Principal Infrastructure Engineer

Onebrief's infrastructure team owns the platform that delivers our software to military staffs. We're hiring an Infrastructure Engineer who builds security into the systems they operate rather than treating it as a separate workstream. You'll architect, build, and run the platform end to end. The work cuts across cloud-native deployments, edge appliances, data platforms, and the application streaming layer that puts Onebrief on classified environments. You'll partner with Governance, Risk, and Compliance (GRC) and mission owners on STIGs, CVE remediation, audit prep, and the controls work that lets us operate in environments such as IL5, IL6, and JWICS.

Responsibilities

Design, develop, test, iterate, and deploy secure production systems across cloud-native and edge appliance deployments; Embed with cross-functional teams and advise on infrastructure, security, and deployment best practices that hold up in production; Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives; Harden the artifact pipeline so the same signed builds run in cloud, single-tenant high-side, and air-gapped appliance deployments

Requirements

8+ years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure role; Full-stack engineering experience when necessary, e.g., production experience designing, building, and operating services in a modern backend language (e.g., Go, Python, Rust, TypeScript); Deep production Kubernetes experience: operators, networking, storage, multi-cluster operations, and a feel for what breaks at scale; Expertise with major cloud providers (e.g., Amazon AWS, Microsoft Azure), with strong instincts for designing across providers and profiles; Strong application and infrastructure security fundamentals: identity, network segmentation, secrets management, common vulnerability classes, and sound security judgment under ambiguity; Demonstrated ability to build working solutions from scratch, connect disparate applications together, and jump into existing code bases to add value; Experience packaging and shipping workloads into disconnected or air-gapped environments; Demonstrated leadership/mentorship experience; Ability to obtain a SECRET clearance

Nice to have

Active US SECRET or TOP SECRET security clearance; Government cloud expertise (AWS GovCloud, Azure Government); FedRAMP, IL4/IL5, IL6, or JWICS environment exposure; Audit experience (FedRAMP, SOC 2, or equivalent); Big data and distributed data experience; Prior experience supporting defense, intelligence, or other regulated industries