Senior Infrastructure Engineer

Spear AI • Washington, DC

1d

About The Position

Spear AI is hiring a Senior Infrastructure Engineer to own deployment and authorization on its developer cloud for the undersea enterprise. The platform supports building, deploying, and operating mission software across unclassified and classified environments. The role takes commercial and partner software from onboarding through hardened deployment and Authority to Operate (ATO), working directly with government security staff to accelerate authorization while maintaining security standards.

This is a builder role focused on making pragmatic build, reuse, and buy decisions and creating tooling that speeds up future deployments. The engineer will join the Services team, Spear AI’s applied engineering and technical advisory arm, which embeds with government customers to design, build, and operate platforms, pipelines, and software that bring emerging capabilities into mission use. Spear AI also builds sonobuoy sensors that collect edge data for real-world defense applications.

Requirements

• Active TS/SCI clearance and ability to obtain a CI Polygraph.
• DoD 8140 baseline certification (Security+ or higher) for privileged access, or ability to earn it shortly after starting.
• At least 5 years of hands-on platform, DevOps, or infrastructure engineering experience on production systems.
• Ability to write production code in Python, Go, or TypeScript, using version control and tests.
• Infrastructure-as-code experience using Terraform, Pulumi, or a similar tool.
• CI/CD pipeline design experience.
• Deep working knowledge of containers and Kubernetes, including secure operation in restricted environments.
• Experience designing and operating AWS infrastructure, including networking, IAM, and encryption boundaries.
• Linux and networking fundamentals, including DNS, TLS/PKI, load balancing, and routing, with ability to debug across them.
• Working knowledge of RMF, NIST SP 800-53, DISA STIGs, and vulnerability management.
• Ability to translate security requirements into technical implementations and explain them clearly to government security staff.
• Ability to learn new AI platforms and integrations quickly, including agentic AI tooling.
• Experience designing and running production platforms used by other engineers, and ability to explain implementation choices and tradeoffs.

Nice To Haves

• Experience taking a system through RMF to ATO, IATT, or IATC in a DoD or IC environment, including eMASS or Xacta.
• Experience deploying commercial software into government-controlled cloud accounts, including BYOC, multi-tenant, SCCA-compliant, or broker-provisioned structures.
• Experience with air-gapped or cross-domain environments, mirrored repositories, controlled egress, or cross-domain solution integrations.
• Experience with identity federation such as Keycloak or Authentik and CAC/PIV, OIDC, and SAML.
• Experience with DevSecOps tooling such as SAST/DAST, container image scanning, SBOM generation, or policy-as-code.
• Experience supporting AI/LLM workloads in government cloud, such as model serving in GovCloud or GPU-backed inference.
• Military or Intelligence Community experience.
• Experience with Terraform, Pulumi, CloudFormation, or Ansible.
• Experience with Keycloak, Authentik, or AWS IAM Identity Center.
• Experience with eMASS, Xacta, ACAS/Nessus, SCAP/OpenSCAP, Trivy, Grype, or SonarQube.
• Experience with GitLab CI/CD, GitHub Enterprise, Artifactory, Nexus, or Harbor.
• Experience with Palantir Foundry/AIP or Anduril Lattice.
• Experience with Amazon Bedrock, vLLM, MCP servers, LangGraph, or LiteLLM.
• Accreditation experience; Spear AI notes that this is a strong plus but not required.
• Active IC CI Polygraph.

Responsibilities

• Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments, using infrastructure as code that is versioned, reviewed, and tested.
• Onboard commercial and third-party software by containerizing or packaging it and integrating platform identity, logging, vulnerability scanning, and artifact services.
• Drive capabilities through the Risk Management Framework to ATO, including defining authorization boundaries, mapping controls, owning the System Security Plan and supporting artifacts, remediating findings, and managing POA&Ms.
• Make and defend build, reuse, or buy decisions, favoring the simplest solution that meets security requirements.
• Harden systems to DISA STIGs and DoD/IC baselines, and run and respond to vulnerability scans and continuous monitoring.
• Build CI/CD and DevSecOps pipelines for air-gapped and restricted networks, including internal registries, mirrored package repositories, and controlled egress.
• Serve as the technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff.
• Create templates, tooling, and golden paths to speed deployment and authorization of future capabilities.
• Mentor less experienced engineers on secure deployment.

Benefits

• Unlimited PTO.
• Dedicated sick time.
• Medical, dental, and vision coverage.
• 11 paid holidays.
• Professional development and educational resources.
• 401(k) with company match.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement, position dependent.
• Relocation assistance, position dependent.
• Referral bonuses.
• Performance bonuses.
• Equity grant for every new employee.
• Flexible work arrangements, including onsite, remote, or hybrid options, position dependent.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed