning with operational execution in a complex and evolving environment. ·Extensive experience securing IT infrastructure, managing vulnerability programs, and leading incident response. ·Experience implementing and managing security frameworks such as NIST CSF, ISO 27001, or CIS benchmarks. ·Strong knowledge of network security, cloud security platforms, and enterprise security operations tools (SIEM, IDS/IPS, EDR). ·Experience with identity management, system hardening, and emerging threat mitigation techniques. ·Familiarity with DevSecOps practices and secure software development lifecycle (SDLC). Preferred Qualifications: ·CISM, CISSP, CEH, or comparable cybersecurity certifications. ·Experience in telecommunications, ISP, or highly regulated industries. ·Experience leading cybersecurity transformation initiatives in a high-growth or scaling organization. ·Experience presenting cybersecurity strategy or risk posture to executive leadership or board-level stakeholders. Knowledge, Skills, and Abilities:

Design and maintain virtualized infrastructure and Kubernetes clusters with automation focus, providing technical leadership. | 7+ years experience with Linux/Unix, automation tools like Ansible and Terraform, and programming languages including Python. | This is a remote position. Position Title: Senior Systems Engineer Base Salary: $99,200 to $151,300 annually DOE Benefits: Medical, dental, vision, 401k, flexible spending account, paid sick leave and paid time off, parental leave, quarterly performance bonus, training, career growth, and education reimbursement programs. Ziply Fiber is a local internet service provider dedicated to elevating the connected lives of the communities we serve. We offer the fastest home internet in the nation, a refreshingly great customer experience, and affordable plans that put customers in charge. As our state-of-the-art fiber network expands, so does our need for team members who can help us grow and realize our goals. Our Company Values: Genuinely Caring: We treat customers and colleagues like neighbors, with empathy and full attention. Empowering You: We help customers choose what is best for them, and we support employees in implementing new ideas and solutions. Innovation and Improvement: We constantly seek ways to improve how we serve customers and each other. Earning Your Trust: We build trust through clear, honest, human communication. Job Summary The Senior Systems Engineer will have large company engineering and application experience who is adept at working with development and system administration teams to implement, maintain and troubleshoot Ziply Fiber’s expanding systems infrastructure with a focus on automation and efficiency. You will design and maintain Hypervisor Clusters, Kubernetes Clusters, Linux and Windows virtual machines, storage area networks, and infrastructure automation. This role provides technical leadership, mentors other engineers, and leads cross-functional initiatives to improve platform reliability, security, and efficiency. Essential Duties and Responsibilities: The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed. Technical Leadership & Team Enablement · Lead the design and implementation of complex automation and infrastructure solutions. · Serve as a technical subject matter expert and provide technical guidance across teams. · Mentor and support the development of other engineers through coaching, code reviews, and knowledge sharing. · Conduct technical research and maintain viable knowledge of technology trends, new software, and best practices. · Provide training to other network domain teams for the adoption of automation capabilities. Automation Engineering & Delivery · Contributes to the development of custom code to integrate platform components, fill tooling gaps and solve potentially unique situations. · Perform development, testing, implementation, and review of complex automation solutions related to provisioning, monitoring, and configuring a network and infrastructure environment. · Employ modern CI/CD pipelines using DevOps tooling. Systems Integration & Reporting · Automating operational reports e.g., SLA reporting, utilization statistics, and network forecasting. · Establishing system/data integrations to enhance existing or establish new processes. Quality, Standards & Documentation · Drive standards, best practices, and architectural decisions for systems infrastructure and automation. · Provide peer review and guidance on code and perform quality assurance tasks. · Responsible for creation of and contribution to; processes, standards, technical documentation, and design diagrams. · Write and maintain technical standards and documentation. Security Collaboration · Able to work closely with InfoSec team to address security and vulnerability related issues. Availability & Operational Support · Must be available to work regular business hours Pacific Standard Time. · Must also be available to work on-call, evenings and weekends as needed. Other Duties · Performs other duties as required to support the business and evolving organization. Required Qualifications: High school diploma or GED. Bachelor’s degree in computer science or similar field, or equivalent work experience. Minimum of five (5) years of engineering experience working with Linux/Unix systems with a heavy emphasis on Red Hat and Ubuntu operating systems in a large VM environment. Minimum of seven (7) years working in a large, geographically distributed server architecture. Minimum of seven (7) years of engineering and application experience working with development teams and system administration teams in a large, geographically distributed server architecture, including distributed server systems running internally developed applications. [JK1] Minimum of seven (7) years of experience working for large telecommunication companies. Minimum of seven (7) years of networking experience with focus on server connectivity. Experience with large scale software upgrades and versioning changes across multiple servers. Development Skills: Powershell Python JavaScript NodeJs Hands-on application experience: Deploying/configuring Nginx, Apache and core Linux subsystems like bind, iptables, etc. Version control (e.g., Git/Gitlab, Github) CI/CD (e.g., Jenkins, Travis, TeamCity or equivalent) Docker containerization and clustering (Kubernetes/ECS) Configuration management tools (e.g., Terraform, Ansible, Puppet, Chef) Knowledge of software life cycle management with emphasis on inception, defining processes and developing technical business requirements. Experience with Agile (Scrum, Kanban) software delivery methodology. Ability to write Ops guides/MOPs/etc. as needed. Effectively communicate between non-technical people and deeply technical SME’s. Ability to communicate effectively across multiple large organizational structures. Driven to identify and provide effective solutions as needed. Knowledge, Skills, and Abilities: Ability to work independently and apply sound judgment and reasoning skills to a variety of situations. Ability to collaborate effectively within a team and across departments. Strong verbal and written communication, attention to detail and organizational skills. Ability to work within critical deadlines. Ability to adjust to rapidly changing priorities and schedules. Ability to provide excellent customer service. Proven ability to understand and codify a manual process into an automated process using workflow-like concepts. Understanding and familiarity with Ansible, Jinja and other Infrastructure as Code tools. Understanding and familiarity with computing technologies such as Kubernetes, Docker, Linux, containers, virtualization, and cloud technologies (OpenStack, GCP, Azure, etc.). Knowledge of IP/Ethernet networking fundamentals. Strong understanding of security related frameworks and AAA implementation model. Interest and ability to research new and emerging technologies to better solve networking problems. Excellent analytical skills. Strong organizational, multi-tasking, and prioritizing skills. Ability to work independently and apply sound judgment and reasoning skills to a variety of situations, multi-task and collaborate effectively with other personnel to meet deadlines. Ability to translate highly technical information into non-technical terms and user documentation. Strong verbal and written communication, attention to detail and familiarity with compliance concepts. Ability to work within critical deadlines. Must be available to work regular business hours Pacific Standard Time. Must also be available to work on-call, evenings and weekends as needed. Work Authorization Applicants must be currently authorized to work in the US for any employer. Sponsorship is not available for this position. Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.