About the Role

Machina Labs is looking for a Director of Infrastructure & Security to build the secure, scalable technology foundation for our next stage of growth.

You'll lead enterprise IT, cloud and DevOps infrastructure, cybersecurity, compliance, and physical security systems across Machina Labs' commercial operations and Machina Bellator, our defense-focused subsidiary.

This is a build role. You'll inherit capable teams and an existing technology foundation, but there is significant work ahead as Machina scales. You will define the infrastructure and security roadmap, strengthen our defense-compliant environment, build our Security Engineering capability, and ensure our systems can scale without slowing down the engineers and operators who rely on them.

You'll report to the VP of Engineering - Software & IT and partner closely with leaders across Engineering, Manufacturing, Operations, EHS, Legal, and the broader business.

This is a player-coach role for someone who can set strategy and build organizations while staying close enough to the technology to dive in when it matters.

What You'll Do

• Set the infrastructure and security strategy. Define and execute the strategy for IT, cloud infrastructure, cybersecurity, and security systems across Machina Labs and Machina Bellator as our teams, facilities, and defense programs scale.

• Lead and grow the organization. Lead the IT and DevOps teams, define the organization needed for the next stage of growth, develop existing leaders, and build the Security Engineering function from the ground up.

• Scale cloud and DevOps infrastructure. Guide the architecture, reliability, security, and cost management of our AWS environment in partnership with DevOps and Software Engineering. Establish scalable approaches to infrastructure as code, CI/CD, observability, and production operations.

• Build our cybersecurity capability. Establish and mature security operations across endpoint protection, SIEM and logging, threat detection and response, vulnerability management, incident response, and security architecture.

• Lead technical defense compliance. Own the technology strategy, controls, documentation, and audit readiness required to support CMMC, NIST SP 800-171, DFARS, ITAR/EAR, and other requirements associated with our defense and aerospace programs.

• Own physical security technology. Partner with EHS, which owns the broader physical security program, to architect and operate the technology behind facility security - including access control, surveillance, identity integration, monitoring, and related security systems.

• Establish policy and governance. Partner with Legal, EHS, Compliance, Engineering, and Operations to create pragmatic security and IT policies that protect the company and satisfy customer and regulatory requirements without creating unnecessary friction.

What We're Looking For

• 10+ years of experience across infrastructure, enterprise IT, cybersecurity, DevOps, or related technical functions, including significant experience leading technical teams and senior leaders.

• Experience owning infrastructure and/or security in a complex engineering, manufacturing, aerospace, defense, or similarly regulated environment.

• Demonstrated ability to build and scale technology functions, operating models, and teams - not simply operate established systems.

• Strong working knowledge of modern enterprise IT, cloud infrastructure, networking, identity and access management, and cybersecurity architecture.

• Experience with AWS or comparable cloud environments and modern DevOps practices.

• Experience building or operating cybersecurity programs spanning areas such as endpoint security, logging/SIEM, vulnerability management, incident response, and detection and response.

• Experience working with security and compliance frameworks such as CMMC or comparable regulated environments.

• A builder mindset. You're comfortable moving between long-term strategy, organizational design, and the technical details required to get something working.

Nice to Have

• Experience in defense, aerospace, or another environment handling CUI, export-controlled information, or classified programs.

• Experience taking an organization through CMMC certification or a comparable cybersecurity compliance program.

• Experience working in ITAR/EAR-controlled environments.

• Experience designing technology infrastructure for manufacturing facilities, engineering labs, or other complex physical environments.

• Experience with physical security technologies such as access control, video surveillance, visitor management, and integrated identity systems.

• Experience scaling infrastructure and security through a period of rapid company and facility growth.

$200,000 - $250,000 a year

The base salary range for this role is dependent on experience, qualifications, and overall alignment with the scope of the position.

In addition to base compensation, Machina Labs offers a competitive benefits package and stock option participation.

*This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required for this role. Duties and responsibilities may change based on business needs.