Senior Infrastructure Engineer

Spear AI • Washington, DC

2d

About The Position

Spear AI is hiring a Senior Infrastructure Engineer to own deployment and authorization on its developer cloud for the undersea enterprise. The accredited platform supports building, deploying, and operating mission software across unclassified and classified environments. The engineer will take commercial and partner software from onboarding through hardened deployment and Authority to Operate (ATO), working directly with government security staff to accelerate authorization while meeting security requirements.

This is a builder role focused on making sound decisions about what to build, reuse, or leave unsolved, and creating tooling that makes subsequent deployments faster. The role sits within Spear AI's Services team, an applied engineering and technical advisory group that embeds with government customers to design, build, and operate platforms, pipelines, and software. The position supports mission users by helping move emerging capabilities from concept to fielded impact.

Requirements

• Active TS/SCI clearance and ability to obtain a CI Polygraph.
• DoD 8140 baseline certification, such as Security+ or higher, for privileged access; candidates without it must earn it shortly after starting.
• At least 5 years of hands-on platform, DevOps, or infrastructure engineering experience on production systems.
• Experience writing production code in Python, Go, or TypeScript, with version control and tests.
• Infrastructure-as-code experience using Terraform, Pulumi, or similar, with disciplined versioning, review, and testing.
• CI/CD pipeline design experience.
• Deep working knowledge of containers and Kubernetes, including secure operation in restricted environments.
• Experience designing and operating AWS infrastructure, including networking, IAM, and encryption boundaries.
• Linux and networking fundamentals, including DNS, TLS/PKI, load balancing, and routing, with the ability to debug across these areas.
• Working knowledge of RMF, NIST SP 800-53, DISA STIGs, and vulnerability management.
• Ability to translate security requirements into technical implementations and explain them clearly to government security staff.
• Ability to learn new AI platforms and integrations quickly, including agentic AI tooling.

Nice To Haves

• Active IC CI Poly.
• Experience taking a system through RMF to ATO, IATT, or IATC in a DoD or IC environment, including use of eMASS or Xacta.
• Experience deploying commercial software into government-controlled cloud accounts, including BYOC, multi-tenant, SCCA-compliant, or broker-provisioned structures.
• Experience with air-gapped or cross-domain environments, mirrored repositories, controlled egress, or cross-domain solution integrations.
• Identity federation experience with Keycloak, Authentik, or similar, including CAC/PIV, OIDC, and SAML.
• Experience with DevSecOps tooling such as SAST/DAST, container image scanning, SBOM generation, or policy-as-code.
• Experience supporting AI/LLM workloads in government cloud, such as model serving in GovCloud or GPU-backed inference.
• Military or Intelligence Community experience.
• Familiarity with Terraform, Pulumi, CloudFormation, or Ansible.
• Familiarity with Keycloak, Authentik, or AWS IAM Identity Center.
• Familiarity with eMASS, Xacta, ACAS/Nessus, SCAP/OpenSCAP, Trivy, Grype, or SonarQube.
• Familiarity with GitLab CI/CD, GitHub Enterprise, Artifactory, Nexus, or Harbor.
• Familiarity with Palantir Foundry or AIP, or Anduril Lattice.
• Familiarity with Amazon Bedrock, vLLM, MCP servers, LangGraph, or LiteLLM.

Responsibilities

• Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments using versioned, reviewed, and tested infrastructure as code.
• Onboard commercial and third-party software by containerizing or packaging it and integrating it with platform identity, logging, vulnerability scanning, and artifact services.
• Drive capabilities through the Risk Management Framework (RMF) to ATO, including defining authorization boundaries, mapping controls, owning the System Security Plan and supporting artifacts, remediating findings, and managing POA&Ms.
• Make and explain build, reuse, or buy decisions, favoring the simplest solution that meets security requirements.
• Harden systems to DISA STIGs and DoD/IC baselines, and conduct and respond to vulnerability scans and continuous monitoring.
• Build CI/CD and DevSecOps pipelines for air-gapped and restricted networks, including internal registries, mirrored package repositories, and controlled egress.
• Serve as the technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff.
• Create templates, tooling, and golden paths to accelerate deployment and authorization of new capabilities.
• Mentor less experienced engineers on secure deployment.

Benefits

• Unlimited PTO.
• Dedicated sick time.
• Medical, dental, and vision coverage.
• 11 paid holidays.
• Professional development and educational opportunities.
• 401(k) with company match.
• Onsite, remote, flexible, or hybrid work arrangements, depending on the position.
• Relocation assistance, depending on the position.
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement, depending on the position.
• Equity grant for every new employee.
• Collaborative, low-ego environment and growth opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed