Infrastructure Engineer

Gallatin•Washington, DC

8d•$80,000 - $210,000•Onsite

About The Position

Gallatin is rebuilding defense logistics for U.S. and allied warfighters using software to modernize logistics operations. The Infrastructure Engineer will build, operate, and own the platform that delivers Navigator across commercial and government cloud, classified networks, and air-gapped forward-site appliances. The work includes Kubernetes infrastructure, application streaming, data platforms, and a unified artifact pipeline that signs and ships builds to multiple deployment environments. The engineer will design, develop, test, iterate on, and deploy secure production systems; contribute production code alongside Product and Engineering teams; and own outcomes after deployment. Security and compliance are integrated into daily engineering work, including identity, network segmentation, secrets management, vulnerability remediation, STIG implementation, audit preparation, and controls for environments such as IL5, IL6, and JWICS. The role partners with Governance, Risk, and Compliance leads and mission owners to maintain an audit-ready posture and reliable operations. The position is in-office at one of Gallatin's core engineering locations: El Segundo, California; Austin, Texas; Washington, DC; or San Francisco, California. The candidate must be able to obtain and maintain a security clearance, work in a classified environment when necessary, and meet the stated U.S. citizenship requirement.

Requirements

At least 5 years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure roles.
Deep production Kubernetes experience, including operators, networking, storage, and multi-cluster operations.
Expertise with major cloud providers such as AWS or Azure, and the ability to design across providers and deployment profiles.
Experience packaging and shipping workloads into disconnected or air-gapped environments.
Production experience designing, building, and operating services in a modern backend language such as Go, Python, Rust, or TypeScript.
Ability to build working solutions from scratch, connect disparate applications, and contribute to existing codebases.
Strong application and infrastructure security fundamentals, including identity, network segmentation, secrets management, common vulnerability classes, and security judgment under ambiguity.
Ability to obtain a SECRET security clearance.
Clear, concise communication across disciplines.
Willingness to learn and stay current with industry trends and tools.
U.S. citizenship; proof of citizenship is required prior to employment if selected.
Ability to work in a classified environment when necessary.

Nice To Haves

Active U.S. SECRET or TOP SECRET security clearance.
Government cloud expertise, including AWS GovCloud or Azure Government.
Exposure to FedRAMP, IL4/IL5, IL6, or JWICS environments.
Audit experience, such as FedRAMP, SOC 2, or equivalent.
Hands-on experience with Infrastructure-as-Code tools such as Terraform or CloudFormation and secure CI/CD pipelines.
Experience building and integrating on Palantir Foundry and its offerings.
Big data and distributed data experience.
Experience supporting defense, intelligence, or other regulated industries, including legacy system modernization.
Contributions to open-source projects.

Responsibilities

Design, develop, test, iterate on, and deploy secure production systems across cloud-native and edge appliance deployments.
Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives.
Operate production Kubernetes across commercial and government cloud, including operators, networking, storage, and multi-cluster operations.
Harden the artifact pipeline so signed builds can run across commercial cloud, single-tenant high-side, and air-gapped appliance deployments.
Maintain platform reliability through proactive monitoring, logging, and alerting, and own incident response when systems break.
Build identity, network segmentation, secrets management, and CVE remediation into application and infrastructure systems.
Partner with GRC leads and mission owners on STIG implementation, audit preparation, and controls for IL5, IL6, and JWICS environments.
Maintain an audit-ready posture between formal assessment cycles.
Collaborate with Product and Engineering on RFCs, PRDs, and production code.
Embed with cross-functional teams and advise on infrastructure, security, and deployment best practices.
Contribute to code reviews, documentation, and continuous improvement of CI/CD and DevSecOps workflows, with Developer Experience in mind.
Communicate system architecture and recent work, including through RFCs and weekly demos.