Director, Infrastructure Security

Responsibilities

• Lead and mentor an existing team of 5–6 infrastructure security engineers.
• Diagnose execution bottlenecks, resolve alignment issues, and build a high-throughput engineering organization.
• Establish shipping cadences, code-quality standards, architectural roadmaps, and accountability.
• Hire additional talent and transition the team from reactive operations to proactive platform engineering.
• Build, operate, and scale identity, secrets, and cryptographic services, including workload identity with SPIFFE/SPIRE, HashiCorp Vault, and PKI.
• Deploy and manage eBPF-based security sensors across bare-metal and virtualized fleets.
• Architect zero-trust and just-in-time access for fleet nodes, hypervisors, and core switches.
• Develop secure boot, hardware-root-of-trust, firmware delivery, and software supply-chain verification mechanisms.
• Build continuous infrastructure vulnerability tracking, prioritization, and remediation platforms.
• Secure multi-layer control planes across GCP and on-premise AI data centers.
• Eliminate standing administrative privileges and long-lived secrets through least-privilege RBAC/ABAC models.
• Identify and reduce architectural risks, isolate tenant control planes, and enforce boundaries across GCP projects and GPU clusters.
• Conduct security architecture reviews and enforce security baselines through Terraform, OpenTofu, and Kubernetes operators.

Requirements

• 8+ years leading and scaling software engineering or security engineering teams at hyper-scale cloud providers or infrastructure-intensive platforms.
• Experience leading builder-focused teams that delivered platform security functionality and software systems at scale.
• Demonstrated success inheriting engineering teams, improving execution, building high-trust cultures, and raising technical standards.
• Prior hands-on experience shipping core security platforms such as Vault, SPIFFE/SPIRE, eBPF sensors, or just-in-time access engines.
• Ability to analyze complex cloud and on-premise architectures, isolate blast radiuses, and eliminate execution risks.
• Deep knowledge of Linux kernel security, container runtimes, Kubernetes, IAM frameworks, PKI, GPUs, switches, bare-metal systems, and infrastructure orchestration.
• In-person or hybrid presence in the San Francisco Bay Area.

Compensation and Benefits

• Compensation of $285,000–$335,000 plus bonus.
• Restricted Stock Units included in offers.
• Paid time off, paid holidays, and leave programs.
• Health, dental, and vision insurance.
• Employer HSA contributions.
• Paid parental leave, life insurance, and disability coverage.
• Professional development and tuition reimbursement.
• Mental health and wellness support.
• Commuter benefits, cell phone stipend, and 401(k) plan with company match up to 4% of salary.
• Volunteer time off, global travel insurance, meals allowance, and location-specific programs.