Director of IT & DevOps

About CustomStacks

CustomStacks is a custom software and AI development firm serving a select, private US client base. Our leadership has been building and operating development teams in Indore for over 10 years. We are growing our in-house engineering team and investing in a dedicated Indore office.

About the Role

We are seeking an experienced, hands-on Director of IT & Infrastructure Security to take full ownership of our IT, cloud infrastructure, and security operations. This is a senior, full-time role for one dedicated leader who will set our security strategy and personally execute it. You will be the single accountable owner for securing our systems, code, devices, and cloud environments.

The ideal candidate brings deep AWS expertise, a strong command of DevSecOps and source code security, and a track record of building security programs that prevent incidents rather than react to them. Excellent English communication skills and a passion for using modern AI tools to drive efficiency are essential.

Key Responsibilities

• IT Security Strategy & Ownership: Define, implement, and own the organizations end-to-end IT security strategy, policies, and roadmap. Present plans and progress directly to executive leadership.
• Source Code & CI/CD Security: Secure our GitHub organization and CI/CD pipelines. This includes:
• Repository access controls and branch protections
• Secrets management
• Dependency and supply chain scanning
• Review and hardening of build scripts and pipeline configurations
• Identity & Access Management: Implement and manage single sign-on (SSO), MFA, role-based access, and least-privilege policies across all systems, cloud accounts, and developer tools.
• Endpoint & Device Management: Manage and secure the company’s MacBook fleet through MDM, including:
• Device enrollment and encryption
• Patching and endpoint protection
• Restricting code access to registered company devices
• AWS & Cloud Infrastructure Management: Provision, configure, and maintain secure, scalable, and highly available cloud architectures, including:
• Compute: EC2 and related compute services
• Storage: S3 and EBS, including secure access policies and key management
• Database: RDS and DynamoDB
• Networking & Content Delivery: VPC, Route 53, CloudFront, and secure network topologies
• Global Infrastructure: Multi-Region and multi-AZ architectures for fault tolerance and low latency
• Office IT: Own IT for the Indore office, including network, internet, firewall, Wi-Fi security, and workstation setup.
• System Configuration: Oversee OS hardening, configuration standards, and patch management across servers and endpoints.
• Security & Performance Monitoring: Deploy and manage continuous monitoring and alerting at the endpoint, server, and cloud levels to detect and mitigate vulnerabilities, threats, and outages.
• Incident Response: Serve as the primary point of contact for security incidents and infrastructure outages. Lead rapid resolution, root-cause analysis, and preventive remediation.
• Team Enablement: Train developers on secure coding, access hygiene, and security best practices. Establish clear, documented processes the team can follow.

Required Skills & Qualifications

• Experience: 10+ years in IT infrastructure, cloud operations, and security, including time in a senior or lead role owning security outcomes.
• AWS Expertise: Proven, hands-on experience across Compute, Storage, Database, Networking, and Global Infrastructure.
• DevSecOps: Strong hands-on experience securing GitHub and CI/CD pipelines, including:
• Secrets management
• Dependency and supply chain security
• Pipeline hardening
• Identity & Endpoint Security: Experience implementing SSO, MFA, and MDM for macOS devices.
• Multi-Cloud Knowledge: Working knowledge of Azure or Google Cloud and multi-cloud architectures.
• Security & Monitoring Tools: Hands-on experience with tools such as AWS CloudWatch, GuardDuty, Security Hub, Datadog, Prometheus, Splunk, or similar.
• System Administration: Solid Linux, macOS, and Windows administration, networking fundamentals, firewalls, and access controls.
• Communication: Excellent written and verbal English. Able to explain technical risks and plans clearly to executive and non-technical stakeholders.
• Ownership: A self-directed problem solver who works independently, takes full accountability, and follows through.

Good to Have

• AI Integration: Experience using modern AI tools (e.g., Claude, ChatGPT, Amazon Q) to automate tasks, improve scripts, and raise operational quality.
• Certifications: AWS Certified Solutions Architect, AWS Certified Security - Specialty, CISSP, CISM, or equivalent.
• Compliance: Familiarity with security frameworks such as SOC 2 or ISO 27001.

Candidates with strong skills but less experience are encouraged to apply and may be considered for a senior-level position.