Senior Manager Network and Cloud Infrastructure

At Wizards of the Coast, we connect people around the world through play and imagination. From our genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to our growing multiverse, we continue to innovate and build new ways to foster friendship and connection. That’s where you come in!

We are seeking a technically strong, security-minded Senior Manager, Network & Cloud Infrastructure to own two of the most consequential infrastructure programs in the organization — simultaneously. This leader will drive our enterprise-wide Zero Trust Network Access transformation while operationalizing Microsoft Sentinel as an active threat detection engine and driving a full on-premises to AWS migration. You will lead the network fabric, the cloud platform, and the security posture of a global multi-studio gaming enterprise, and you will do it from the front.

What You'll Do:

• Lead the Zero Trust Network Access (ZTNA) program from architecture through global deployment — primary sites live by end of 2026, all international sites and legacy VPN fully decommissioned by 2027
• Manage Palo Alto Panorama as the centralized firewall management platform across all on-premises and cloud NGFWs, enforcing policy consistency and eliminating configuration drift
• Lead the Palo Alto Cloud Identity Engine (CIE) integration with the IAM team — enabling Okta group membership to drive firewall enforcement rules and targeting a 5-minute threat response SLA
• Oversee Global-Protect client deployment and version compliance across all endpoints in partnership with Workplace Technology and Intune
• Operationalize Microsoft Sentinel as an active SIEM (RIPPLECREW IR priority): enable analytic rules across all data connectors, ingest enriched O365 audit logs, deploy UEBA Essentials, and build automation playbooks to measurably reduce MTTD
• Lead the full migration from on-premises to AWS, targeting a 60% data center reduction. Implement cloud security solution to tag and monitor all workloads.
• Govern the GCP controlled deployment architecture, ensuring 100% of deployments follow approved IaC patterns with zero unauthorized provisioning
• Deliver VP-level program reporting to Engineering Leadership, the CISO office, Finance, and Executive Sponsors — translating sophisticated infrastructure risk into business language
• Lead, coach, and grow a combined team of 7–10 engineers across Network Engineering and Cloud Infrastructure, managing a 3-year program investment of $4M–$7M

What You'll Bring:

• 8+ years of enterprise network and/or cloud infrastructure engineering, with at least 3 years in a people leadership or senior technical lead role
• Hands-on Palo Alto NGFW and Panorama expertise — you have deployed and managed NGFWs at scale, not just managed the team that did
• Proven ZTNA architecture and deployment experience — deep enough to own the program, resolve blockers, and guide engineers through complex site-specific challenges
• AWS expertise at Solutions Architect Professional level — VPC, EKS, migration patterns, IAM Identity Center, and cost governance
• Microsoft Sentinel hands-on: analytic rule authoring, KQL proficiency, Logic Apps playbook development — you have operationalized a Sentinel deployment, or have the depth to do it here
• Experience with Microsoft Defender for Cloud Apps and UEBA policy management
• Familiarity with GCP architecture and controlled deployment patterns
• Experience managing multi-million dollar infrastructure budgets with Finance-level accountability
• Demonstrated ability to run concurrent, cross-disciplinary infrastructure programs without losing momentum on either
• Track record of building and developing high-performing technical teams

Nice to Have:

• Palo Alto Cloud Identity Engine (CIE) integration experience — identity-to-network enforcement is a Year 2 program anchor
• Prior incident response involvement in a network or cloud security context
• Experience in a multi-studio, multi-BU entertainment or gaming enterprise environment
• Active certifications: PCNSE, AWS Solutions Architect Professional, Microsoft SC-200, or FinOps Certified Professional

In compliance with local law, we are disclosing the compensation range for this role. The range listed is just one component of Wizards of the Coast’s total compensation package for employees. Employees may also be eligible for annual and long-term incentives. In addition, Wizards of the Coast provides a variety of benefits to employees. Here’s a look at what your benefits package may include: Medical, Dental & Vision Insurance, Paid Vacation Time & Holidays, Generous 401(k) match, Paid Parental Leave, Volunteer Program, Employee Giving & Matching Gifts Programs, Tuition Reimbursement, Product Discounts, and more.

Wizards is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.

The above is intended to describe the general content of and the requirements for satisfactory performance in this position. It is not to be construed as an exhaustive statement of the duties, responsibilities, or requirements of the position.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you are selected to move forward in our application process and need to request an accommodation, please let your recruiter or coordinator know.