IT Engineer

Spear AI • Washington, DC

5d • Remote

About The Position

Spear AI is seeking an IT Engineer to secure and scale the internal infrastructure supporting its mission-critical work. The company develops sonobuoy sensors that collect edge data and works with the U.S. Navy to collect and process SONAR data. This role supports products deployed to U.S. submarines and other work that contributes to national security. The position has a broad scope in a small team and works across internal IT, security, compliance, and infrastructure. Spear AI describes its work environment as remote, with real-time collaboration through Slack and asynchronous collaboration through GitHub. The company has a flat organizational structure and emphasizes careful, auditable security practices, collaboration, and direct contributions to its mission.

Requirements

• Hands-on experience with CMMC, FedRAMP, or NIST 800-171 compliance frameworks.
• Experience writing and maintaining security policies and procedures.
• Experience with MDM platforms such as Kandji, Jamf, or similar.
• Experience administering Google Workspace at an organizational level.
• Experience managing SSO and IdP solutions such as Authentik, Okta, or Google Identity.
• Proficiency with AWS IAM, security groups, and access management.
• Experience with security and compliance platforms such as Vanta, Drata, or Tugboat Logic.
• Experience with secrets management tools such as 1Password or HashiCorp Vault.
• Experience managing and securing macOS, Linux, and Windows endpoints.
• Experience configuring and managing VPN solutions.

Nice To Haves

• Experience working in a defense contracting or government-adjacent environment.
• Familiarity with Pulumi or other infrastructure-as-code tools.
• Proficiency in bash/shell scripting and Python.

Responsibilities

• Administer Google Workspace, manage the identity provider (IdP), and configure single sign-on (SSO).
• Manage device enrollment and device scripting using Iru/Kandji.
• Write, maintain, and audit internal security policies and procedures.
• Enforce CMMC 2.0 Level 2 and NIST security frameworks with Vanta.
• Safeguard team credentials and secrets using 1Password.
• Harden AWS account security, IAM policies, and role-based access controls.
• Secure network access using Tailscale VPN.
• Develop infrastructure as code using Pulumi in collaboration with the infrastructure team.
• Investigate security incidents and conduct routine vulnerability assessments.

Benefits

• Unlimited paid time off.
• Dedicated sick time.
• Medical, dental, and vision coverage.
• 11 paid holidays.
• Professional development and educational opportunities.
• Collaborative environment with direct access to leadership.
• Mission-driven work supporting national security.
• Growth opportunities during the company's expansion.
• 401(k) with company match.
• Onsite, remote, flexible, or hybrid work arrangements, depending on the position.
• Relocation assistance, depending on the position.
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement, depending on the position.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed