Senior Infrastructure and Security Engineer at 4D Molecular Therapeutics

Emeryville, California, United States -

Full Time

Start Date

Immediate

Expiry Date

28 Jun, 26

Salary

128000.0

Posted On

30 Mar, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Infrastructure Design, Security Engineering, Cloud Services, Endpoint Infrastructure, Virtualization, Windows, macOS, Linux, Active Directory, Windows Server, Google Cloud Platform, Automation Scripts, Vulnerability Management, Incident Response, SOX Compliance, 21 CFR Part 11

Industry

Biotechnology Research

Description

Attention recruitment agencies: All agency inquiries are vetted through 4DMT’s internal Talent Acquisition team. No unsolicited resumes will be accepted. The 4DMT Talent Acquisition team must expressly engage agencies on any requisition. Agencies contacting hiring managers directly will not be tolerated, and doing so may impact your ability to work with 4DMT in the future. 4DMT is a leading late-stage biotechnology company advancing durable and disease-targeted therapeutics with potential to transform treatment paradigms and provide unprecedented benefits to patients. The Company’s lead product candidate 4D-150 is designed to be a backbone therapy forming the foundation of treatment of blinding retinal vascular diseases by providing multi-year sustained delivery of anti-VEGF (aflibercept and anti-VEGF-C) with a single, safe, intravitreal injection, which substantially reduces the treatment burden associated with current bolus injections. The Company’s lead indication for 4D-150 is wet age-related macular degeneration, which is currently in Phase 3 development, and second indication is diabetic macular edema. The Company’s second product candidate is 4D-710, which is the first known genetic medicine to demonstrate successful delivery and expression of the CFTR transgene in the lungs of people with cystic fibrosis after aerosol delivery GENERAL SUMMARY We are seeking a highly skilled and experienced Senior Infrastructure and Security Engineer to join our dynamic and growing team. This role is pivotal in ensuring the seamless operation, scalability, and security of 4DMT’s IT infrastructure, enterprise end-user services, and cloud environments. The Senior Infrastructure and Security Engineer will play a key role in designing, implementing, and maintaining cutting-edge infrastructure and security solutions to support organizational growth and innovation. This role oversees 4DMT’s IT endpoint infrastructure and enterprise end-user services IT infrastructure, including servers, cloud services, hardware systems, and applications Planning and implementation of comprehensive infrastructure solutions aligned with organizational needs. MAJOR DUTIES & RESPONSIBILITIES: Infrastructure Design & Management: Plan, design, develop, and implement scalable, secure, and user-focused hybrid IT solutions, including world-class infrastructure, Cloud, high-end workstations, desktops, laptops, mobile devices (secure BYOD). Manage virtualization technologies (e.g., VDI/VM) to enable flexible work arrangements. Deploy and configure Windows, macOS, and Linux operating systems to ensure compatibility, performance, and compliance with security standards. Administer and support Active Directory environments, including Group Policy management, user accounts, and domain controller maintenance. Maintain and optimize Windows Server and Linux systems, ensuring high availability, security, and performance. Support Google Cloud Platform (GCP) infrastructure, including compute, storage, and networking services, while leveraging GCP tools for monitoring, security, and cost optimization. Implement and maintain system images, software packages, and productivity/business applications. Automation & Optimization: Develop and manage automation scripts and workflows to optimize operations, enhance user experience, and increase efficiency. Build comprehensive automated infrastructure management solutions, including configuration management, monitoring, and analytics, to improve operational efficiency and reliability. Continuously identify opportunities for automation and process improvement, driving innovation and operational excellence. System Monitoring & Troubleshooting: Proactively monitor system performance and ensure high availability, reliability, and scalability. Rapidly troubleshoot and resolve hardware, software, and system issues, including those related to Active Directory, Windows, Linux, and GCP environments. Security & Compliance: Security Operations: Implement and maintain cybersecurity controls for infrastructure and endpoints, including vulnerability management and data loss prevention. Support the detection and response to security incidents, assisting with forensic investigations and remediation. Policy & Compliance: Help develop and update security policies, standards, and procedures for IT infrastructure and end-user services. Participate in risk assessments and contribute to strategies that address information security, business continuity, and compliance requirements. Ensure compliance with regulatory requirements (e.g., SOX, 21 CFR Part 11) and industry best practices. Awareness & Reporting: Assist with security awareness initiatives to educate staff on policies and best practices for protecting company assets. Monitor infrastructure security metrics and report on performance to ensure continuous improvement. Demonstrate extensive expertise in Google Cloud Platform (GCP), including advanced security, monitoring, automation, and optimization of cloud infrastructure. Collaboration & Support: Provide technical support to end users, resolving issues promptly and effectively. Collaborate with cross-functional IT and security teams, as well as external partners, to assess needs, address emerging threats and vulnerabilities, and integrate technology solutions. Foster strong relationships with stakeholders to align technology solutions with business goals. Technology Evaluation: Evaluate emerging technologies and recommend solutions that align with business objectives and budget constraints. Stay current with industry trends to inform organizational decisions and future-proof solutions. Other Responsibilities: Participate in audits as needed and ensure alignment with IT policies and standards. Perform other duties as assigned, adapting to the dynamic needs of the organization. QUALIFICATIONS: Education: Industry recognized technical level education & experience. CISSP or GCP Certification preferred. Experience: 3-5 years' experience as user-focus infrastructure engineer delivering solutions in highly regulated, complex and multi-vendor ecosystems with a strong preference for candidates having pharma or biotech industry expertise and a deep understanding of compliance-driven environments. 3-5 years' experience managing desktop and server OS and application patching and application packaging using sophisticated management systems (e.g. Intune, System Center Configuration Manager) 3-5 years' experience supporting Windows Enterprise customers in a large-scale (300+ node) environment. Other Experience: Successful track record of infrastructure architecture and administration, execution, and delivery. Ability to multi-task in a fast-paced, dynamic environment. Experience working in a regulated networking environment (SOX and 21CFR11). Excellent organizational, communication and customer service skills with active-listening skills. Proven adaptability to shifting project schedules, priorities, and assignments; able to make effective decisions under pressure. Demonstrated problem-solver with the ability to cope under pressure and coordinate multiple activities in a dynamic, fast-paced team environment. Excellent written and documentation skills including proof reading and attention to detail. Hands-on experience with hardware and software troubleshooting, system imaging, and software deployment tools. Must be a self-driven, motivated IT professional with strong analytical and problem-solving skills, and ability to diagnose and resolve complex technical issues. Excellent communication and interpersonal skills, with the ability to work effectively in a team environment and interact with diverse stakeholders including executive management. Proactively identify opportunities for process improvements and automation to streamline end-user support services. Proficient in automation technologies, including Pipeline Pilot, MS Power Automate and additional scripting languages, with a strong ability to leverage scripting expertise to streamline processes, enhance efficiency, and drive operational excellence. Demonstrate extensive expertise in Google Cloud Platform (GCP) and Azure, including advanced security, monitoring, automation, and optimization of cloud infrastructure" under the Security & Compliance section. Comprehensive expertise in operating systems (Windows, macOS, Linux), virtualization technologies (e.g., VMware, Citrix Virtual Apps and Desktops), and endpoint management solutions (e.g., Microsoft Intune, SCCM, Tanium), M365, Okta, Active Directory, etc. Other Qualifications/Skills: Strong hands-on experience with Active Directory, Windows, Linux, Google Cloud Platform (GCP), and Azure. 5+ years biopharmaceutical experience in fast-growing environment. Office environment with daily onsite presence required. Daily onsite presence in an office environment. Proven ability to adapt to shifting priorities while maintaining attention to detail and delivering high-quality results. Travel: N/A Physical Requirements and Working Conditions: Physical Activity - Repetitive motions: Making substantial movements (motions) of the wrists, hands, and/or fingers. Fingering: Picking, pinching, typing or otherwise working, primarily with fingers rather than with whole hand or arm as in handling. Talking: Expressing or exchanging ideas by means of the spoken word. Physical Requirements - Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met. Working Conditions - The worker is not substantially exposed to adverse environmental conditions (as in typical office or administrative work). Base salary compensation range: $99,000 - 128,000 Please note, the base salary compensation range and actual salary offered to the final candidate depends on various factors: candidate’s geographical location, relevant work experience, skills, and years of experience. 4DMT provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, status as a covered veteran, and any other category protected under applicable federal, state, provincial and local laws. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Responsibilities

This pivotal role involves designing, implementing, and maintaining scalable, secure hybrid IT solutions across infrastructure, end-user services, and cloud environments, focusing on servers, hardware, and applications. Major duties include managing virtualization, deploying operating systems (Windows, macOS, Linux), administering Active Directory, supporting GCP, and developing automation workflows for operational efficiency.