SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Zenoti is a cloud-based SaaS platform serving the beauty and wellness industry, powering over 30,000 salons, spas, medspas, and fitness studios globally. The company has achieved unicorn status ($1B+ valuation) and recently raised $80M from TPG.
As Lead Reliability Engineer for Network and Security, you will own the design, build, and operation of Zenoti's cloud network and security infrastructure across a distributed, multi-tenant SaaS estate. Your responsibilities include:
**Network Architecture & Operations:** Design and operate the network backbone spanning Azure and AWS, including vWAN/hub-spoke topology, ExpressRoute/VPN connectivity, cross-cloud integration, private endpoints, DNS, routing, and segmentation. Engineer for redundancy with tested failover procedures.
**Security Perimeter & Edge:** Manage WAF, DDoS protection, Front Door/CDN, firewalls, and egress controls with no single points of failure. Maintain high network visibility through flow analytics and cross-cloud path monitoring.
**Infrastructure as Code & Automation:** Treat network and security as code using Terraform modules, IaC scanning gates, drift detection, and policy-as-code (OPA, Azure Policy, SCPs). Automate certificate and secrets lifecycle management and evidence collection.
**Detection, Response & Resilience:** Lead detection engineering and SIEM tuning. Establish incident command processes with root-cause-to-control feedback loops. Design and test disaster recovery and ransomware-recovery architecture with scheduled failover runbooks.
**Compliance & Governance:** Maintain control registries mapped to SOC 2, PCI-DSS, HIPAA, and regional privacy laws. Govern identity, PKI, and encryption aligned with InfoSec policy.
**Architecture Leadership:** Run design reviews and readiness assessments for new platforms. Manage risk-acceptance workflows, own the technical roadmap, mentor engineers, and provide leadership with metric-anchored risk reporting.
**Requirements:**
- 8+ years designing and operating infrastructure in Azure (primary) and AWS, with deep expertise in both network and security
- Deep cloud networking expertise: vWAN/hub-spoke, ExpressRoute/VPN (IPSec), BGP, routing, DNS, load balancing, private connectivity, firewall and WAF management, including complex cross-cloud connectivity troubleshooting
- Security fundamentals: TLS/PKI, IAM, SIEM, threat analysis, EDR, vulnerability/patch management across Windows and Linux
- Strong automation skills: production IaC (Terraform preferred; ARM/Bicep/Ansible a plus), CI/CD pipeline integration, scripting in Python, PowerShell, or Bash
- Multi-tenant SaaS architecture knowledge: tenant isolation, blast-radius thinking, data residency across regions, GDPR and regional compliance
- Workload and data security: Kubernetes (AKS/EKS) hardening, encryption and key management, SQL Server and PaaS datastore hardening
- Brownfield pragmatism: ability to migrate legacy estates to secure baselines without outages through phased adoption
- Solid command of SOC 2, PCI-DSS, and HIPAA audits, including customer security questionnaires
- Clear written communication: ability to write ADRs and translate risk into business terms for leadership and auditors
- Ability to influence through technical depth in a fast-paced, scaling SaaS environment
**Nice to have:** AZ-500/SC-100, AWS Security Specialty, CISSP/CCSP, CKS certifications.
