IT Engineer

Spear AI • Washington, DC

6d • Remote

About The Position

Spear AI is seeking an IT Engineer to secure and scale the internal infrastructure supporting its mission-critical work. The company builds sonobuoy sensors that collect edge data and works with the U.S. Navy to collect and process SONAR data. This role supports real-world projects that contribute to warfighter capabilities and mission success.

The IT Engineer will work across a small team with varied responsibilities, maintaining identity, endpoint, cloud, network, and security systems. The role will help enforce CMMC 2.0 Level 2 and NIST security frameworks, develop infrastructure as code with the infrastructure team, and investigate incidents and vulnerabilities.

Spear AI describes its workplace as remote, with real-time collaboration through Slack and asynchronous collaboration through GitHub. The company has a flat organizational structure and emphasizes polished, correct, auditable, and secure systems, clear communication, and a mission-driven approach. This is a full-time, exempt position and is not eligible for overtime pay. Compensation is salaried and tailored to experience, location, and impact; a specific salary range is not provided in the posting.

Requirements

• Hands-on experience with CMMC, FedRAMP, or NIST 800-171 compliance frameworks.
• Experience writing and maintaining security policies and procedures.
• Experience with MDM platforms such as Kandji, Jamf, or similar.
• Experience administering Google Workspace at an organizational level.
• Experience managing SSO and IdP solutions such as Authentik, Okta, or Google Identity.
• Proficiency with AWS IAM, security groups, and access management.
• Experience with security and compliance platforms such as Vanta, Drata, or Tugboat Logic.
• Experience with secrets management tools such as 1Password or HashiCorp Vault.
• Experience managing and securing macOS, Linux, and Windows endpoints.
• Experience configuring and managing VPN solutions.

Nice To Haves

• Experience working in a defense contracting or government-adjacent environment.
• Familiarity with Pulumi or other infrastructure as code tools.
• Proficiency in bash/shell scripting and Python.

Responsibilities

• Administer Google Workspace, manage the identity provider (IdP), and set up single sign-on (SSO).
• Manage device enrollment and device scripting in Iru/Kandji.
• Author, maintain, and audit internal security policies and procedures.
• Enforce CMMC 2.0 Level 2 and NIST security frameworks with Vanta.
• Safeguard team credentials and secrets using 1Password.
• Harden AWS account security, IAM policies, and role-based access controls.
• Secure network access using Tailscale VPN.
• Develop infrastructure as code using Pulumi alongside the infrastructure team.
• Investigate security incidents and conduct routine vulnerability assessments.

Benefits

• Unlimited PTO.
• Dedicated sick time.
• Medical, dental, and vision coverage.
• 11 paid holidays.
• Professional development opportunities and resources.
• Collaborative environment with direct access to leadership.
• Mission-driven work supporting national security.
• Growth opportunities during the company’s expansion.
• 401(k) with company match.
• Onsite, remote, flexible, or hybrid work arrangements, depending on the position.
• Relocation assistance, depending on the position.
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement, depending on the position.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed