Director of IT & DevOps

About CustomStacks

CustomStacks is a custom software and AI development firm serving a select, private US client base. Our leadership has been building and operating development teams in Indore for over 10 years. We are growing our in-house engineering team and investing in a dedicated Indore office.

About the Role

Director of IT & Infrastructure Security

The ideal candidate brings deep AWS expertise, a strong command of DevSecOps and source code security, and a track record of building security programs that prevent incidents rather than react to them. Excellent English communication skills and a passion for using modern AI tools to drive efficiency are essential.

Key Responsibilities

• IT Security Strategy & Ownership:

  Define, implement, and own the organizations end-to-end IT security strategy, policies, and roadmap. Present plans and progress directly to executive leadership.

• Source Code & CI/CD Security:

  Secure our GitHub organization and CI/CD pipelines. This includes:
• Repository access controls and branch protections
• Secrets management
• Dependency and supply chain scanning
• Review and hardening of build scripts and pipeline configurations

• Identity & Access Management:

  Implement and manage single sign-on (SSO), MFA, role-based access, and least-privilege policies across all systems, cloud accounts, and developer tools.

• Endpoint & Device Management:

  Manage and secure the company’s MacBook fleet through MDM, including:
• Device enrollment and encryption
• Patching and endpoint protection
• Restricting code access to registered company devices

• AWS & Cloud Infrastructure Management:

  Provision, configure, and maintain secure, scalable, and highly available cloud architectures, including:

• Compute:

  EC2 and related compute services

• Storage:

  S3 and EBS, including secure access policies and key management

• Database:

  RDS and DynamoDB

• Networking & Content Delivery:

  VPC, Route 53, CloudFront, and secure network topologies

• Global Infrastructure:

  Multi-Region and multi-AZ architectures for fault tolerance and low latency

• Office IT:

  Own IT for the Indore office, including network, internet, firewall, Wi-Fi security, and workstation setup.

• System Configuration:

  Oversee OS hardening, configuration standards, and patch management across servers and endpoints.

• Security & Performance Monitoring:

  Deploy and manage continuous monitoring and alerting at the endpoint, server, and cloud levels to detect and mitigate vulnerabilities, threats, and outages.

• Incident Response:

  Serve as the primary point of contact for security incidents and infrastructure outages. Lead rapid resolution, root-cause analysis, and preventive remediation.

• Team Enablement:

  Train developers on secure coding, access hygiene, and security best practices. Establish clear, documented processes the team can follow.

Required Skills & Qualifications

• Experience:

  10+ years in IT infrastructure, cloud operations, and security, including time in a senior or lead role owning security outcomes.

• AWS Expertise:

  Proven, hands-on experience across Compute, Storage, Database, Networking, and Global Infrastructure.

• DevSecOps:

  Strong hands-on experience securing GitHub and CI/CD pipelines, including:
• Secrets management
• Dependency and supply chain security
• Pipeline hardening

• Identity & Endpoint Security:

  Experience implementing SSO, MFA, and MDM for macOS devices.

• Multi-Cloud Knowledge:

  Working knowledge of Azure or Google Cloud and multi-cloud architectures.

• Security & Monitoring Tools:

  Hands-on experience with tools such as AWS CloudWatch, GuardDuty, Security Hub, Datadog, Prometheus, Splunk, or similar.

• System Administration:

  Solid Linux, macOS, and Windows administration, networking fundamentals, firewalls, and access controls.

• Communication:

  Excellent written and verbal English. Able to explain technical risks and plans clearly to executive and non-technical stakeholders.

• Ownership:

  A self-directed problem solver who works independently, takes full accountability, and follows through.

Good to Have

• AI Integration:

  Experience using modern AI tools (e.g., Claude, ChatGPT, Amazon Q) to automate tasks, improve scripts, and raise operational quality.

• Certifications:

  AWS Certified Solutions Architect, AWS Certified Security - Specialty, CISSP, CISM, or equivalent.

• Compliance:

  Familiarity with security frameworks such as SOC 2 or ISO 27001.

Candidates with strong skills but less experience are encouraged to apply and may be considered for a senior-level position.