Principal Cloud & Security Engineer - Hardware CI/CD

AllSpice.io; Boston (MA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Flexible work

Relocation package

Home office stipend

Generous PTO

Health, dental, and vision benefits

Job summary

AllSpice.io is building a collaboration platform for hardware development and is seeking a Sr./Principal Infrastructure Engineer to scale our cloud architecture and security operations. You will partner with customers and developers to deploy infrastructure solutions, automate deployments, and drive reliability.

You will own security controls, lead ISO 27001 and SOC 2 readiness, and participate in on-call rotations to prevent incidents. A strong background in AWS and IaC is required.

Qualifications

• 8+ years of cloud infrastructure and/or security engineering experience for Principal level; 4+ for Senior; 6+ for Staff.

Responsibilities

• Manage enterprise deployments and SSO integrations with customers.
• Deploy infrastructure solutions with application developers to address product problems.
• Document security processes and identify opportunities for improvement.
• Coordinate ISO 27001 and SOC 2 audits and pentesting.
• Improve architecture and hosting services; automate deployments, backups, and recovery.
• Participate in on-call rotations and drive blameless postmortems.

Skills

AWS security

Terraform

Kubernetes

SOC 2 / ISO 27001

Penetration testing

Security architecture

Scripting (Bash/Python)

Go or Rust

CI/CD (GitHub Actions)

Cloud security

Education

Bachelor's degree or higher in a technology-related field

Tools

Terraform

Ansible

Docker

Kubernetes

Helm

Datadog

Loki

nginx

Job description

AllSpice.io is building a collaboration platform for hardware development and is seeking a Sr./Principal Infrastructure Engineer to scale our cloud architecture and security operations. You will partner with customers and developers to deploy infrastructure solutions, automate deployments, and drive reliability.

You will own security controls, lead ISO 27001 and SOC 2 readiness, and participate in on-call rotations to prevent incidents. A strong background in AWS and IaC is required.