Apply on Employer Site

Astro Mechanica · 3 days ago

Infrastructure Architect

San Francisco

Full-time

Hybrid

Senior Level, Lead/Staff

$150K/yr - $230K/yr

8+ years exp

Astro Mechanica is a vertically integrated aerospace company focused on democratizing high-speed flight. The Infrastructure Architect will own the IT architecture and internal technology stack, leading the IT function and ensuring efficient operations while enhancing productivity and compliance.

AerospaceManufacturingMechanical Engineering

No H1B

U.S. Citizen Only

Responsibilities

Own the IT roadmap: Build and deliver a 12–18‑month plan across identity/SSO, endpoint management, networks, collaboration, backups/DR, logging/observability, access governance, and internal/off‑the‑shelf tooling

Engineering enablement: Engage with teams, decompose needs, and architect pragmatic, secure solutions that reduce friction and improve developer/design velocity

End‑user productivity: Define endpoint strategy (e.g., COPE), zero‑touch provisioning, and a modern productivity stack that balances speed with security/compliance

Cloud & data architecture: Evaluate and implement the right cloud path for regulated workloads (e.g., AWS GovCloud (US), Azure Government, or GCP Assured Workloads). Define IAM, key management, logging, and data lifecycle

Compliance readiness: Map and operationalize controls for NIST SP 800‑171 Rev. 3 and CMMC 2.0 (policies, technical controls, vendor risk, and audit evidence). Incorporate network segmentation, zero‑trust access, and secure remote work

Continuity & risk: Establish RTO/RPO, implement and test backups and disaster recovery, and maintain incident response runbooks with regular tabletop exercises

Vendors & budget: Own IT vendor selection, SLAs, renewals, and spend; rationalize tooling and forecast costs

Leadership: Coach the Help Desk Specialist; set SLAs, build a documentation/automation culture, and publish simple metrics (availability, device compliance, onboarding time, ticket SLAs)

Qualification

IT infrastructure architectureCloud architectureIdentity managementEndpoint managementNetwork securityNIST complianceDisaster recoveryVendor managementAutomationLeadershipDocumentationTeam collaboration

Required

8–12+ years in IT infrastructure/architecture with deep hands‑on in identity, endpoints, networks, and SaaS; proven scaling in startup and/or hardware‑lab environments

Experience planning and operating secure cloud for regulated workloads (e.g., GovCloud/Azure Gov/GCP Assured Workloads or equivalent controls)

Comfort turning NIST 800‑171 requirements into practical controls; familiarity with CMMC 2.0; bonus for SOC 2 or NIST CSF experience

Representative toolkit: Okta or Entra ID; Jamf/Intune/FleetDM; CrowdStrike/SentinelOne; M365; Jira/Freshservice; modern VPN

Export controls: Some parts of the job may require access to export‑controlled technical data; eligibility as a U.S. person may be required depending on scope