JOB SUMMARY:
We are seeking a senior technology leader to own CFSB's cloud strategy, platform engineering, and cloud operating model. Reporting to the [CIO/CTO], this role owns the multi-year cloud roadmap and leads the team that builds and runs the bank's cloud platform — the landing zones, automation, networking, and controls that every other technology team builds on.
This is a hands-on leadership role in a regulated environment. You should be equally comfortable presenting a cloud investment case to executive leadership, reviewing an infrastructure-as-code pull request with an engineer, and explaining to an examiner how cloud controls are designed and evidenced. We expect recommendations and tradeoffs, not problems to be assigned.
The role manages five to eight cloud engineers and partners closely with Information Security, Risk, Compliance, Enterprise Architecture, and the product squads. You are the accountable technology owner for how security and regulatory requirements are implemented and evidenced in the cloud. The team participates in a shared on-call rotation and provides after-hours support to the business; this role serves as its senior escalation point.
Applicants must be permanently authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of any temporary employment visa (e.g. OPT-STEM, H-1B, CPT, etc.) now or in the future.
This role is hybrid (2x per week) for those located in the NYC Metro Area, or fully-remote in 23 select states*
RESPONSIBILITIES:
Cloud Strategy and Roadmap
- Own and maintain the multi-year cloud strategy and migration roadmap, sequenced against business priorities, risk appetite, and budget cycles.
- Translate strategy into executive-ready business cases and committee-level materials, and secure funding and alignment for cloud investments.
- Set cloud target architecture and standards with Enterprise Architecture — reference patterns, approved services, and guardrails for what teams may build.
- Define and report program metrics — migration progress, platform reliability, control coverage, and unit cost trends — and advise leaders on build-versus-buy and cloud-versus-on-premises decisions.
Platform and Infrastructure Engineering
- Lead the design, build, and operation of the cloud platform: multi-account landing zones, identity and access, network architecture and hybrid connectivity, observability, backup, and resilience.
- Establish infrastructure-as-code and pipeline-based delivery as the default provisioning mechanism, and eliminate manual, undocumented change.
- Own the cloud CI/CD, container, and DevOps tooling that squads consume, and enforce engineering standards for code review, environment promotion, change management, and documentation.
- Ensure environments meet availability and recovery objectives; lead resilience testing and serve as senior escalation point for major incidents through to permanent corrective action.
Cloud Security, Risk, and Regulatory Compliance
- Own the implementation and evidencing of cloud technical controls that satisfy policies and standards set by Information Security, Risk, and Compliance, and escalate gaps where cloud reality and policy diverge.
- Serve as the cloud subject matter expert in internal audit, external audit, and regulatory examinations, including FFIEC and GLBA obligations, and produce control evidence and remediation plans.
- Embed guardrails as code — configuration baselines, encryption and key management, privileged access controls, and continuous compliance monitoring — and remediate findings and drift to agreed timelines.
- Contribute cloud expertise to risk assessments, third-party technology reviews, and change and exception review boards; provide input to cloud policies as a reviewer, with ownership, approval, and risk acceptance resting with the second-line functions.
Cost Management and Vendor Relationship
- Own the cloud budget: forecast spend, cost savings plan, and explain variances to Finance and the [CIO/CTO].
- Manage the AWS relationship, including account team engagement, support tier decisions, and technical escalation; provide technical input to procurement and renewals, with commercial negotiation led by Procurement and Vendor Management.
Leadership and Team Development
- Recruit, develop, and retain cloud engineers; set goals, coach, conduct performance reviews, and create clear technical development paths so no critical capability rests on a single person.
- Balance squad-embedded assignments against core platform work as priorities shift, and represent cloud engineering in technology leadership forums.
KNOWLEDGE, SKILLS, AND ABILITIES:
Technical
- Deep hands-on AWS expertise across IAM, networking, compute, storage, database, and cost management.
- Strong cloud networking: VPC and subnet design, Transit Gateway, CloudWAN, segmentation, and hybrid connectivity.
- Proven infrastructure-as-code experience, Terraform preferred — modules, state, and refactoring into code.
- Experience with Git-based workflows, CI/CD, and container platforms such as ECS or EKS at production scale.
- Cloud security and multi-account governance: least-privilege IAM, encryption, secrets, and Control Tower.
- Capable of leading complex, multi-step, large scale infrastructure related activities like data-center exit migrations, VPN cutovers, Database migrations, among others.
Professional
- Sound judgment under constraint, balancing delivery speed against risk, cost, and regulatory obligation.
- Technical credibility with engineers and fluency in front of executives, auditors, and examiners.
- Succeeds through Security, Risk, and delivery teams, with a strong hiring and development record.
- Proven track record leading teams towards successful and timely execution of commitments to executive leadership and board of directors.
EDUCATION, TRAINING, AND EXPERIENCE:
- Bachelor's degree in Information Technology, Computer Science, or equivalent experience.
- 10+ years in technology infrastructure, platform, or cloud engineering, including 3+ years leading technical teams.
- Demonstrated ownership of a production cloud environment at enterprise scale, not solely advisory, architecture-only, or program-management exposure.
- Experience in a regulated industry with formal audit, control, and change-management discipline, including direct support of audits or examinations; financial services experience and familiarity with FFIEC guidance and GLBA preferred.
About Community Federal Savings Bank (CFSB)
Community Federal Savings Bank (CFSB) is a federally chartered bank founded in 2001 and headquartered in New York City. CFSB has focused on providing superior service and added value to clients though a solid understanding of relationship banking. We offer a full range of services, including loans, bill payments, card services, internet banking, and merchant processing.
We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, military and/or veteran status, or any other Federal or State legally-protected classes.
Skills Required
- Bachelor’s degree in Information Technology, Computer Science, or equivalent experience
- 10+ years of experience in technology infrastructure, platform engineering, or cloud engineering
- 3+ years leading technical teams
- Demonstrated ownership of a production cloud environment at enterprise scale
- Deep hands-on AWS expertise across IAM, networking, compute, storage, databases, and cost management
- Strong cloud networking experience, including VPC, subnet design, Transit Gateway, CloudWAN, segmentation, and hybrid connectivity
- Infrastructure-as-code experience; Terraform preferred
- Experience with Git-based workflows, CI/CD, and production-scale container platforms such as ECS or EKS
- Cloud security and multi-account governance experience, including least-privilege IAM, encryption, secrets, and Control Tower
- Experience leading complex infrastructure activities such as data-center exits, VPN cutovers, and database migrations
- Experience in a regulated industry with formal audit, control, and change-management discipline
- Direct support of audits or regulatory examinations
- Financial services experience and familiarity with FFIEC guidance and GLBA
- Proven record leading teams toward successful and timely execution of commitments to executive leadership and boards
What We Do
Community Federal Savings Bank is a federally chartered bank that combines consumer and business banking with payment and lending services. It offers checking and savings accounts, ACH and wire transfers, online and mobile banking, bill payment, and business and commercial financing. The bank also partners with emerging and established fintech companies, payment processors, and financial brands, providing technology-enabled infrastructure and support for domestic and cross-border payment products.
.png){kind=logo}
