Director Cloud Engineering

ComPsych is a global provider of organizational mental health, well-being, and absence management solutions. The Director Cloud Engineering will lead the Cloud Engineering function, building and operating a secure, reliable, cloud-native internal platform with developer portals, CI/CD pipelines, automation, and governance. The role also oversees DevSecOps, AI enablement and governance, compliance, data protection, cloud foundations, and team development.

Responsibilities:

• Build the internal developer portal and self-service platform. A service catalog, golden paths, paved roads, and developer experience that let product teams provision, build, deploy, and run their software securely without waiting on you
• Own CI/CD pipelines, platform tools, and solutions. The pipelines, templates, SDKs, and platform services the function ships, built for reuse across every team, coding them hands-on and directing AI to accelerate
• Build and support ComPsych DevSecOps and Cloud Engineering Strategy. Secure CI/CD (SAST/DAST/SCA, secrets and image scanning), Infrastructure-as-Code, and policy-as-code guardrails, with security built into the pipeline and shift-left adopted across teams
• Own the cloud foundation the platform runs on. Landing zones and a Cloud Center of Excellence (CCoE), reference architectures, and reliability and cost as first-class engineering (SLOs, observability, resilience, and FinOps)
• Enable AI and data at the platform layer. The environments, pipelines, and guardrails that let the business build and run AI/ML and GenAI safely and at scale, making AI and automation the platform's default
• Govern responsible and secure AI. Beyond enabling AI/ML and GenAI, set the guardrails and governance for its safe use across Cloud Engineering: acceptable-use and model/data governance, protection against insecure AI-generated code, and alignment to AI risk frameworks (NIST AI RMF, OWASP LLM Top 10, ISO 42001)
• Own compliance and audit-readiness across Cloud Engineering. Make continuous compliance, control mapping, and automated audit evidence a platform capability every team inherits; own third-party and open-source risk, and partner with Security and GRC to keep the function aligned to HIPAA, HITRUST, SOC 2, NIST, ISO 27001, and GDPR
• Ensure data protection, privacy, and data residency by design. Encryption and key management, least-privilege access to PHI/ePHI, privacy-by-design, and residency-aware landing zones and region placement so workloads and data live where each jurisdiction requires across our domestic and international footprint
• Lead the function and the team. Evolve legacy infrastructure into cloud-native services where it serves the platform, establish the Cloud Engineering function, hire and reskill talent, set standards, and manage vendors, tooling, and budget

Requirements:

• You've built a platform, not just managed one
• You've delivered developer-facing platform capabilities (an internal developer portal, CI/CD, paved roads, and tooling) and can point to teams that shipped faster and safer because of what you built
• You're hands-on and deeply technical
• Multi-cloud (AWS, Azure), Infrastructure-as-Code and configuration management (Terraform, Ansible), containers, and secure CI/CD are things you still build, not just oversee, and AI is your primary surface for building them
• You run platforms like products, with self-service, golden paths, and an internal developer portal that scale across many teams
• You build and support a DevSecOps practice: shift-left security, policy-as-code, and secrets/IAM/RBAC built into the pipeline
• You own reliability and cost and enable AI and data, with SRE (SLOs, observability, incident response) and FinOps as core disciplines and a point of view on responsible AI enablement
• You govern AI as well as enable it
• A point of view on responsible, secure AI, model and data governance, guarding against insecure AI-generated code, and AI risk frameworks (NIST AI RMF, OWASP LLM Top 10, ISO 42001)
• You build compliance into the platform, not around it
• Continuous compliance, control mapping, and automated audit evidence, plus third-party and open-source risk, in a regulated environment (HIPAA, HITRUST, SOC 2, NIST, ISO 27001, GDPR)
• You lead data protection and residency
• Encryption and key management, least-privilege to sensitive data (PHI/ePHI), privacy-by-design, and multi-region data-residency placement across domestic and international operations
• You lead by building alongside your team, leading and working with your team, establishing a foundation of technology and quality excellence, reskilling talent, and communicating clearly to engineers and executives
• 10+ years in cloud, platform, or infrastructure engineering with team leadership
• Bachelor's in Computer Science or a related field
• cloud certifications (AWS or Azure Solutions Architect / DevOps / SRE) strongly preferred