At Keros, our mission is to deliver significant clinical benefit to a wide range of patients with disorders that are linked to dysfunctional signaling of the transforming growth factor-beta (TGF-ß) family of proteins. With a focus on developing differentiated product candidates that are designed to alter TGF-β signaling, we aim to target the pathways critical for the growth, repair and maintenance of blood cells and a number of tissues, including bone, skeletal muscle, adipose and heart tissue. We believe our product candidates have the potential to unlock the full therapeutic benefits of modulating the TGF-β superfamily and provide disease-modifying benefit to patients.

Job Summary

The Sr. IT Infrastructure Engineer is Keros' senior individual contributor for enterprise infrastructure, cloud, identity, endpoint, network, cybersecurity operations, and resilience. This role establishes technical direction, reference architectures, engineering standards, and long-range improvements across multiple related disciplines while remaining hands-on with the most critical and complex assignments.

Operating with broad latitude, the Sr. Infrastructure Engineer advises IT leadership and key decision-makers, resolves issues affecting multiple functions, and guides the adoption of secure, scalable, supportable, and compliant technology platforms. The role provides technical direction and mentorship but does not carry formal people-management accountability.

Primary Responsibilities

Sr. Technical Authority and Architecture

Serve as the Senior advisor and final technical escalation point for enterprise infrastructure, cloud, identity, endpoint, network, backup, and cybersecurity operations.
Define target architectures, engineering standards, reference patterns, technical roadmaps, and lifecycle strategies that support organizational goals and future requirements.
Evaluate significant technology risks, dependencies, and design tradeoffs; make recommendations where precedent is limited and decisions affect multiple functions.

Cybersecurity Operations and Resilience

Establish technical direction for the Rapid7 security platform, security monitoring, vulnerability management, incident handling, remediation, detection coverage, and operational reporting.
Lead resolution of critical security and infrastructure events, including advanced troubleshooting, root-cause analysis, containment, recovery, corrective actions, and validated closure.
Define resilience, backup, recovery, hardening, and zero-trust engineering practices; guide testing and continuous improvement of those controls.

Cloud, Identity, Endpoint, and Network Engineering

Lead the architecture and continual improvement of Microsoft cloud, identity, endpoint, collaboration, application-deployment, automation, and patch-management services.
Guide enterprise networking, secure access, office and lab connectivity, backup, recovery, and integration patterns for scientific systems and regulated business applications.
Develop automation and engineering solutions that improve reliability, security, observability, supportability, and operational efficiency across platforms.

Governance, Influence, and Technical Leadership

Guide complex cross-functional initiatives and architecture decisions, building alignment among IT, cybersecurity, scientific, quality, finance, legal, and technology partners.
Establish and maintain architecture records, standards, SOPs, runbooks, technical decision documents, knowledge, and evidence required for sustainable operations and assurance.
Support GxP, SOX ITGC, 21 CFR Part 11, NIST Cybersecurity Framework, audits, vendor risk, and security assessments through technical leadership and control design.
Mentor engineers, review complex designs, and raise engineering capability through standards, reusable patterns, technical coaching, and knowledge transfer.

Technology Environment

Microsoft Azure, Microsoft 365, Entra ID, Intune, Defender, Rapid7, Cisco Meraki, Zscaler, Commvault, and Egnyte, along with additional enterprise, collaboration, security, and scientific platforms.