Classified Platform Engineer

Anduril • Costa Mesa, CA

1d • $166,000 - $220,000

About The Position

Anduril is seeking a Classified Platform Engineer to serve as the technical lead for its classified software team. The role designs and builds platform services and user-facing applications for multi-level classified computing, including a virtual desktop and application broker, a policy-enforcing storage gateway, and administrative interfaces for an access control platform. The engineer owns these systems end to end, from architecture through the DevSecOps pipeline that delivers them into accredited, fully air-gapped environments, working with Cybersecurity, Systems Engineering, and Infrastructure Engineering.

This is a hands-on role with technical authority and the first dedicated software engineering position on the team. The engineer will establish architecture, patterns, and engineering standards, and technically lead the team as it grows. The role also offers a path into formal technical leadership of the software function.

Requirements

• Professional experience building and shipping production web applications with React or a comparable modern front-end framework, and TypeScript, including interfaces for complex domains where operator workflow matters.
• Professional experience developing backend services in Go.
• Experience designing and working with relational databases such as PostgreSQL or CockroachDB, including schema design, migrations, and query performance.
• Experience with containerization and orchestration using Podman or Docker and Kubernetes.
• Experience with GitOps and CI/CD pipelines in an Agile development process.
• Knowledge and experience with Linux operating systems such as Red Hat Enterprise Linux (RHEL), Rocky Linux, or Ubuntu.
• Experience leading technical work, including owning system architecture, reviewing others' designs and code, setting direction for a small team, and communicating through design documents, tradeoff analyses, and decision records.
• Eligible to obtain and maintain a US Top Secret Clearance with customer's approval.
• May be required to obtain and maintain a DoD 8140/8570 qualifying certification.

Nice To Haves

• Experience with virtual desktop infrastructure or application and desktop brokering, such as Citrix, Omnissa/VMware Horizon, Leostream, Apache Guacamole, or Kasm, and with virtualization orchestrated through Kubernetes such as KubeVirt.
• Experience implementing authorization systems (RBAC, ABAC, or relationship-based models), integrating applications with an external policy decision point, and using Policy as Code tools such as OPA, Oso, Cedar, or Kyverno.
• Experience with S3-compatible object storage APIs, POSIX filesystem semantics, or FUSE.
• Experience building software for air-gapped or network-isolated environments, including dependency vendoring and offline builds.
• Experience with DevSecOps supply-chain security practices, including SBOM generation, artifact signing, and provenance attestation.
• Proficiency with security concepts including encryption, authentication, identity and access management, and Zero-Trust Architecture (ZTA), plus understanding of NIST SP 800-53 controls and their technical implementation.
• Experience with observability tooling, including structured logging, metrics, and distributed tracing.
• Experience as a tech lead or founding engineer on a product team, including establishing engineering practices from scratch, onboarding engineers, and interviewing and hiring software engineers.

Responsibilities

• Act as technical lead for the classified software and platform team, owning application portfolio architecture, setting engineering standards, and making technical tradeoff decisions.
• Design and build production web applications in React and Go for fully air-gapped, accredited classified environments.
• Develop and work with S3 storage APIs and policies.
• Build administrative and operator interfaces for the access control platform.
• Design relational and distributed datastores supporting authorization decisions, audit records, and application state.
• Own the DevSecOps path to production, including containerization and Kubernetes deployment through GitOps CI/CD pipelines that scan and sign software and produce accreditation evidence.
• Decompose multi-quarter programs into well-scoped work that other engineers can deliver independently.
• Develop engineers through design reviews, code reviews, and pairing.
• Partner with Cybersecurity, Program Management, and business line stakeholders to capture requirements and translate them into a technical plan delivered on time and on budget.

Benefits

• Highly competitive equity grants are included in the majority of full-time offers and are considered part of total compensation.
• Top-tier benefits for full-time employees, described as a comprehensive, competitive package available at little to no cost to employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed