← All roles

Director of Cloud infrastructure and security

Vestiaire Collective· Tech – Engineering
Apply on company site
Hybrid (Berlin)Permanent contractPosted 1w ago

About the role

Director-level role leading a small team across Cloud Infrastructure (DevOps/SRE) and Security, owning AWS/GCP footprint, security posture, and reliability for Vestiaire Collective’s global marketplace.

Responsibilities

  • Directly lead, develop and retain a small team of six (6) experienced engineers across Cloud Infrastructure and Security.
  • Define a joint roadmap for both teams, aligned to business priorities and risk appetite, and make explicit calls on what we will not do.
  • Establish clear KPIs, SLOs and risk metrics, and report regularly to leadership on reliability, cost and security posture.
  • Set the operating model: what product teams self-serve behind guardrails versus what your teams own centrally.
  • Foster a culture where reliability and security are shared accountabilities, including a Security Champions model across engineering.
  • Own our AWS and GCP footprint end to end: EKS, networking, secrets (Vault), data stores (RDS/Aurora, MSK, ElastiCache, MongoDB Atlas, OpenSearch) and the edge (Cloudflare).
  • Establish real reliability engineering practice: SLOs and error budgets, capacity planning, and a business continuity plan.
  • Drive infrastructure-as-code maturity: Automating Terraform change application, advancing move to GitOps (ArgoCD), and enforcing guardrails at creation time with policy-as-code (Kyverno/OPA).
  • Consolidate observability into a single source of truth for metrics, logs and traces.
  • Improve developer experience and delivery throughput: CI/CD (Jenkins, GitHub Actions), paved roads, test environments on demand, and delivery metrics that hold up.
  • Own FinOps: infrastructure cost per unit of business value, cost accountability pushed back to each team, and continued run-rate reduction.
  • Support the modernisation of our core platform: Tech migrations, runtime and framework upgrades, and continuous database and Kubernetes upgrades.
  • Attack toil systematically: automate recurring requests and hand safe self-service back to product teams.
  • Grow the foundations for AI-augmented engineering and operations
  • Own security strategy and posture across cloud, application, identity, detection and response, governance, risk register, roadmap, remediation SLAs, and leadership reporting.
  • Strengthen cloud security posture management and secure-by-default configurations across environments.
  • Improve embedding security into SDLC and CI/CD: static-analysis and dependency-scanning coverage with release gating.
  • Mature vulnerability management, penetration testing and bug bounty into a prioritised program with SLAs.
  • Advance identity and access management toward least privilege and zero trust.
  • Mature logging, detection and incident response, closing SIEM coverage gaps.
  • Set guardrails for safe AI adoption and defend against AI-enabled fraud and phishing.
  • Ensure compliance with GDPR, PCI DSS v4, NIS2, and CIS v8 with reusable evidence library.
  • Collaborate with legal and finance on compliance and forensics topics.
  • Manage third-party and supply-chain risk with vendor tiering and recurring reviews.
  • Own security-built services (back-office authentication, ACL, banning/fraud tooling, phone verification) and decide on retention or retirement.
  • Own endpoint security and partner with Corporate IT on device and identity coverage.
  • Keep security awareness training relevant to AI-enabled threats.

Qualifications

  • 8+ years with significant experience in Infrastructure, Platform Engineering, DevOps, SRE or Cloud Security, including leading engineers.
  • Current or aspirational step into Director role from Engineering Manager, Senior Engineering Manager or Head of.
  • Strong practical experience with public cloud (AWS preferred), Kubernetes and Infrastructure-as-Code, with hands-on architectural delivery.
  • Track record establishing reliability practice at scale (SLOs, incident management, on-call, capacity planning, disaster recovery).
  • Demonstrated cloud cost optimisation/FinOps results at meaningful scale.
  • Strong grounding in cloud and application security fundamentals (IAM, network security, secrets management, CSPM, OWASP Top 10).
  • Working knowledge of compliance frameworks (GDPR, DORA, PCI DSS, NIS2) and translating requirements into controls.
  • Experience leading through incidents and security events under pressure.
  • Excellent communication skills able to translate technical trade-offs for CFOs and risk decisions for engineers.
  • Comfort operating with a lean team, prioritisation, automation, and pragmatism.

Skills

Required:Cloud infrastructureReliability engineeringInfrastructure as codeFinOpsSecurity governance

Benefits

  • A meaningful job with impact on sustainability and fashion consumption
  • Opportunity to do career-defining work in a fast-growing scale-up
  • Globally diverse team with 50+ nationalities
  • Two days of volunteer work to support activism
  • Investment in learning and growth
  • Competitive compensation and benefits package (e.g., 28 days paid time off)
Last updated Oct 23, 2026. Interested? Apply on the company site.

About Vestiaire Collective

Buy & sell designer second-hand fashion.

3 million items, 12,000+ brands. Luxury pre-loved fashion, up to 70% off. Expert authentication, trusted by millions.

luxury brandssecond hand designer clothesfashionluxury watcheshandbagsshoes onlinejewelryvintage
Company profileWebsite

More open roles at Vestiaire Collective