Senior Infrastructure Engineer

The role

You will own deployment and authorization on a developer cloud for the undersea enterprise. You will design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments.

What you will do

• Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments.
• Onboard commercial and third-party software by containerizing or packaging it.
• Integrate software with platform identity, logging, vulnerability scanning, and artifact services.
• Drive capabilities through the Risk Management Framework to ATO.
• Define authorization boundaries, map controls, own the SSP, and manage POA&Ms.
• Harden systems to DISA STIGs and DoD/IC baselines.
• Build CI/CD and DevSecOps pipelines for air-gapped and restricted networks.
• Serve as technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff.
• Build templates, tooling, and golden paths for deployment and authorization.
• Mentor less experienced engineers on secure deployment.

Required qualifications

• Active TS/SCI required.
• Ability to obtain a CI Polygraph.
• DoD 8140 baseline certification (Security+ or higher) required for privileged access.
• 5+ years of hands-on platform, DevOps, or infrastructure engineering on production systems.
• Real code in Python, Go, or TypeScript, with version control and tests.
• Infrastructure as Code with Terraform, Pulumi, or similar.
• CI/CD pipeline design.
• Deep working knowledge of containers and Kubernetes.
• Designing and operating AWS infrastructure: networking, IAM, and encryption boundaries.
• Linux and networking fundamentals (DNS, TLS/PKI, load balancing, routing).
• Working knowledge of RMF, NIST SP 800-53, DISA STIGs, and vulnerability management.
• Translating security requirements into technical implementation.

Nice to have

• Accreditation experience
• Active IC CI Poly
• Taking a system through RMF to ATO, IATT, or IATC in a DoD or IC environment, including eMASS or Xacta
• Deploying commercial software into government-controlled cloud accounts
• Air-gapped or cross-domain environments
• Identity federation (Keycloak, Authentik, or similar)
• DevSecOps tooling: SAST/DAST, container image scanning, SBOM generation, policy-as-code
• Supporting AI/LLM workloads in government cloud
• Military or Intelligence Community experience
• IaC & config: Terraform, Pulumi, CloudFormation, Ansible

Benefits

• Unlimited PTO
• Dedicated Sick Time
• Medical, dental, and vision coverage
• 11 Paid Holidays
• Professional Development
• 401(k) with company match
• Relocation assistance (position dependent)
• Referral bonuses
• Performance bonuses
• Life insurance and disability coverage
• Technology home office setup stipend
• Professional certification reimbursement (position dependent)

Before you apply

• Active TS/SCI required
• Ability to obtain a CI Polygraph
• Must earn DoD 8140 baseline certification shortly after starting

About the company

Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation’s security. The company builds sonobuoy sensors that are deployed into the water and collect edge data.