DevOps Engineer

As we take on more government and defense work, the security and integrity of our infrastructure becomes its own discipline — and we want someone who owns it rather than spreading it thin across the product engineers. The "sec" in this role is the point: you'll be responsible for how sensitive data moves, where it lives, and who can see it, so the rest of the team can focus on building. This is a remote-friendly role open to candidates across the U.S., with occasional in-person sync when the work calls for it. What you'll do Own our infrastructure and deployment pipeline — including deploying into containerized, customer-provided environments and on Azure. Own the security posture for controlled and sensitive data: data transmission, storage, access control, key management, and who can and can't see what. Drive our compliance program from identification into implementation — NIST controls (we're already tracking these in ControlMap), CMMC / SPRS, and recurring assessments like SOC 2 Type II. Partner with leadership and IT on compliance requirements and timelines, and turn a backlog of controls into an ongoing, sustainable program that doesn't grind product velocity to a halt. Take security concerns off the plates of full-stack and ML engineers so they can ship. Must-haves Eligible to obtain and hold a U.S. security clearance — an active clearance is not required today, but you must be able to qualify for one. Strong DevOps / infrastructure background — CI/CD, cloud (Azure especially), containerized deployments, and infrastructure-as-code. A security-focused mindset for infrastructure hardening and compliance — you think about access, isolation, and blast radius by default. Ability to implement a defined set of controls in our stack — turning a documented framework into working configuration, policy, and automation. Nice to have Prior government or defense experience — ideally in defense contracting — and comfort operating inside those environments. Hands on exposure to NIST 800-171, CMMC, or navigating an ATO Process