Head of Infrastructure & Security

Were looking for a technically strong and strategically minded Head of Infrastructure & Security to build and own the global infrastructure, reliability, and security function at Albert. This role, with a focus on establishing an enterprise-grade infrastructure and security posture that scales with Alberts growth, will sit at the intersection of cloud architecture, site reliability engineering, and enterprise security - reporting directly to the VP of Engineering and shaping the foundation on which Albert scales. If you are passionate about cutting-edge technology and thrive in a fast-paced, mission-driven environment, we want to hear from you. What youll do Strategy & Delivery  Define and enforce a coherent cloud architecture strategy across all engineering teams - common IaC tooling, unified monitoring, and consistent best practices.  Own cloud cost strategy in partnership with Finance: drive per-unit cost metrics, implement team-level budget visibility and alerting, and deliver leadership-facing dashboards on infrastructure efficiency.  Own Alberts security posture end-to-end: library and server patching, SAST/DAST pipeline, WAF, SIEM, EDR, IDS/IPS, and data loss prevention.  Implement and evolve a Zero Trust architecture across cloud and identity layers.  Lead compliance and audit readiness for enterprise partners - GxP obligations, SOC 2, and a path toward ITAR and FedRAMP.  Own Azure interoperability strategy to meet the integration requirements of our enterprise partner base.  Own the ML/AI infrastructure platform so the data science team has a reliable, well-operated backend without having to own it themselves.  Drive infrastructure modernization: identity provider decoupling, CI/CD pipeline standardization, and internal developer platform improvements that increase engineering velocity. Execution & Collaboration  Build and lead a global SRE organization on a follow-the-sun model - existing India team, planned EU team (Germany-anchored), and US presence.  Define and own the SLO framework, error budget model, and service tiering classification across Alberts platform.  Establish incident response, escalation paths, post-mortem process, and disaster recovery and business continuity programs.  Drive reduction in preventable incidents and MTTR; build the runbooks, observability standards, and on-call practices that make 24/7 coverage sustainable.  Manage vendor relationships and negotiate contracts for cloud services, security tooling, and infrastructure software.  Manage the third-party security partnership for penetration testing and compliance advisory; ensure findings are actioned, not filed.  Develop and deliver cybersecurity awareness and training programs across the organization.  Respond to enterprise security questionnaires and audits with structured, defensible answers - and close the gaps they surface. Leadership & Impact  Build the infrastructure and security function from an early-stage posture into an enterprise-grade one - this is a program-building role, not a program-inheriting one.  Operate as a company-level leader: connect infrastructure decisions to business outcomes and communicate clearly across functions and seniority levels.  Work through regional SRE directors and partner teams to execute without creating bottlenecks.  Leverage AI tooling aggressively to maximize team leverage - and set the expectation that the team does the same.  Define reliability KPIs by region and hold regional SRE leaders accountable to them. You will have  8+ years in cloud infrastructure, platform engineering, or site reliability engineering, with at least 3 years in a senior leadership role owning a team or function.  Deep AWS expertise; meaningful Azure exposure required given our enterprise partner profile.  Kubernetes at architectural depth - decision-making, not just operations.  Demonstrated experience designing SLO frameworks, error budgets, and service reliability programs.  Demonstrated experience building or managing global, distributed engineering teams operating across time zones.  Strong security fundamentals: cloud security architecture, IAM, Zero Trust, network segmentation, SAST/DAST, SIEM/EDR, and working knowledge of compliance frameworks (SOC 2, NIST, ISO 27001, ITAR, FedRAMP, or equivalent).  Hands-on experience designing incident response, post-mortem, DR, and business continuity programs from scratch.  Experience driving IaC standardization and DevOps maturity across an engineering organization - not just within a single team.  Track record of cloud cost reduction through FinOps practices - unit economics, per-team budget accountability, and leadership-facing visibility.  The ability to translate infrastructure ambiguity into a prioritized roadmap with clear owners and measurable outcomes.  Experience managing vendor relationships and infrastructure budgets at the organizational level.  Startup or high-growth company experience: the ability to distinguish between tech debt that matters and tech debt that can wait.  MLOps infrastructure experience (Kubeflow, Airflow, or equivalent) preferred.  ITAR or FedRAMP hands-on experience preferred.  Relevant certifications (CISSP, CISM, CCSP, or equivalent) preferred. Key competencies Systems Thinking: Ability to visualize and design how AI agent systems connect, share data, and enable valuable customer outcomes at scale. Grit: Self-starter, persistent problem solver, relentless in the pursuit of progress in ambiguous 0-to-1 product environments. Customer Empathy: Deep understanding of how enterprise customers operate; asks the right questions and designs solutions that stick. Innovator: Passionate about applying emerging AI capabilities to practical, measurable business problems before the patterns are written. Adaptability: Comfortable operating in dynamic, fast-moving customer and company environments where the approach evolves with new information. Leadership: Ability to drive agent skill initiatives end-to-end with minimal oversight, aligning cross-functional teams to shared outcomes.