Own and automate security compliance across cloud infrastructure by translating control requirements into code, CI checks, and tests while supporting audits, security reviews, and platform reliability.
InfraSec Engineer
๐ Description
- Design, build, and manage infrastructure to achieve FedRAMP and DoD compliance.
- Orchestrate secure cloud environments and deploy secure software pipelines.
- Enforce security best practices across infrastructure and software delivery.
- Apply security automation, vulnerability scanning, and penetration testing practices.
- Support resilient systems that meet DoD and federal cloud security requirements.
๐ ๏ธ Requirements
- Experience implementing FedRAMP or DoD security controls.
- Strong understanding of SOC 2, NIST CSF, and FedRAMP.
- Hands-on experience securing AWS GovCloud, Azure GCCH, or Platform One environments.
- Coding skills in Python or Rust and infrastructure-as-code skills with Terragrunt or Terraform.
- Experience with Helm and Kubernetes, including managing AWS EKS.
- Familiarity with security automation tools, vulnerability scanning, and penetration testing.
- Understanding of OWASP Top 10, SANS Top 25, Zero Trust, least privilege, and cloud security best practices.
- Current or recent U.S. security clearance, or eligibility to obtain one.
Full job description
About ASI
ASI is the frontier AI company that dynamically orchestrates critical infrastructure and defense assets, across air traffic control, energy, logistics, and combat operations. ASI's systems simulate physical operations, hours, days, and weeks ahead, so the people running air traffic control, the electric grid, and military operations can catch problems early and act before they spread. ASI is powering vital infrastructure for customers like United Airlines, National Grid, the Federal Aviation Administration, Delta Air Lines and the Department of War. ASI is headquartered in Boston with offices in Washington, DC, Denver, and Europe, and is backed by leading investors, including Andreessen Horowitz, Citadel Securities, and Spark Capital.
What You Will Do
Air Space Intelligence is building mission-critical, secure infrastructure for defense. We are seeking a DevSecOps Engineer to design, build, and manage the infrastructure required to achieve FedRAMP and DoD compliance. This role is essential in orchestrating cloud environments, deploying secure software pipelines, and enforcing security best practices. You will work at the intersection of security, automation, and cloud infrastructure, ensuring ASIโs systems are both resilient and compliant with DoD and federal cloud security requirements.
What We Value
Proven experience implementing FedRAMP or DoD security controls.
Strong understanding of security frameworks, including SOC 2, NIST CSF, and FedRAMP.
Hands-on experience securing cloud environments, particularly AWS GovCloud, Azure GCCH, or Platform One.
Demonstrated coding skills in Python/Rust.
Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
Experience with Helm/Kubernetes including managing AWS EKS.
Familiarity with managing security automation tools, vulnerability scanning, and penetration testing.
Understanding of secure coding best practices, including OWASP Top 10 and SANS Top 25.
Experience implementing Zero Trust principles, least privilege access, and cloud security best practices.
Recent or current U.S. Security Clearance or eligibility to obtain a U.S. Security clearance.
How We Hire
We look at the interview process not as a screening or test, but rather as an opportunity to simulate what it would look like working together. We build the interview process around you.
ASI works with export controlled technology and restricted U.S. Government data, including on contracts mandating U.S. immigration status and location restrictions for performing personnel. Employment offers are contingent on ability to timely obtain all required authorizations for contemplated job duties.
Similar jobs
Search more DevSecOps Engineer jobsDesign and maintain secure CI/CD pipelines for AWS applications, embedding automated testing and security controls while improving delivery reliability, compliance, and visibility across the software lifecycle.
As a DevSecOps Engineer, you'll lead the design and implementation of secure, automated CI/CD pipelines while embedding security into the software development lifecycle.
Du verbesserst die Sicherheit von Cloud-, Kubernetes-, Netzwerk-, IAM- und CI/CD-Umgebungen, koordinierst Schwachstellenbehebungen und unterstรผtzt Monitoring, Incident Response und ISO-27001-Compliance.
Plateform Security Engineer - CDI Paris - Theodo Cloud
Tu sรฉcurises les environnements cloud clients en rรฉalisant des audits, en concevant des architectures secure-by-design et en mettant en ลuvre des contrรดles techniques, tout en accompagnant la progression de lโรฉquipe SecOps.
