Lyell Immunopharma

Lyell Immunopharma

IT Infrastructure Manager

South San Francisco, California, United States · Director

Sponsorship not specified$175k-$195kDetected 6 days ago
PythonRubyPowerShellAWSTerraformLinuxDevOpsCybersecuritySIEMComplianceRoadmappingVendor ManagementFirewallVPNCiscoLeadershipCommunicationCollaborationProblem SolvingGxP

About the role

  • The individual in this role serves as the internal technical expert for Lyell's infrastructure, cloud, identity, and collaboration environments.
  • This is a hands-on individual contributor role responsible for the configuration, implementation, and ongoing operation of these platforms in partnership with Lyell's managed service provider (MSP).
  • Act as the Tier 3 escalation point for the service desk, personally resolving complex or time-sensitive infrastructure incidents during business hours and providing guidance to service desk staff on end-user computing systems.

Responsibilities

  • Design and build infrastructure across cloud (AWS), on-premises, networking, identity, and collaboration platforms in line with best practices, industry standards, and Lyell's technology strategy.
  • Provide key technical input and feedback into architecture standards, infrastructure strategy, and roadmap planning led by IT leadership - drawing on hands-on knowledge of platform capabilities, constraints, and operational realities - and maintain up-to-date documentation of systems configuration and project status
  • Own the configuration, operation, and optimization of Lyell's AWS environment - implementing governance, cost management, and security controls per defined standards and identifying opportunities to optimize and maximize the value of Lyell's infrastructure investment.
  • Configure and maintain on-premises server and network systems, including VMware vSphere clusters, Windows Server, Active Directory, and network platforms (Juniper, Cisco Meraki, Palo Alto Networks) spanning routing, switching, firewall policy, and segmentation.
  • Support lab infrastructure, including associated software and attached instrumentation.
  • Own security tooling configuration per confirmed architecture (EDR, SIEM, and related platforms), and partner with the validation team on computer system validation (CSV) to ensure infrastructure designs support compliant, audit-ready operations and SOX and GxP audit activities.
  • Translate approved architectures and designs into detailed configurations and implementation plans; execute builds and changes, validate against requirements, and hand off steady-state operations to the MSP while retaining configuration and implementation ownership
  • Own the configuration, and governance of Okta, Microsoft 365, Zoom, and Slack as core infrastructure platforms, ensuring identity, access, and collaboration systems meet security, audit, and compliance requirements (e.g., access reviews, joiner/mover/leaver, audit logging).
  • BA/BS in an information technology field, or equivalent experience, with a minimum of 10 years in IT infrastructure, including 8+ years of hands-on solution architecture, technical design, and implementation across cloud, on-premises, and networking environments.
  • We are committed to building an open, diverse and inclusive culture for all employees.

Requirements

  • AWS certifications (Solutions Architect, Security Specialty, SysOps, or DevOps Engineer); experience with infrastructure-as-code tooling (Terraform, CloudFormation, or equivalent);

Nice to have

  • Demonstrated experience in a life sciences or biotech environment, including an understanding of GxP, validated systems, and regulated IT operations.
  • Deep AWS expertise - system engineering, cost governance, security, and operational best practices.
  • Extensive experience with Windows Server, VMware vSphere, and Active Directory across macOS, Windows, and Linux systems.
  • Hands-on administration and governance experience with Okta, Microsoft 365, Zoom, and Slack.
  • Strong network administration experience and fundamentals (routing, switching, firewall rules, segmentation), with hands-on experience on platforms such as Cisco Meraki and Palo Alto Networks.
  • Experience managing and monitoring system backups (e.g., Veeam), and managing VPN, telecommunications, and video conferencing solutions.
  • Experience with one or more scripting/automation languages (Python, PowerShell, Ruby, or equivalent) or leveraging AI or other workflow automation tools to automate repeatable work
  • Experience managing or overseeing MSP or third-party service delivery relationships, and serving as a Tier 3 escalation point for service desk or operations teams.

Skills

  • Ability to produce clear system documentation and standards that others can execute against.

Compensation

  • The salary range is an estimate, and the actual salary may vary based on Lyell's compensation practices and an applicant's qualifications and experience.

Benefits

  • The salary range for this position is $175,000 to $195,000, annually, with the opportunity to earn an annual bonus.
  • Employees are also eligible to participate in Lyell's Equity Incentive Plan.
  • Ensure backup and disaster recovery integrity (e.g., Veeam), including monitoring backup health and resolving exceptions, and manage VPN, and telecommunications infrastructure.

Company info

  • At Lyell, we believe that highest performing teams include people from a wide variety of backgrounds and experiences who respectfully challenge each other.

Visa & Work Authorization

  • Lyell is proud to be an equal opportunity employer and does not discriminate on the basis of race, color, citizenship status, national origin, ancestry, sex, sexual orientation, age, religion, creed, physical or mental d
Apply directly at Lyell Immunopharma →Create a free account for alerts like thisView Lyell Immunopharma immigration profile

This listing is sourced directly from Lyell Immunopharma's careers page and normalized into a canonical job model.