Contract Senior IT Infrastructure Engineer

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. Equivalent senior-level professional experience may be considered.
• Minimum of 12 years of progressive IT infrastructure, cloud, security operations, or systems-engineering experience, including Level 3 responsibilities.

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, and other relevant factors.

Potential base pay range

$95—$119 USD

Our Diversity, Equity & Inclusion Mission Statement: Keros is an inclusive company. We believe that diversity drives innovation. We continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees. As such, Keros takes a holistic approach in mentoring, coaching, and developing all of our Keros team members.

Recruitment & Staffing Agencies

Keros Therapeutics does not accept unsolicited resumes from any source other than the candidate directly. Any unsolicited submission by an agency to Keros is prohibited. Any resume submitted by an agency without a signed contract or expressed consent by a member of the Keros Therapeutics Human Resources Department, will be considered property of Keros Therapeutics, and no fee shall be owed with respect thereto.

• Experience in biotechnology, pharmaceutical, life sciences, healthcare, or another regulated industry.
• Experience guiding complex technology programs or standards that span infrastructure, cybersecurity, scientific systems, and corporate platforms.
• Experience with Rapid7, Cisco Meraki, Zscaler, Commvault, and scientific or lab technology environments.
• Relevant Microsoft, Rapid7, Cisco/Meraki, Zscaler, CISSP, CISM, GIAC, or comparable expert-level certifications.

• Serve as the Senior advisor and final technical escalation point for enterprise infrastructure, cloud, identity, endpoint, network, backup, and cybersecurity operations.
• Define target architectures, engineering standards, reference patterns, technical roadmaps, and lifecycle strategies that support organizational goals and future requirements.
• Evaluate significant technology risks, dependencies, and design tradeoffs; make recommendations where precedent is limited and decisions affect multiple functions.

• Establish technical direction for the Rapid7 security platform, security monitoring, vulnerability management, incident handling, remediation, detection coverage, and operational reporting.
• Lead resolution of critical security and infrastructure events, including advanced troubleshooting, root-cause analysis, containment, recovery, corrective actions, and validated closure.
• Define resilience, backup, recovery, hardening, and zero-trust engineering practices; guide testing and continuous improvement of those controls.

• Lead the architecture and continual improvement of Microsoft cloud, identity, endpoint, collaboration, application-deployment, automation, and patch-management services.
• Guide enterprise networking, secure access, office and lab connectivity, backup, recovery, and integration patterns for scientific systems and regulated business applications.
• Develop automation and engineering solutions that improve reliability, security, observability, supportability, and operational efficiency across platforms.

• Guide complex cross-functional initiatives and architecture decisions, building alignment among IT, cybersecurity, scientific, quality, finance, legal, and technology partners.
• Establish and maintain architecture records, standards, SOPs, runbooks, technical decision documents, knowledge, and evidence required for sustainable operations and assurance.
• Support GxP, SOX ITGC, 21 CFR Part 11, NIST Cybersecurity Framework, audits, vendor risk, and security assessments through technical leadership and control design.
• Mentor engineers, review complex designs, and raise engineering capability through standards, reusable patterns, technical coaching, and knowledge transfer.

• Microsoft Azure, Microsoft 365, Entra ID, Intune, Defender, Rapid7, Cisco Meraki, Zscaler, Commvault, and Egnyte, along with additional enterprise, collaboration, security, and scientific platforms.

• Senior-level expertise: Recognized expertise across enterprise infrastructure and several related disciplines, with the judgment to advise on critical issues and set technical direction.
• Architecture and strategy: Demonstrated success defining standards, reference architectures, roadmaps, lifecycle strategies, and long-range solutions across multiple platforms.
• Complex problem solving: Ability to resolve significant and unique issues using conceptual thinking, limited precedent, independent judgment, and a long-term view.
• Microsoft and automation: Deep Microsoft cloud, identity, endpoint, security, and PowerShell expertise.
• Security and resilience: Advanced experience with SIEM/XDR, vulnerability management, incident handling, network security, secure access, backup, recovery, and control engineering; Rapid7 strongly preferred.
• Influence and technical leadership: Ability to guide critical assignments, align decision makers, mentor engineers, and drive adoption without formal authority.
• Regulated operations: Strong documentation, ITSM, change-management, risk, audit, and compliance discipline in environments handling sensitive or regulated information.