Department Manager, PRE Division, Platform Department, Tokyo

Overview

This position is open due to organizational changes, and we are looking for a new Department Manager. As our cloud and on-premises infrastructures become more complex and security requirements continue to grow, we need a leader who can strengthen both operational stability and security maturity. The new Department Manager will play a pivotal role in driving company-wide infrastructure security initiatives in close collaboration with the CISO Office.

Responsibilities and Duties

As the Department Manager, you will lead a compact team of three members (two employees and one partner) responsible for core infrastructure and security foundations. The department manages both on-premises environments hosted on Sakura Internet and mail delivery/forwarding platforms on Sakura Cloud (MTA), ensuring their stable operation and continuous improvement. In addition, you will serve as a key member of the cross-functional Security CoE (SCoE), driving infrastructure security enhancements and guardrail construction from an infrastructure perspective.

1.Organizational Management & Team Building

• Manage and develop team members (two employees and one partner), including goal setting, performance evaluation, 1-on-1 meetings, and career development support.
• Oversee day-to-day task management and resource allocation to ensure stable operations and timely delivery of initiatives.
• Strengthen collaboration with partner companies, promote operational efficiency, and standardize knowledge and processes across the team.

2.Infrastructure Operations & Maintenance Leadership

• Ensure stable operations, troubleshooting, and configuration management of on-premises infrastructure, primarily hosted on Sakura Internet.
• Oversee operations and continuous improvement of mail transfer/delivery platforms (MTA) and related services in the Sakura Cloud environment.
• Work closely with related teams to design and implement robust, scalable infrastructure architectures, ensuring they adhere to company-wide security and reliability standards.

3.Infrastructure Security Improvement via Security CoE (SCoE)

• Act as a core member of the virtual organization “Security CoE,” jointly operated by the CISO Office and PRE Division, to provide and promote a secure standard environment (“Paved Road”) that maintains development and operational speed while ensuring safety.
• Co-design security requirements and guardrails based on policies from the CISO Office, translating them into practical, actionable requirements and decision criteria for engineering teams.
• Develop and maintain IaC templates, secure default configurations, guidelines, and mechanisms such as Policy as Code and CI/CD security, and embed them into engineering workflows.

4.Cross-functional Initiative Leadership & Handover to Operations

• Drive key cloud security initiatives, including cloud guardrails, IAM and static credential management, CNAPP utilization, and management of public-facing assets such as DNS and certificates.
• Collaborate with implementation teams and working groups to cover the entire lifecycle, from design and validation through to Runbook/SLO preparation.
• Lead smooth transitions to steady-state operations by coordinating with relevant operational organizations and establishing sustainable processes and responsibilities.

5.Visualization & Continuous Improvement

• Establish metrics and dashboards to visualize the status of security implementation and outstanding risks across infrastructure and cloud environments.
• Continuously review and update guardrails, priorities, and processes based on operational data, incident learnings, and feedback from development/operations teams.
• Promote a continuous improvement cycle (PDCA) for infrastructure security, ensuring that governance and standardization evolve in step with business and technology changes.

Required Skills and Experience

• 5+ years of practical experience as an infrastructure engineer.
• Hands-on experience designing, building, and operating Linux/Unix-based operating systems.
• Experience operating and managing both on-premises infrastructure and cloud platforms (e.g., AWS, GCP, Azure, Sakura Cloud).
• People management and/or leadership experience.
• Practical experience managing teams of three or more members, including performance management, member development, evaluations, and 1-on-1 meetings.
• Experience managing contractors and partner companies, including team structure design and vendor control.
• Fundamental knowledge of security infrastructure and web security, including network security, IAM (access control), and server security.
• Experience analyzing security risks and proposing/implementing improvement measures tailored to on-the-ground realities.

Preferred Skills and Experience

• Practical or implementation experience in cloud security and DevSecOps.
• Experience introducing and operating CNAPP tools and/or CSPM/CWPP tools.
• Experience using IaC (e.g., Terraform, CloudFormation) and Policy as Code (e.g., OPA, Checkov) to drive standardization and automation.
• Experience integrating security checks into CI/CD pipelines.
• Infrastructure-specific operational and technical experience, such as:
  • Experience using and operating Sakura Internet (on-premises) and Sakura Cloud.
  • Experience operating and troubleshooting MTA (Mail Transfer Agent) or other mail delivery/forwarding platforms.
  • Experience overseeing company-wide management of public-facing assets (DNS, SSL/TLS certificates, etc.).
• Process management experience in cross-functional organizations, such as:
  • Experience launching and driving company-wide initiatives like Security CoE or CCoE.
  • Experience creating guidelines and Runbooks for development/operations teams and leading the transition to steady-state operations.
• Experience in AI development and/or experience in using AI tools to improve development processes.
  • Money Forward is at a major turning point, shifting "from Cloud to AI." We are currently driving "AX (AI Transformation)"—the next step beyond DX—with the goal of providing "Digital Workers," where AI agents autonomously execute tasks. As we enter a phase of evolving into Japan's No. 1 back-office AI company by integrating AI agents into all of our products in the future, we are looking for individuals who can contribute to AI-driven development and value creation.

Language Requirements

Japanese:

• Business-level Japanese (fluent), capable of handling communication with clients and internal stakeholders fully in Japanese.
• Capable of leading meetings, writing documentation, and negotiating requirements in Japanese without the need for an interpreter.

English:

• TOEIC score of 700 or above, plus the ability to handle meetings and text communication in English soon after joining.
• Comfortable participating in discussions with global counterparts and reading/writing technical documentation in English.
  (Note: If you have other qualifications or experiences demonstrating English proficiency, such as EIKEN Pre-1, EIKEN Grade 2 (CSE score 1950+), TOEFL iBT 60+, IELTS 5.0+, or Cambridge FCE, feel free to discuss with us.)

Technology Stack

• Web Server-side: N/A (not specified)
• Database: Amazon RDS, Amazon Aurora MySQL, Amazon Aurora PostgreSQL, MySQL, PostgreSQL
• Middleware: Docker, Kubernetes (Amazon EKS), Kubernetes CronJob, Ansible
• Platform: AWS, Azure, Google Cloud, On-premises (Sakura Internet), Sakura Cloud
• Infrastructure as Code / Configuration Management: Terraform Cloud (HCP Terraform), Terraform, Ansible

Tools Used

• Repository Management: GitHub
• Project & Task Management: Jira
• Documentation: Notion
• CI/CD & Job Execution: Jenkins, GitHub Actions, Kubernetes CronJob
• Development & Runtime Environment: Docker, Amazon EC2, Kubernetes (Amazon EKS)
• Monitoring & Observability: Datadog
• Audit Logs & Event Processing: Datadog
• Communication: Slack

Work Environment

At Money Forward, we provide an environment where we can create world-class services together, and we are looking forward to welcoming you.

• Provided PC Specs: We provide PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs tailored to business requirements and replacements with the latest OS are also possible.
• Systems to Enhance the Development Environment: Peripheral devices necessary for work (such as displays, mice, keyboards) can be purchased as office supplies. Generally, you can choose from standard products (catalog), and if conditions are met, you can apply for non-standard products as well. (*Excluding certain group companies)
• Money Forward Library: We have a library system where you can freely borrow books, ranging from technical books to management books. Desired books can be purchased at the company's expense.
• Referral Driven: We cover the cost of recruitment meals. There is a referral reward system.
• Conference Participation Support: The company partially covers participation in domestic and international conferences, such as RubyKaigi and Google I/O.