Responsibilities
- Manage and grow the SRE and IT teams while building out our security-focused capabilities across both.
- Set a unified technical vision across reliability, security, and IT that treats all three as interconnected engineering disciplines.
- Improve Beacon's security posture through automation, infrastructure hardening, and policy-as-code.
- Ensure the reliability and availability of Beacon's cloud infrastructure, including the Kubernetes clusters that power our data scientists' distributed numerical workloads.
- Own and evolve Beacon's incident response practices, including on-call structure, escalation paths, and post-incident learning.
- Build self-service IT tooling and workflows that reduce friction for employees while maintaining strong access controls and compliance.
- Own Beacon's compliance roadmap, building on our existing SOC 2 certification and ISO 27001 audit in progress, toward HITRUST r2 certification in H1 2027.
- Collaborate with engineering teams to embed reliability and security into the development lifecycle.
- Develop and mentor your direct reports, helping them grow their impact and navigate challenges along the way.
- Maintain outcome-oriented roadmaps for each team that connect to Beacon's broader strategic objectives, and communicate progress and priorities effectively to stakeholders.
Requirements
- 10+ years in SRE, DevOps, infrastructure, or security engineering roles
- 5+ years managing engineering teams including at least some experience at a director or equivalent level
- Managed multiple engineering teams simultaneously
- Experience growing a team or function from the ground up
- Strategic leader with enough technical depth to set a high bar, earn your team's respect, and engage meaningfully on architectural decisions
- Understand the engineering principles underlying your teams' work — how infrastructure-as-code, incident response, and security automation fit together
- Approach security with an engineering mindset: implemented security controls as code, automated compliance workflows, or built tooling that made secure practices the path of least resistance
- Meaningful experience with IT operations in a hybrid/remote environment
- Understand how to balance user productivity with security and compliance requirements
- Worked in or adjacent to a regulated industry (biopharma, healthcare, fintech, etc.)
- Hands-on experience with compliance frameworks
- Understand how to maintain development velocity within those constraints
- Strong incident management experience
- Led incident response in production environments
- Built the monitoring, alerting, and post-mortem practices that reduce recurrence
- Information-gathering is ingrained in every aspect of your work
- Decisions incorporate feedback from stakeholders, your reports, and historical context that you intentionally mine over time
- Demonstrate a bias towards simplicity, avoid misallocating complexity, and impose structure at the right time, not too early or too late
- Communicate clearly and follow through on decisions
- Swiftly communicate changes with collaborators and stakeholders
Nice to Have
- Experience at a startup or growth-stage company is strongly preferred
Work Arrangement
On-site — Boston
Additional Information
- This position is based in the Boston area to support close partnership with our Boston-based team.
