Infrastructure Engineer

Infrastructure EngineerThe Infrastructure team owns the platform that delivers Navigator to the warfighters who rely on it. Our scope spans Kubernetes clusters in commercial and government cloud, application streaming for thin-client users on classified networks, a unified artifact pipeline that signs and ships the same builds to every environment we run, and air-gapped appliances at forward sites where Contested Logistics is a daily reality, not a slide.We're looking for an Infrastructure Engineer who builds security into the systems they operate instead of treating it as a separate workstream. You'll architect, build, and run the platform end to end: writing RFCs and PRDs, writing and reviewing production code alongside Product and Engineering teammates, and owning the outcome once it ships. The work spans cloud-native deployments, edge appliances, data platforms, and the application streaming layer that brings Navigator to classified environments. You'll partner with our Governance, Risk, and Compliance (GRC) leads and mission owners on STIGs, CVE remediation, audit prep, and the controls work that allows us to operate in environments such as IL5, IL6, and JWICS.Success looks like a platform that stays up under real operational load, ships trusted artifacts to every profile we run, and passes audits without fire drills.This position requires the ability to obtain and maintain a security clearance.Build and Operate the PlatformDesign, develop, test, iterate on, and deploy secure production systems across cloud-native and edge appliance deployments.Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives.Run production Kubernetes across commercial and government cloud, including operators, networking, storage, and multi-cluster operations that hold up under operational load.Harden the artifact pipeline so the same signed builds run in commercial cloud, single-tenant high-side, and air-gapped appliance deployments.Keep the platform reliable through proactive monitoring, logging, and alerting, and own the response when something breaks.Security and Compliance as a Daily DisciplineEmbed application and infrastructure security into the systems you build — identity, network segmentation, secrets management, and CVE remediation as part of the work, not a phase at the end.Partner with GRC and mission owners on STIG implementation, audit prep, and the controls work that keeps us operating in IL5, IL6, and JWICS environmentsMaintain an audit-ready posture between formal assessment cycles, so authorization is a steady state rather than a fire drill.Collaborate Across DisciplinesWork closely with Product and Engineering on RFCs, PRDs, and production code; you contribute to the systems you operate.Embed with cross-functional teams and advise on infrastructure, security, and deployment best practices that hold up in production.Contribute to engineering best practices, including code reviews, documentation, and continuously improving CI/CD and DevSecOps workflows, with Developer Experience always front and center.What We're Looking ForPeople ask for you by name because you bias toward action. You're a natural problem-solver who genuinely cares about the mission and the outcome. You work without hand-holding: you read the problem, weigh the tradeoffs, and move. Sometimes those tradeoffs come with harsh consequences down the line, but you're resilient and you adapt. When the work goes beyond your expertise, you dig in, bring in the right teammates, apply their feedback, and keep moving.Strong Infrastructure Foundation5+ years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure roles.Deep production Kubernetes experience: operators, networking, storage, multi-cluster operations, and a feel for what breaks at scale.Expertise with major cloud providers (e.g., AWS, Azure), with strong instincts for designing across providers and deployment profiles.Experience packaging and shipping workloads into disconnected or air-gapped environments.Engineering DepthFull-stack engineering experience when necessary — production experience designing, building, and operating services in a modern backend language (e.g., Go, Python, Rust, TypeScript).Demonstrated ability to build working solutions from scratch, connect disparate applications together, and jump into existing codebases to add value.Security JudgmentStrong application and infrastructure security fundamentals: identity, network segmentation, secrets management, common vulnerability classes, and sound security judgment under ambiguity.Comfortable building security into systems rather than bolting it on.Communication & Growth MindsetClear, concise communicator across disciplines, whether designing system architecture, writing an RFC, or recording a weekly demo of recent work (a Gallatin tradition).Always seeking to learn and stay current with industry trends and tools.ClearanceAbility to obtain a SECRET clearance.Bonus PointsActive US SECRET or TOP SECRET security clearanceGovernment cloud expertise (AWS GovCloud, Azure Government)FedRAMP, IL4/IL5, IL6, or JWICS environment exposureAudit experience (FedRAMP, SOC 2, or equivalent)Hands-on experience with Infrastructure-as-Code (Terraform, CloudFormation) and secure CI/CD pipelinesExperience building and integrating on Palantir Foundry and its various offeringsBig data and distributed data experienceExperience supporting defense, intelligence, or other regulated industries, including legacy system modernizationContributions to open-source projectsMission and IdentityWe are building the system that enables faster, smarter logistics decisions in contested environments, and we're doing it with a team of seasoned entrepreneurs, operators, and technologists who have built and scaled solutions in this space before. We hold ourselves to an extremely high standard. We value clear thinking, direct communication, and the kind of ownership that doesn't stop until something actually works.Our mission is to create decision advantage when the stakes are the highest. If we succeed, the system doesn't just run; it gets smarter. We're not building AI for its own sake. We're building it because faster, smarter decisions in the most demanding environments on earth can't wait. If you want to work somewhere the stakes are real and the mission is urgent — you'll fit in here.Why Gallatin?The logistics infrastructure that supports America's warfighters and humanitarian disaster responders is overdue for transformation, and we are building it. From defense operations to disaster response, we're solving the hardest problems that keep missions moving when it matters most. Join a team where the mission is the point.Compensation: Gallatin offers competitive compensation commensurate with experience. Actual compensation may vary based on experience, skills, and location. In addition to base salary, we offer a generous equity grant, full healthcare coverage, 401k, unlimited PTO, and the perks of working in a high-caliber, mission-driven environment.Gallatin is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable federal, state, or local law.This position may require the ability to obtain and maintain a U.S. government security clearance. The successful candidate must be able to work in a classified environment when necessary.We comply with the United States Department of Labor's Pay Transparency provision.Note: Due to the nature of certain government contracts held by this organization, U.S. citizenship is a requirement for all positions at Gallatin. Proof of citizenship will be required prior to employment if selected.