Director of Infrastructure

What you'll do

Strategic leadership and security ownership

• Own AllSpice's security posture: policies, incident response, disaster recovery, and ongoing risk assessment
• Maintain SOC 2 compliance, penetration testing, and audit processes; evaluate additional security certifications as needed
• Make architectural decisions on infrastructure direction, including cloud strategy, cost optimization, high availability, and scaling
• Work with legal counsel on security and data-protection matters, including DPAs, breach notification obligations, and regulatory requirements

Customer and go-to-market coordination

• Partner with customer success and sales to support enterprise deployments, IT security reviews, and SSO/OIDC integrations
• Serve as the primary technical point of contact for customer InfoSec questionnaires and procurement processes
• Support self-hosted and GovCloud deployments for customers with ITAR, EAR, or CUI requirements

People management and team building

• Hire, mentor, and manage infrastructure engineers as the team grows
• Set team goals, define processes, and establish on-call rotations
• Participate in the on-call rotation and lead incident response when needed
• Create growth paths for ICs and foster a culture of operational excellence

Hands-on infrastructure

• Architect and maintain production AWS environments using Terraform and infrastructure-as-code
• Automate deployments, backups, and disaster recovery across cloud and self-hosted configurations
• Monitor and improve performance, availability, and cost efficiency of production systems
• Work closely with application developers to deploy infrastructure solutions to product problems

Our stack

• Terraform & Docker Swarm deployed to AWS for production infrastructure
• Grafana, Loki, and Prometheus for observability
• GitHub Actions for CI/CD
• Playwright for e2e testing
• Gitea application fork
• Go [server-side]
• PostgreSQL

Expectations

Our ideal candidate has:

• 8+ years of cloud infrastructure and/or security engineering experience
• 2+ years of people management experience (hiring, mentoring, performance management)
• Deep hands-on expertise with AWS services (IAM, GuardDuty, VPC, Lambda, etc.), Linux administration, and Docker
• Demonstrated ownership of security policy, compliance programs (SOC 2, ISO 27001), and incident response
• Experience coordinating with legal counsel, customer-facing teams, and executive leadership on security and compliance matters
• Strong project management skills with ability to lead cross-functional initiatives from engineers to customers
• Comfort with ambiguity and a high degree of autonomy
• Bachelor's degree or higher in a technology-related field
• Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder)

(preference, not required) Availability to work out of our flex offices in San Francisco or Boston 1–2 days per week

Relevant skills

• Infrastructure and operations: Terraform and infrastructure-as-code at scale, AWS services (IAM, GuardDuty, Elasticsearch, ElastiCache, Lambda) and experience with other cloud providers (GCP, Azure), Docker and Kubernetes, Bash and Python scripting, nginx and reverse-proxy services, PostgreSQL administration
• Security and compliance: SOC 2, ISO 27001, and other security certification frameworks, ITAR/EAR/CUI compliance and GovCloud deployments, SSO, OIDC, LDAP, and enterprise authentication, Vulnerability scanning, penetration testing coordination, and vendor security reviews
• Leadership: Hiring, mentoring, and building infrastructure teams from the ground up, Working with legal counsel on data protection, DPAs, and regulatory matters, Customer-facing technical communication (InfoSec reviews, enterprise onboarding), Project management using tools such as Jira, Notion, or similar