- Company Name
- Astro Mechanica
- Job Title
- Infrastructure Architect
- Job Description
-
**Job Title:** Infrastructure Architect
**Role Summary:**
Design, implement, and evolve a secure, compliant, and scalable IT infrastructure for a high‑speed aerospace organization. Own the 12‑18 month technology roadmap, ensuring alignment with regulatory standards while driving engineering productivity and operational reliability.
**Expectations:**
- Deliver a forward‑leaning technology plan for identity, endpoints, networks, cloud, and observability.
- Balance agility, security, and compliance across all systems.
- Mentor a small IT team, including a Help Desk Specialist, and cultivate an automated, documentation‑driven culture.
- Operate across manufacturing‑heavy, regulated environments, with frequent remote collaboration.
**Key Responsibilities:**
- Create and maintain an IT roadmap covering identity/SSO, endpoint mgmt, networking, collaboration, backup/DR, logging, access governance, and internal/off‑the‑shelf tooling.
- Translate engineering and product needs into pragmatic, secure solutions that accelerate design and deployment velocity.
- Define and implement endpoint strategy (e.g., COPE), zero‑touch provisioning, and a modern productivity stack.
- Design cloud and data architecture for regulated workloads (AWS GovCloud, Azure Government, GCP Assured Workloads), specifying IAM, key management, logging, and data lifecycle.
- Map and operationalize NIST SP 800‑171 Rev. 3 and CMMC 2.0 controls, including network segmentation, zero‑trust access, and secure remote work.
- Establish RTO/RPO, perform backup/DR testing, and maintain incident‑response runbooks with tabletop exercises.
- Select vendors, negotiate SLAs, manage renewals, rationalize tooling, and forecast IT spend.
- Coach the Help Desk Specialist, set SLAs, publish availability, device compliance, onboarding time, and ticket SLA metrics.
**Required Skills:**
- 8–12+ years in IT infrastructure/architecture with deep hands‑on experience in identity, endpoints, networks, and SaaS.
- Proven track record of scaling secure cloud environments for regulated workloads (GovCloud/Azure Gov/GCP).
- Strong knowledge of NIST 800‑171, CMMC 2.0; experience with SOC 2 or NIST CSF is a plus.
- Proficiency with toolsets: Okta/Entra ID, Jamf/Intune/FleetDM, CrowdStrike/SentinelOne, Microsoft 365, Jira/Freshservice, and modern VPN solutions.
- Ability to translate compliance requirements into practical controls, automate routine tasks, and troubleshoot end‑to‑end issues.
- Experience in startup or hardware‑lab settings; ITAR/EAR familiarity is beneficial.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).
- Professional certifications in IT architecture or security (e.g., CISSP, Microsoft Azure Solutions Architect Expert, AWS Certified Solutions Architect, Okta Certified).
San francisco, United states
On site
16-01-2026