Director of Cloud Infrastructure & Security
Job description
Director of Cloud Infrastructure and Security leading a small team of six senior engineers across Cloud Infrastructure (DevOps/SRE) and Security, hands-on with architecture, technical decisions, incidents and delivery. Accountable, alongside Product Development teams, for reliability, cost-efficiency and security posture of production systems on AWS and GCP.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid
What you'll do
- Directly lead, develop and retain a small team of six experienced engineers across Cloud Infrastructure and Security in a player-coach role
- Define a joint roadmap for both teams aligned to business priorities and risk appetite, making explicit calls on what we will not do
- Establish clear KPIs, SLOs and risk metrics and report regularly to leadership on reliability, cost and security posture
- Set the operating model: what product teams self-serve behind guardrails versus what the teams own centrally
- Foster a culture where reliability and security are shared accountabilities, including establishing a Security Champions model across engineering
- Own the AWS and GCP footprint end to end: EKS, networking, secrets (Vault), data stores (RDS/Aurora, MSK, ElastiCache, MongoDB Atlas, OpenSearch) and the edge (Cloudflare)
- Establish real reliability engineering practice: SLOs and error budgets, capacity planning, and a business continuity plan
- Drive infrastructure-as-code maturity: automating Terraform change application, advancing the move to GitOps (ArgoCD), and enforcing guardrails at creation time with policy-as-code (Kyverno/OPA)
- Consolidate observability into a single source of truth for metrics, logs and traces
- Improve developer experience and delivery throughput: CI/CD (Jenkins, GitHub Actions), paved roads, test environments on demand, and delivery metrics
- Own FinOps: infrastructure cost per unit of business value, cost accountability pushed back to each team, and continued run-rate reduction
- Support the modernisation of the core platform: tech migrations, runtime and framework upgrades, and continuous database and Kubernetes upgrades
- Attack toil systematically: automate recurring requests and hand safe self-service back to product teams
- Grow the foundations for AI-augmented engineering and operations
- Own security strategy and posture across cloud, application, identity, detection and response, including risk register, published roadmap, remediation SLAs and recurring reporting cadence
- Strengthen cloud security posture management (CNAPP) and secure-by-default configurations across all environments
- Embed security into the SDLC and CI/CD: full static-analysis and dependency-scanning coverage with clear criteria for when critical findings block a release
- Mature vulnerability management, penetration testing and the bug bounty program into one prioritised program with SLAs and aging reports
- Advance identity and access management toward least privilege and zero trust: automated provisioning from groups and periodic access reviews
- Mature logging, detection and incident response, closing SIEM coverage gaps
- Set guardrails for safe AI adoption (shadow AI, data and prompt leakage, prompt injection, model abuse) and defend against AI-enabled fraud and phishing
- Ensure compliance with GDPR, PCI DSS v4, NIS2, and CIS v8, including a maintained, reusable evidence library
- Collaborate with legal and finance teams on compliance and forensic investigation topics
- Manage third-party and supply-chain risk with vendor tiering and a recurring review cadence
- Own the security-built services the team already runs (back-office authentication and ACL, banning/fraud tooling, phone verification) and decide what to keep, hand over or retire
What we're looking for
- 8+ years significant experience in Infrastructure, Platform Engineering, DevOps, SRE or Cloud Security, including experience leading engineers
- Strong practical experience with public cloud, ideally AWS, Kubernetes and Infrastructure-as-Code, with willingness to remain close to architecture, incidents and technical delivery
- Track record establishing reliability practice at scale — SLOs, incident management, on-call, capacity planning, disaster recovery
- Demonstrable cloud cost optimisation / FinOps results at meaningful scale
- Strong grounding in cloud and application security fundamentals — IAM, network security, secrets management, CSPM, OWASP Top 10 — and judgement to know when to hire the depth you don't have
- Working knowledge of compliance frameworks (GDPR, DORA, PCI DSS, NIS2) and how to turn requirements into practical controls
- Experience leading through incidents and security events under pressure
- Excellent communication skills: able to make a technical trade-off legible to a CFO and a risk decision legible to an engineer
- Comfortable operating with a lean team — ruthless prioritisation, automation over headcount, pragmatism over perfection
Your team
Cloud Infrastructure and Security
A small team of six senior individual contributors across Cloud Infrastructure (DevOps/SRE) and Security.
Benefits
A truly international environment with 50+ nationalities across Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City
Learning & growth as a priority: dedicated budget, continuous feedback culture, cutting-edge topics (AI, marketplace dynamics, scalability)
Competitive compensation & benefits including bonus, health coverage, lunch vouchers, Gym-Pass, and additional legal perks depending on location
- Purpose-driven work at scale contributing to circularity and reducing waste
- High-impact scope & ownership on products used globally across 70+ countries
- Career acceleration in a fast-moving scale-up
- Flexible ways of working: hybrid model (typically 2 days remote per week)
- 2 paid days per year to support a cause of your choice
Apply
Direct apply at Vestiairecollective
Opens the job posting at Vestiairecollective
About Vestiaire Collective
The leading global platform for desirable pre-loved fashion
Vestiaire Collective is the leading global platform for desirable pre-loved fashion and a pioneer in transforming how people consume fashion. Through technology, expertise, and a highly engaged global community, it enables millions of people to buy and sell fashion in a more sustainable way. Founded in Paris in 2009, it is a globally scaled marketplace with offices in Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City, and logistics hubs across Europe, Asia, and the US.
Mission
Make circular fashion the norm, not the exception.
Key facts
- around 600 people
- 2009
- Paris
- Pre-loved fashion marketplace
- Team of around 600 people from over 50 nationalities
- Offices in Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City
- Logistics hubs across Europe, Asia, and the US
- Products used across 70+ countries
- Runs a global marketplace on AWS and GCP
What they value
- Activism
- Transparency
- Dedication
- Greatness
- Collective