Senior Infrastructure Engineer

Responsibilities

• Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments as versioned, reviewed, and tested code.
• Onboard commercial and third-party software by packaging or containerizing it and integrating identity, logging, vulnerability scanning, and artifact services.
• Drive capabilities through RMF to ATO by defining authorization boundaries, mapping controls, maintaining SSPs, remediating findings, and managing POA&Ms.
• Make build, reuse, or buy decisions based on meeting security requirements with the simplest effective solution.
• Harden systems to DISA STIGs and DoD/IC baselines and respond to vulnerability scans and continuous monitoring.
• Build CI/CD and DevSecOps pipelines for air-gapped and restricted networks, including internal registries, mirrored repositories, and controlled egress.
• Serve as the technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff.
• Create deployment templates, tooling, and golden paths and mentor less experienced engineers on secure deployment.

Requirements

• Active TS/SCI clearance and ability to obtain a CI Polygraph are required; an active IC CI Poly is preferred.
• DoD 8140 baseline certification such as Security+ or higher is required for privileged access, or must be earned shortly after starting.
• At least 5 years of hands-on platform, DevOps, or infrastructure engineering experience on production systems.
• Production coding experience in Python, Go, or TypeScript with version control and tests.
• Experience with infrastructure-as-code, CI/CD pipeline design, containers, and secure Kubernetes operations in restricted environments.
• Experience designing and operating AWS infrastructure, including networking, IAM, and encryption boundaries.
• Linux and networking fundamentals, including DNS, TLS/PKI, load balancing, routing, and cross-layer debugging.
• Working knowledge of RMF, NIST SP 800-53, DISA STIGs, and vulnerability management.
• Ability to translate security requirements into technical implementations and explain them to government security staff.
• Ability to learn AI platforms and integrations, including agentic AI tooling, quickly.
• Preferred experience taking systems through RMF to ATO, IATT, or IATC in DoD or IC environments, including eMASS or Xacta.
• Preferred experience deploying commercial software into government-controlled cloud accounts, air-gapped or cross-domain environments, identity federation, DevSecOps tooling, and AI/LLM workloads in government cloud.
• Military or Intelligence Community experience is a plus.

Benefits

• Unlimited PTO, dedicated sick time, medical, dental, and vision coverage.
• 11 paid holidays and professional development resources.
• Onsite, remote, flexible, or hybrid work arrangements depending on the position.
• 401(k) with company match, relocation assistance, referral and performance bonuses, life insurance, and disability coverage.
• Technology home-office setup stipend and professional certification reimbursement depending on the position.
• Equity grant for every new employee.
• Full-time exempt salaried position with no overtime eligibility.
• Mission-driven work, a flat collaborative organization, and growth opportunities.