AllSpice

AllSpice

Director of Infrastructure

Boston · Director

Work authorization requiredDetected 142 days ago
PythonBashGitPostgreSQLElasticsearchAWSGCPAzureCloud PlatformsDockerKubernetesTerraformCI/CDGitHub ActionsLinuxNginxPrometheusGrafanaCybersecurityPenetration TestingIncident ResponseComplianceProject ManagementJira

About the role

  • This is a hands-on leadership role: roughly 60% management and strategic work, 40% individual contribution, reporting to the CTO.
  • With the team at 1-2 people for the next 12 months, you need to be equally comfortable drafting a Terraform module and presenting a security review to an enterprise customer's CISO.

Responsibilities

  • This is a high-impact role that comes with significant autonomy and requires a self-driven, strategic, and collaborative leader. You will own our infrastructure, security, and compliance programs end-to-end.
  • Own AllSpice's security posture: policies, incident response, disaster recovery, and ongoing risk assessment
  • Maintain SOC 2 compliance, penetration testing, and audit processes
  • Partner with customer success and sales to support enterprise deployments, IT security reviews, and SSO/OIDC integrations
  • People management and team building
  • Hire, mentor, and manage infrastructure engineers as the team grows
  • You will own our infrastructure, security, and compliance programs end-to-end.
  • Maintain SOC 2 compliance, penetration testing, and audit processes; evaluate additional security certifications as needed
  • Participate in the on-call rotation and lead incident response when needed
  • Create growth paths for ICs and foster a culture of operational excellence

Requirements

  • AWS services (IAM, GuardDuty, Elasticsearch, ElastiCache, Lambda) and experience with other cloud providers (GCP, Azure)

Nice to have

  • 8+ years of cloud infrastructure and/or security engineering experience
  • 2+ years of people management experience (hiring, mentoring, performance management)
  • Deep hands-on expertise with AWS services (IAM, GuardDuty, VPC, Lambda, etc.), Linux administration, and Docker
  • Demonstrated ownership of security policy, compliance programs (SOC 2, ISO 27001), and incident response
  • Experience coordinating with legal counsel, customer-facing teams, and executive leadership on security and compliance matters
  • Comfort with ambiguity and a high degree of autonomy
  • Bachelor's degree or higher in a technology-related field
  • Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder)

Skills

  • Read more about our latest Series A announcement here!
  • Make architectural decisions on infrastructure direction, including cloud strategy, cost optimization, high availability, and scaling
  • Serve as the primary technical point of contact for customer InfoSec questionnaires and procurement processes
  • Set team goals, define processes, and establish on-call rotations
  • Automate deployments, backups, and disaster recovery across cloud and self-hosted configurations
  • Monitor and improve performance, availability, and cost efficiency of production systems
  • Work closely with application developers to deploy infrastructure solutions to product problems
  • Scale infrastructure for zero-downtime deployments across multi-region AWS accounts
  • Stress-test backup and disaster recovery procedures and publish runbooks
  • Identify opportunities to reduce cloud spend while improving performance
  • Coordinate tabletop exercises and incident response drills with the Security Incident Response Team
  • Terraform & Docker Swarm deployed to AWS for production infrastructure

Compensation

  • Competitive salary and equity

Benefits

  • Competitive salary and equity
  • Health, dental, and vision benefits
  • Home office stipend

Company info

  • Support self-hosted and GovCloud deployments for customers with ITAR, EAR, or CUI requirements

Visa & Work Authorization

  • Citizen or Lawful Permanent Resident (Green Card holder)

This listing is sourced directly from AllSpice's careers page and normalized into a canonical job model.