Director of Infrastructure
AllSpice
full-time
Posted on:
Location Type: Hybrid
Location: Boston • Massachusetts • United States
Visit company websiteExplore more
Job Level
About the role
- Own AllSpice's infrastructure, security, and compliance programs end-to-end.
- Own AllSpice's security posture: policies, incident response, disaster recovery, and ongoing risk assessment.
- Drive SOC 2 compliance, penetration testing, and audit processes; evaluate additional security certifications as needed.
- Make architectural decisions on infrastructure direction, including cloud strategy, cost optimization, high availability, and scaling.
- Work with legal counsel on security and data-protection matters, including DPAs, breach notification obligations, and regulatory requirements.
- Partner with customer success and sales to support enterprise deployments, IT security reviews, and SSO/OIDC integrations.
- Serve as the primary technical point of contact for customer InfoSec questionnaires and procurement processes.
- Support self-hosted and GovCloud deployments for customers with ITAR, EAR, or CUI requirements.
- Hire, mentor, and manage infrastructure engineers as the team grows.
- Set team goals, define processes, and establish on-call rotations.
- Participate in the on-call rotation and lead incident response when needed.
- Create growth paths for ICs and foster a culture of operational excellence.
- Architect and maintain production AWS environments using Terraform and infrastructure-as-code.
- Automate deployments, backups, and disaster recovery across cloud and self-hosted configurations.
- Monitor and improve performance, availability, and cost efficiency of production systems.
- Work closely with application developers to deploy infrastructure solutions to product problems.
Requirements
- 10+ years of cloud infrastructure and/or security engineering experience
- 2+ years of people management experience (hiring, mentoring, performance management)
- Deep hands-on expertise with AWS services (IAM, GuardDuty, VPC, Lambda, etc.), Linux administration, and Docker
- Demonstrated ownership of security policy, compliance programs (SOC 2, ISO 27001), and incident response
- Experience coordinating with legal counsel, customer-facing teams, and executive leadership on security and compliance matters
- Strong project management skills with ability to lead cross-functional initiatives from engineers to customers
- Comfort with ambiguity and a high degree of autonomy
- Bachelor's degree or higher in a technology-related field
- Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder)
- (preference, not required) Availability to work out of our flex offices in San Francisco or Boston 1–2 days per week
Benefits
- Opportunity to make a large impact at an executive level
- Supportive and smart colleagues
- Flexible work
- Competitive salary and equity
- Health, dental, and vision benefits
- Generous PTO
- Home office stipend
- Relocation package
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
cloud infrastructuresecurity engineeringAWSLinux administrationDockerTerraforminfrastructure-as-codepenetration testingdisaster recoverySOC 2 compliance
Soft Skills
people managementproject managementleadershipmentoringcross-functional collaborationautonomycommunicationgoal settingoperational excellenceincident response
Certifications
SOC 2ISO 27001