Infrastructure Engineer

This team operates at the intersection of advanced sensing, AI/ML, and secure cloud infrastructure, working directly with real-world SONAR and sensor data in classified environments. Engineers have direct ownership over systems deployed in mission-critical settings supporting national security operations.

Our client builds sonobuoy sensors deployed into maritime environments to collect edge data and partners closely with the U.S. Navy to process and operationalize SONAR data. This is an opportunity to work on real-world systems that directly impact warfighter capabilities and mission success.

What This Role is All About:

This role is focused on building and operating the cloud infrastructure that powers our client's next-generation maritime intelligence platform. The work is heavily cloud-focused - you'll be designing and deploying infrastructure across AWS, including AWS Secret, as well as air-gapped environments.

This is not a maintenance role. You'll be building foundational infrastructure in a fast-moving environment where the systems you ship go directly into operational use. You'll own CI/CD pipelines, IaC, DevSecOps practices, and compliance enforcement end-to-end.

The ideal candidate is deeply technical, fanatical about correctness and quality, and comfortable operating within the security constraints of classified cloud environments.

What You'll Be Doing:

• Design and implement cloud architecture supporting AI/ML and data processing workloads

• Develop and maintain Infrastructure as Code using Pulumi

• Build and maintain CI/CD and DevSecOps pipelines using GitHub Actions

• Continuously deploy to AWS cloud, AWS Secret, and air-gapped environments

• Monitor applications and services using OpenTelemetry, Sentry, and SigNoz

• Enforce CMMC compliance policies and security standards

• Manage secrets, configuration, and identity/access controls

• Containerize and orchestrate workloads using Docker and Kubernetes

• Support networking, SSO, and identity provider configuration (Authentik, Keycloak)

• Self-host services on bare metal servers where environment constraints require it

• Active TS/SCI clearance - hard requirement

• Expert-level Infrastructure as Code - Pulumi strongly preferred, Terraform acceptable

• Deep hands-on experience with Docker and Kubernetes

• Strong CI/CD and DevSecOps experience with GitHub Actions

• Proficiency with AWS - including experience deploying to classified or air-gapped environments

• Strong proficiency in TypeScript and Go

• Solid networking fundamentals

• Experience with cybersecurity compliance frameworks - CMMC, FedRAMP, or equivalent

• Familiarity with SSO and identity providers (Authentik, Keycloak)

• Experience self-hosting on bare metal servers

• High standards for code quality - typed, tested, linted, documented

Bonus Points:

• Experience deploying to AWS Secret or other IC cloud environments
• Experience with Change Data Capture
• Familiarity with IoT devices and sensor systems
• Digital signal processing exposure
• Geospatial analysis or GIS experience
• Experience working in monorepos

• Equity participation
• 401(k) with company match
• Unlimited PTO
• Dedicated sick time
• Comprehensive medical, dental, vision, and life insurance
• Paid parental leave
• 11 paid holidays
• Professional development and certification reimbursement
• Performance bonus opportunities
• Technology stipend for home office setup
• Mission-driven work with direct real-world national security impact