Job Description At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is looking for an Associate or Mid-Level Software Engineer to join our team in Berkeley, MO. Position Responsibilities: Lab Environment Provisioning: Design, provision, and maintain scalable lab environments on-premises and on cloud platforms (Azure, AWS) using Infrastructure as Code (IaC) tools such as Terraform and Ansible. Automated Integration Testing Orchestration: Develop and manage automated integration testing workflows that aggregate inputs from multiple program segments, ensuring comprehensive test coverage and timely feedback. Deployment Management: Manage and optimize automated deployment pipelines and mechanisms for both physical and virtual systems, ensuring reliable and repeatable software delivery. Data-Driven Feedback & Reporting: Orchestrate processes to collect, analyze, and deliver comprehensive feedback on product stability, performance, and integration issues to segment development teams, enabling continuous improvement. Collaboration & Communication: Work closely with cross-functional teams including development, QA, security, and physical lab team to align deployment strategies, testing requirements, and environment configurations. Security & Compliance: Integrate security best practices into provisioning, deploying, and testing processes, supporting compliance with relevant standards and frameworks. This position is expected to be 100% onsite. The selected candidate will be required to work onsite in Berkeley, MO. Basic Qualifications (Required Skills/ Experience): This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship as a condition of employment (An interim and/or final U.S. Secret Clearance Post-Start may be required) Ability to obtain access to Special Access Programs (SAP) Bachelor's Degree 2+ years of experience with DevSecOps and Continuous Integration and Continuous Deployment (CI/CD) tools and execution Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and containerization technologies (e.g., Docker, Kubernetes) Experience with writing and implementing Infrastructure as Code (IaC) with Bicep, ARM, or Terraform Experience with containerization orchestration with Kubernetes and Rancher Experience with implementing observability, monitoring, and tracing frameworks using Prometheus, Grafana, ELK/EFK, Datadog and/or similar tools Preferred Qualifications (Desired Skills/Experience): Level 3: 5 or more years' related work experience or an equivalent combination of education and experience Excellent problem-solving skills and ability to work collaboratively in a fast-paced environment Strong background in CI/CD pipeline development and automation using tools like GitLab CI, GitHub Actions, Jenkins, or Azure DevOps Solid scripting skills in Python, Bash, or PowerShell Understanding of security best practices in cloud and DevSecOps environments Familiarity with automated integration testing frameworks and orchestration Certifications such as Certified Kubernetes Administrator (CKA), AWS Certified DevOps Engineer, or Azure DevOps Engineer Experience deploying, operating, and troubleshooting production-grade Kubernetes clusters (EKS/AKS/GKE or on-prem distributions) and integrating them into CI/CD and GitOps workflows Experience with security scanning tools and compliance frameworks (CIS, NIST, SOC 2, FedRAMP) Knowledge of secrets management tools like HashiCorp Vault or Azure Key Vault Experience with GitOps workflows and tools like Argo CD or Flux Familiarity with service mesh technologies (Istio, Linkerd) Conflict of Interest: Successful candidates for this job must satisfy the Company's Conflict of Interest (COI) assessment process. Drug Free Workplace: Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. CodeVue Coding Challenge: To be considered for this position you will be required to complete a technical assessment as part of the selection process. Failure to complete the assessment will remove you from consideration. Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary Pay Range: Associate (Level2): $99,450 - $134,550 Mid-Level (Level 3): $126,650 - $171,350 Applications for this position will be accepted until Oct. 30, 2026 Export Control Requirements: This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. Export Control Details: US based job, US Person required Education Bachelor's Degree or Equivalent Required Relocation This position offers relocation based on candidate eligibility. Security Clearance This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required. This position requires ability to obtain program access, for which the U.S. Government requires U.S. Citizenship only. Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift This position is for 1st shift Equal Opportunity Employer: Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.
10/25/2026
Full time
Job Description At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is looking for an Associate or Mid-Level Software Engineer to join our team in Berkeley, MO. Position Responsibilities: Lab Environment Provisioning: Design, provision, and maintain scalable lab environments on-premises and on cloud platforms (Azure, AWS) using Infrastructure as Code (IaC) tools such as Terraform and Ansible. Automated Integration Testing Orchestration: Develop and manage automated integration testing workflows that aggregate inputs from multiple program segments, ensuring comprehensive test coverage and timely feedback. Deployment Management: Manage and optimize automated deployment pipelines and mechanisms for both physical and virtual systems, ensuring reliable and repeatable software delivery. Data-Driven Feedback & Reporting: Orchestrate processes to collect, analyze, and deliver comprehensive feedback on product stability, performance, and integration issues to segment development teams, enabling continuous improvement. Collaboration & Communication: Work closely with cross-functional teams including development, QA, security, and physical lab team to align deployment strategies, testing requirements, and environment configurations. Security & Compliance: Integrate security best practices into provisioning, deploying, and testing processes, supporting compliance with relevant standards and frameworks. This position is expected to be 100% onsite. The selected candidate will be required to work onsite in Berkeley, MO. Basic Qualifications (Required Skills/ Experience): This position requires the ability to obtain a US Security Clearance for which the US Government requires US Citizenship as a condition of employment (An interim and/or final U.S. Secret Clearance Post-Start may be required) Ability to obtain access to Special Access Programs (SAP) Bachelor's Degree 2+ years of experience with DevSecOps and Continuous Integration and Continuous Deployment (CI/CD) tools and execution Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and containerization technologies (e.g., Docker, Kubernetes) Experience with writing and implementing Infrastructure as Code (IaC) with Bicep, ARM, or Terraform Experience with containerization orchestration with Kubernetes and Rancher Experience with implementing observability, monitoring, and tracing frameworks using Prometheus, Grafana, ELK/EFK, Datadog and/or similar tools Preferred Qualifications (Desired Skills/Experience): Level 3: 5 or more years' related work experience or an equivalent combination of education and experience Excellent problem-solving skills and ability to work collaboratively in a fast-paced environment Strong background in CI/CD pipeline development and automation using tools like GitLab CI, GitHub Actions, Jenkins, or Azure DevOps Solid scripting skills in Python, Bash, or PowerShell Understanding of security best practices in cloud and DevSecOps environments Familiarity with automated integration testing frameworks and orchestration Certifications such as Certified Kubernetes Administrator (CKA), AWS Certified DevOps Engineer, or Azure DevOps Engineer Experience deploying, operating, and troubleshooting production-grade Kubernetes clusters (EKS/AKS/GKE or on-prem distributions) and integrating them into CI/CD and GitOps workflows Experience with security scanning tools and compliance frameworks (CIS, NIST, SOC 2, FedRAMP) Knowledge of secrets management tools like HashiCorp Vault or Azure Key Vault Experience with GitOps workflows and tools like Argo CD or Flux Familiarity with service mesh technologies (Istio, Linkerd) Conflict of Interest: Successful candidates for this job must satisfy the Company's Conflict of Interest (COI) assessment process. Drug Free Workplace: Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. CodeVue Coding Challenge: To be considered for this position you will be required to complete a technical assessment as part of the selection process. Failure to complete the assessment will remove you from consideration. Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary Pay Range: Associate (Level2): $99,450 - $134,550 Mid-Level (Level 3): $126,650 - $171,350 Applications for this position will be accepted until Oct. 30, 2026 Export Control Requirements: This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. Export Control Details: US based job, US Person required Education Bachelor's Degree or Equivalent Required Relocation This position offers relocation based on candidate eligibility. Security Clearance This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required. This position requires ability to obtain program access, for which the U.S. Government requires U.S. Citizenship only. Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift This position is for 1st shift Equal Opportunity Employer: Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.
Job Description Job Description Skill: Technical Architect Must Have Technical/Functional Skills: 6-7 years experience across cloud, infrastructure engineering, production operations, platform engineering, SRE, DevOps, or enterprise technology transformation. At least 1-2 years in architecture, program ownership, or technology partner roles with accountability for critical platforms, budgets, vendors, regulatory commitments, and distributed teams. Strong expertise across Microsoft Azure and AWS, including enterprise landing zones, identity, networking, compute, storage, databases, containers, security, observability, resilience, governance, and cost management. Preferred DevOps engineering background with credible hands-on experience in CI/CD, GitOps, Infrastructure as Code, automation, scripting, containers, orchestration, observability, release engineering, and production support. Proven leadership of cloud adoption, data-center modernization, hybrid-cloud transformation, migration, platform engineering, resilience, automation, technical-debt reduction, or operating-model change. Deep knowledge of network and infrastructure architecture, identity and access management, backup and recovery, capacity, performance, virtualization, middleware, databases, patching, vulnerability management, and lifecycle governance. Demonstrated command of incident, problem, change, release, availability, configuration, continuity, disaster recovery, major-incident, and service-level management. Strong understanding of DevSecOps, zero trust, cloud security controls, operational resilience, audit evidence, technology risk, compliance, and third-party governance in banking or financial services. Excellent executive communication, stakeholder influence, vendor and commercial management, negotiation, financial management, facilitation, and organizational leadership skills. Ability to work onsite as required, lead across time zones, and provide executive and technical direction during critical incidents or planned changes. Significant experience in banking, financial services, payments, lending, deposits, risk, treasury, digital banking, or another highly regulated and high-availability environment. Demonstrated delivery of enterprise AI/ML, generative AI, agentic AI, AIOps, MLOps, or AI-enabled engineering and operations initiatives. Experience integrating Azure AI Foundry/Azure OpenAI, Azure Machine Learning, Amazon Bedrock, Amazon SageMaker, or comparable enterprise AI services into secure platforms and operating workflows. Knowledge of responsible AI, model governance, data privacy, AI evaluation, retrieval-augmented generation, prompt and model lifecycle management, human oversight, and production AI monitoring. Experience applying AI to anomaly detection, predictive incident management, event correlation, root-cause analysis, capacity forecasting, operational knowledge, engineering productivity, and automated remediation. Relevant certifications such as Azure Solutions Architect Expert, Azure DevOps Engineer Expert, AWS Solutions Architect Professional, AWS DevOps Engineer Professional, Kubernetes, Terraform, ITIL, SRE, FinOps, or cloud security credentials. Experience with ServiceNow, Splunk, Dynatrace, AppDynamics, Grafana, Prometheus, Azure Monitor, Amazon CloudWatch, OpenTelemetry, or comparable observability and service-management platforms. Experience establishing internal developer platforms, cloud centers of excellence, reusable engineering patterns, service catalogs, golden paths, and communities of practice. Roles & Responsibilities: Cloud Strategy & Architecture: Define and execute the bank's Azure and AWS strategy, target architecture, landing zones, account/subscription model, guardrails, shared services, and migration roadmap. Design secure, resilient, scalable, and cost-effective hybrid and multi-cloud solutions across compute, storage, networking, databases, integration, identity, containers, and serverless services. Lead workload assessments and select appropriate rehost, replatform, refactor, retire, retain, or replace strategies. Establish reusable architecture patterns, golden paths, reference implementations, policy-as-code, and technical standards for regulated workloads. Conduct architecture reviews and ensure alignment with enterprise architecture, security, data, operational resilience, and regulatory requirements. Infrastructure, Operations & Resilience: Own the strategic direction for hybrid infrastructure, including network, compute, storage, virtualization, identity, backup, database platforms, middleware, end-user dependencies, and data-center integrations. Improve operational maturity across incident, problem, change, release, capacity, availability, configuration, patch, vulnerability, backup, and service-continuity management. Define service-level objectives, reliability indicators, error budgets, recovery objectives, operational readiness criteria, escalation paths, and executive service reporting. Lead major incident response, root-cause analysis, corrective actions, resilience testing, disaster-recovery exercises, and systemic risk reduction. Implement end-to-end observability, event correlation, actionable alerting, service mapping, capacity forecasting, and automated remediation. Drive simplification, standardization, technical-debt reduction, lifecycle management, platform currency, and retirement of unsupported technologies. DevOps, Platform Engineering & Automation Champion a DevOps engineering culture based on shared ownership, secure automation, continuous improvement, rapid feedback, and frequent low-risk releases. Design and govern CI/CD and GitOps practices using Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or equivalent enterprise tooling. Drive Infrastructure as Code and configuration automation using Terraform, Bicep/ARM, CloudFormation, Ansible, PowerShell, Python, or Bash. Lead container and orchestration adoption using Docker, Kubernetes, AKS, EKS, and related platform services. Embed automated testing, code quality, secrets management, vulnerability scanning, artifact controls, policy checks, segregation of duties, and deployment approvals into pipelines. Track engineering outcomes through deployment frequency, lead time for change, change failure rate, recovery time, availability, automation coverage, platform adoption, and technical-debt reduction. AI Integration & Intelligent Operations - Preferred: Identify and prioritize responsible AI, generative AI, and machine-learning opportunities across IT operations, engineering productivity, service management, knowledge management, fraud/risk support, and customer or employee experiences. Integrate AI capabilities using services such as Azure AI Foundry/Azure OpenAI, Azure Machine Learning, Amazon Bedrock, Amazon SageMaker, or comparable enterprise platforms. Support MLOps and GenAIOps practices, including model and prompt versioning, automated pipe lines, evaluation, deployment, observability, drift detection, grounding, rollback, and lifecycle controls. Apply secure and responsible AI principles covering privacy, data lineage, access control, human oversight, output validation, explainability, model risk, prompt-injection defense, and confidential-data protection. Evaluate AIOps use cases for anomaly detection, predictive incident management, alert reduction, root-cause analysis, capacity forecasting, and self-healing operations. Partner with data, cybersecurity, legal, compliance, model-risk, and business teams to move AI proofs of value into governed, production-ready services. Security, Risk, Compliance & FinOps: Partner with cybersecurity, enterprise architecture, operational risk, audit, compliance, data governance, and model-risk teams to implement controls aligned with bank policy and applicable regulatory expectations. Apply zero-trust, least-privilege, segregation-of-duties, encryption, key management, privileged-access, secure configuration, immutable logging, and continuous-monitoring principles. Maintain evidence-ready controls and support risk assessments, technology control testing, audits, remediation plans, regulatory examinations, and third-party reviews. Implement FinOps practices for budgeting, tagging, showback/chargeback, commitment management, rightsizing, waste reduction, licensing optimization, and unit-cost transparency. Manage vendor performance, statements of work, service levels, architectural compliance, delivery risks, commercial outcomes, and knowledge transfer.
10/25/2026
Full time
Job Description Job Description Skill: Technical Architect Must Have Technical/Functional Skills: 6-7 years experience across cloud, infrastructure engineering, production operations, platform engineering, SRE, DevOps, or enterprise technology transformation. At least 1-2 years in architecture, program ownership, or technology partner roles with accountability for critical platforms, budgets, vendors, regulatory commitments, and distributed teams. Strong expertise across Microsoft Azure and AWS, including enterprise landing zones, identity, networking, compute, storage, databases, containers, security, observability, resilience, governance, and cost management. Preferred DevOps engineering background with credible hands-on experience in CI/CD, GitOps, Infrastructure as Code, automation, scripting, containers, orchestration, observability, release engineering, and production support. Proven leadership of cloud adoption, data-center modernization, hybrid-cloud transformation, migration, platform engineering, resilience, automation, technical-debt reduction, or operating-model change. Deep knowledge of network and infrastructure architecture, identity and access management, backup and recovery, capacity, performance, virtualization, middleware, databases, patching, vulnerability management, and lifecycle governance. Demonstrated command of incident, problem, change, release, availability, configuration, continuity, disaster recovery, major-incident, and service-level management. Strong understanding of DevSecOps, zero trust, cloud security controls, operational resilience, audit evidence, technology risk, compliance, and third-party governance in banking or financial services. Excellent executive communication, stakeholder influence, vendor and commercial management, negotiation, financial management, facilitation, and organizational leadership skills. Ability to work onsite as required, lead across time zones, and provide executive and technical direction during critical incidents or planned changes. Significant experience in banking, financial services, payments, lending, deposits, risk, treasury, digital banking, or another highly regulated and high-availability environment. Demonstrated delivery of enterprise AI/ML, generative AI, agentic AI, AIOps, MLOps, or AI-enabled engineering and operations initiatives. Experience integrating Azure AI Foundry/Azure OpenAI, Azure Machine Learning, Amazon Bedrock, Amazon SageMaker, or comparable enterprise AI services into secure platforms and operating workflows. Knowledge of responsible AI, model governance, data privacy, AI evaluation, retrieval-augmented generation, prompt and model lifecycle management, human oversight, and production AI monitoring. Experience applying AI to anomaly detection, predictive incident management, event correlation, root-cause analysis, capacity forecasting, operational knowledge, engineering productivity, and automated remediation. Relevant certifications such as Azure Solutions Architect Expert, Azure DevOps Engineer Expert, AWS Solutions Architect Professional, AWS DevOps Engineer Professional, Kubernetes, Terraform, ITIL, SRE, FinOps, or cloud security credentials. Experience with ServiceNow, Splunk, Dynatrace, AppDynamics, Grafana, Prometheus, Azure Monitor, Amazon CloudWatch, OpenTelemetry, or comparable observability and service-management platforms. Experience establishing internal developer platforms, cloud centers of excellence, reusable engineering patterns, service catalogs, golden paths, and communities of practice. Roles & Responsibilities: Cloud Strategy & Architecture: Define and execute the bank's Azure and AWS strategy, target architecture, landing zones, account/subscription model, guardrails, shared services, and migration roadmap. Design secure, resilient, scalable, and cost-effective hybrid and multi-cloud solutions across compute, storage, networking, databases, integration, identity, containers, and serverless services. Lead workload assessments and select appropriate rehost, replatform, refactor, retire, retain, or replace strategies. Establish reusable architecture patterns, golden paths, reference implementations, policy-as-code, and technical standards for regulated workloads. Conduct architecture reviews and ensure alignment with enterprise architecture, security, data, operational resilience, and regulatory requirements. Infrastructure, Operations & Resilience: Own the strategic direction for hybrid infrastructure, including network, compute, storage, virtualization, identity, backup, database platforms, middleware, end-user dependencies, and data-center integrations. Improve operational maturity across incident, problem, change, release, capacity, availability, configuration, patch, vulnerability, backup, and service-continuity management. Define service-level objectives, reliability indicators, error budgets, recovery objectives, operational readiness criteria, escalation paths, and executive service reporting. Lead major incident response, root-cause analysis, corrective actions, resilience testing, disaster-recovery exercises, and systemic risk reduction. Implement end-to-end observability, event correlation, actionable alerting, service mapping, capacity forecasting, and automated remediation. Drive simplification, standardization, technical-debt reduction, lifecycle management, platform currency, and retirement of unsupported technologies. DevOps, Platform Engineering & Automation Champion a DevOps engineering culture based on shared ownership, secure automation, continuous improvement, rapid feedback, and frequent low-risk releases. Design and govern CI/CD and GitOps practices using Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or equivalent enterprise tooling. Drive Infrastructure as Code and configuration automation using Terraform, Bicep/ARM, CloudFormation, Ansible, PowerShell, Python, or Bash. Lead container and orchestration adoption using Docker, Kubernetes, AKS, EKS, and related platform services. Embed automated testing, code quality, secrets management, vulnerability scanning, artifact controls, policy checks, segregation of duties, and deployment approvals into pipelines. Track engineering outcomes through deployment frequency, lead time for change, change failure rate, recovery time, availability, automation coverage, platform adoption, and technical-debt reduction. AI Integration & Intelligent Operations - Preferred: Identify and prioritize responsible AI, generative AI, and machine-learning opportunities across IT operations, engineering productivity, service management, knowledge management, fraud/risk support, and customer or employee experiences. Integrate AI capabilities using services such as Azure AI Foundry/Azure OpenAI, Azure Machine Learning, Amazon Bedrock, Amazon SageMaker, or comparable enterprise platforms. Support MLOps and GenAIOps practices, including model and prompt versioning, automated pipe lines, evaluation, deployment, observability, drift detection, grounding, rollback, and lifecycle controls. Apply secure and responsible AI principles covering privacy, data lineage, access control, human oversight, output validation, explainability, model risk, prompt-injection defense, and confidential-data protection. Evaluate AIOps use cases for anomaly detection, predictive incident management, alert reduction, root-cause analysis, capacity forecasting, and self-healing operations. Partner with data, cybersecurity, legal, compliance, model-risk, and business teams to move AI proofs of value into governed, production-ready services. Security, Risk, Compliance & FinOps: Partner with cybersecurity, enterprise architecture, operational risk, audit, compliance, data governance, and model-risk teams to implement controls aligned with bank policy and applicable regulatory expectations. Apply zero-trust, least-privilege, segregation-of-duties, encryption, key management, privileged-access, secure configuration, immutable logging, and continuous-monitoring principles. Maintain evidence-ready controls and support risk assessments, technology control testing, audits, remediation plans, regulatory examinations, and third-party reviews. Implement FinOps practices for budgeting, tagging, showback/chargeback, commitment management, rightsizing, waste reduction, licensing optimization, and unit-cost transparency. Manage vendor performance, statements of work, service levels, architectural compliance, delivery risks, commercial outcomes, and knowledge transfer.
Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With 1,700+ team members, 1,500+ AI/data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by the Washington Post for six straight years and named to the Inc. 5000 Fastest Growing Private Companies 13 of the past 14 years. Credence is a welcoming home for those looking to grow and contribute to positive change. We encourage all employees to expand beyond their boundaries, dive into important world-changing Federal challenges. Credence has an immediate need for an AI Platform & DevSecOps Engineer to support federal programs hosted within AWS GovCloud. This hands-on engineering role combines DevSecOps, cloud infrastructure, platform engineering, security automation, and AI platform enablement to support secure and reliable delivery of mission-critical applications. The engineer will design, automate, secure, and operate cloud infrastructure, CI/CD pipelines, container platforms, and shared platform services while supporting the infrastructure and operational capabilities needed for AI-enabled applications and services. The ideal candidate has a strong foundation in AWS, Kubernetes, Infrastructure as Code (IaC), CI/CD, Python, security automation, and production operations, along with practical knowledge of modern AI technologies and the infrastructure patterns used to securely deploy and operate AI-enabled solutions. Core Responsibilities DevSecOps & Platform Engineering: Design, build, and maintain secure, scalable platform capabilities supporting application development and delivery within AWS GovCloud. Develop reusable infrastructure, automation, deployment patterns, and platform services that improve engineering consistency, security, and developer productivity. AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments supporting DoD and federal applications. Work with AWS services including Amazon EKS, ECS/Fargate, IAM, VPC, S3, CloudWatch, and other approved cloud-native services. DevSecOps Pipeline Development: Build, maintain, and improve CI/CD pipelines using technologies such as GitLab CI/CD, Jenkins, AWS CodePipeline, and related tooling. Automate application and infrastructure deployments while integrating testing, security scanning, compliance checks, and deployment controls into delivery workflows. Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration using technologies such as Terraform, CloudFormation, and Ansible. Develop reusable infrastructure components and apply version control, peer review, automated validation, and repeatable deployment practices. Containerization & Orchestration: Deploy and operate containerized applications using Docker/OCI containers and Kubernetes, including Amazon EKS. Support workload configuration, networking, storage, secrets, scaling, resource management, upgrades, security, and troubleshooting. Security & Compliance: Integrate security throughout the software development lifecycle and support compliance with applicable federal cybersecurity frameworks, including NIST 800-53, NIST 800-171, RMF, FedRAMP, STIGs, and Zero Trust principles. Implement and support automated security capabilities including SAST/DAST, software composition analysis, container scanning, IaC scanning, secrets detection, vulnerability management, and compliance validation. AI Platform Enablement: Support the cloud infrastructure and shared platform capabilities required to securely deploy and operate AI-enabled applications and services. Work with AI and software engineering teams to establish repeatable patterns for deployment, configuration, access control, security, monitoring, scalability, and operational support. AI/LLM Service Integration: Support the secure integration and operation of approved AI and LLM services, including platforms such as Amazon Bedrock and other enterprise AI services. Assist engineering teams with infrastructure, authentication and authorization, API connectivity, configuration, deployment automation, monitoring, and operational troubleshooting. Monitoring, Observability & Incident Response: Implement monitoring, logging, tracing, dashboards, and alerting across cloud infrastructure, Kubernetes, applications, and platform services using technologies such as AWS CloudWatch, Security Hub, GuardDuty, Splunk/ELK, Prometheus, Grafana, OpenTelemetry, or comparable solutions. Participate in incident response, root-cause analysis, vulnerability remediation, and continuous reliability improvements. Automation & Scripting: Develop automation and platform tooling using Python, Bash, PowerShell, or similar technologies to eliminate repetitive operational tasks, integrate services and APIs, enforce platform standards, and improve deployment efficiency. Production Operations: Troubleshoot complex infrastructure, application, CI/CD, Kubernetes, networking, and cloud service issues in production and production-like environments. Support operational readiness, system reliability, capacity, performance, and continuous improvement. Collaboration & Knowledge Sharing: Work closely with software engineers, AI engineers, cybersecurity teams, cloud engineers, architects, and mission stakeholders to integrate security, automation, and platform capabilities throughout the software development lifecycle. Develop technical documentation, architecture diagrams, runbooks, and reusable engineering standards. Why This Role Matters Mission Impact - Build and operate secure cloud and DevSecOps capabilities that directly support mission-critical federal applications and emerging AI-enabled solutions. Secure AI Enablement - Help bridge the gap between AI development and production operations by providing secure, automated, observable, and repeatable platform capabilities for deploying AI-enabled applications within federal environments. Modern Platform Engineering - Work across AWS GovCloud, Kubernetes, Infrastructure as Code, CI/CD, automation, cybersecurity, observability, and emerging AI technologies while helping modernize how applications are delivered and operated. Cross-Functional Engineering - Collaborate with DevSecOps, software, AI, cloud, and cybersecurity engineers to solve complex technical challenges without being limited to a single technology domain. Continuous Growth - Expand existing DevSecOps and cloud expertise into AI platform engineering while continuing to deepen skills in automation, security, cloud-native technologies, and production operations. Requirements What You Bring Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related technical field, or equivalent relevant professional experience. 5+ years of hands-on experience in DevSecOps, DevOps, cloud engineering, platform engineering, software engineering, or related technical roles. Strong hands-on experience designing, deploying, or operating workloads within AWS; AWS GovCloud experience is highly desirable. Hands-on experience with Docker/OCI containers and Kubernetes, preferably Amazon EKS. Experience developing and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, AWS CodePipeline, or comparable technologies. Strong experience with Infrastructure as Code, including Terraform, CloudFormation, or comparable technologies. Proficiency with Python and experience using Bash, PowerShell, or similar scripting languages for automation. Experience with Git-based development workflows, automated testing, artifact management, and modern software delivery practices. Experience integrating security capabilities into CI/CD and cloud environments, including vulnerability scanning, secrets management, IAM, secure configuration, and automated security controls. Experience implementing monitoring, logging, alerting, and operational troubleshooting for production or production-like environments. Working knowledge of AI/ML and generative AI technologies, including LLMs, AI APIs, model inference, and cloud infrastructure supporting AI-enabled applications. Experience supporting, deploying, integrating, or operating AI/ML or AI-enabled applications in cloud or containerized environments. Understanding of cloud security principles, identity and access management, networking, encryption, secrets management, and least-privilege access. Strong troubleshooting, technical communication, documentation, and cross-functional collaboration skills. U.S. Citizenship with eligibility for a DoD Secret clearance. Preferred Experience supporting DoD, federal civilian, or other highly regulated environments. Hands-on experience with AWS GovCloud. Knowledge of federal cybersecurity requirements and frameworks including RMF, NIST 800-53, NIST 800-171, FedRAMP, DISA STIGs, and Zero Trust. Experience with Amazon Bedrock, Amazon Sagemaker, or other enterprise AI/ML platforms and services. Familiarity with operational considerations for AI workloads, including security, observability, scalability, availability, performance, and cost. Experience implementing CI/CD or platform automation supporting AI-enabled applications and services. Familiarity with AI security and governance considerations within federal or regulated environments. Experience with Helm, Argo CD, Flux, or other Kubernetes/GitOps technologies. Experience with observability technologies such as CloudWatch, Prometheus, Grafana, OpenTelemetry, Splunk, or ELK. Experience with software supply-chain security practices such as SBOM generation, artifact signing, provenance, container hardening, and policy enforcement . click apply for full job details
10/24/2026
Full time
Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With 1,700+ team members, 1,500+ AI/data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by the Washington Post for six straight years and named to the Inc. 5000 Fastest Growing Private Companies 13 of the past 14 years. Credence is a welcoming home for those looking to grow and contribute to positive change. We encourage all employees to expand beyond their boundaries, dive into important world-changing Federal challenges. Credence has an immediate need for an AI Platform & DevSecOps Engineer to support federal programs hosted within AWS GovCloud. This hands-on engineering role combines DevSecOps, cloud infrastructure, platform engineering, security automation, and AI platform enablement to support secure and reliable delivery of mission-critical applications. The engineer will design, automate, secure, and operate cloud infrastructure, CI/CD pipelines, container platforms, and shared platform services while supporting the infrastructure and operational capabilities needed for AI-enabled applications and services. The ideal candidate has a strong foundation in AWS, Kubernetes, Infrastructure as Code (IaC), CI/CD, Python, security automation, and production operations, along with practical knowledge of modern AI technologies and the infrastructure patterns used to securely deploy and operate AI-enabled solutions. Core Responsibilities DevSecOps & Platform Engineering: Design, build, and maintain secure, scalable platform capabilities supporting application development and delivery within AWS GovCloud. Develop reusable infrastructure, automation, deployment patterns, and platform services that improve engineering consistency, security, and developer productivity. AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments supporting DoD and federal applications. Work with AWS services including Amazon EKS, ECS/Fargate, IAM, VPC, S3, CloudWatch, and other approved cloud-native services. DevSecOps Pipeline Development: Build, maintain, and improve CI/CD pipelines using technologies such as GitLab CI/CD, Jenkins, AWS CodePipeline, and related tooling. Automate application and infrastructure deployments while integrating testing, security scanning, compliance checks, and deployment controls into delivery workflows. Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration using technologies such as Terraform, CloudFormation, and Ansible. Develop reusable infrastructure components and apply version control, peer review, automated validation, and repeatable deployment practices. Containerization & Orchestration: Deploy and operate containerized applications using Docker/OCI containers and Kubernetes, including Amazon EKS. Support workload configuration, networking, storage, secrets, scaling, resource management, upgrades, security, and troubleshooting. Security & Compliance: Integrate security throughout the software development lifecycle and support compliance with applicable federal cybersecurity frameworks, including NIST 800-53, NIST 800-171, RMF, FedRAMP, STIGs, and Zero Trust principles. Implement and support automated security capabilities including SAST/DAST, software composition analysis, container scanning, IaC scanning, secrets detection, vulnerability management, and compliance validation. AI Platform Enablement: Support the cloud infrastructure and shared platform capabilities required to securely deploy and operate AI-enabled applications and services. Work with AI and software engineering teams to establish repeatable patterns for deployment, configuration, access control, security, monitoring, scalability, and operational support. AI/LLM Service Integration: Support the secure integration and operation of approved AI and LLM services, including platforms such as Amazon Bedrock and other enterprise AI services. Assist engineering teams with infrastructure, authentication and authorization, API connectivity, configuration, deployment automation, monitoring, and operational troubleshooting. Monitoring, Observability & Incident Response: Implement monitoring, logging, tracing, dashboards, and alerting across cloud infrastructure, Kubernetes, applications, and platform services using technologies such as AWS CloudWatch, Security Hub, GuardDuty, Splunk/ELK, Prometheus, Grafana, OpenTelemetry, or comparable solutions. Participate in incident response, root-cause analysis, vulnerability remediation, and continuous reliability improvements. Automation & Scripting: Develop automation and platform tooling using Python, Bash, PowerShell, or similar technologies to eliminate repetitive operational tasks, integrate services and APIs, enforce platform standards, and improve deployment efficiency. Production Operations: Troubleshoot complex infrastructure, application, CI/CD, Kubernetes, networking, and cloud service issues in production and production-like environments. Support operational readiness, system reliability, capacity, performance, and continuous improvement. Collaboration & Knowledge Sharing: Work closely with software engineers, AI engineers, cybersecurity teams, cloud engineers, architects, and mission stakeholders to integrate security, automation, and platform capabilities throughout the software development lifecycle. Develop technical documentation, architecture diagrams, runbooks, and reusable engineering standards. Why This Role Matters Mission Impact - Build and operate secure cloud and DevSecOps capabilities that directly support mission-critical federal applications and emerging AI-enabled solutions. Secure AI Enablement - Help bridge the gap between AI development and production operations by providing secure, automated, observable, and repeatable platform capabilities for deploying AI-enabled applications within federal environments. Modern Platform Engineering - Work across AWS GovCloud, Kubernetes, Infrastructure as Code, CI/CD, automation, cybersecurity, observability, and emerging AI technologies while helping modernize how applications are delivered and operated. Cross-Functional Engineering - Collaborate with DevSecOps, software, AI, cloud, and cybersecurity engineers to solve complex technical challenges without being limited to a single technology domain. Continuous Growth - Expand existing DevSecOps and cloud expertise into AI platform engineering while continuing to deepen skills in automation, security, cloud-native technologies, and production operations. Requirements What You Bring Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related technical field, or equivalent relevant professional experience. 5+ years of hands-on experience in DevSecOps, DevOps, cloud engineering, platform engineering, software engineering, or related technical roles. Strong hands-on experience designing, deploying, or operating workloads within AWS; AWS GovCloud experience is highly desirable. Hands-on experience with Docker/OCI containers and Kubernetes, preferably Amazon EKS. Experience developing and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, AWS CodePipeline, or comparable technologies. Strong experience with Infrastructure as Code, including Terraform, CloudFormation, or comparable technologies. Proficiency with Python and experience using Bash, PowerShell, or similar scripting languages for automation. Experience with Git-based development workflows, automated testing, artifact management, and modern software delivery practices. Experience integrating security capabilities into CI/CD and cloud environments, including vulnerability scanning, secrets management, IAM, secure configuration, and automated security controls. Experience implementing monitoring, logging, alerting, and operational troubleshooting for production or production-like environments. Working knowledge of AI/ML and generative AI technologies, including LLMs, AI APIs, model inference, and cloud infrastructure supporting AI-enabled applications. Experience supporting, deploying, integrating, or operating AI/ML or AI-enabled applications in cloud or containerized environments. Understanding of cloud security principles, identity and access management, networking, encryption, secrets management, and least-privilege access. Strong troubleshooting, technical communication, documentation, and cross-functional collaboration skills. U.S. Citizenship with eligibility for a DoD Secret clearance. Preferred Experience supporting DoD, federal civilian, or other highly regulated environments. Hands-on experience with AWS GovCloud. Knowledge of federal cybersecurity requirements and frameworks including RMF, NIST 800-53, NIST 800-171, FedRAMP, DISA STIGs, and Zero Trust. Experience with Amazon Bedrock, Amazon Sagemaker, or other enterprise AI/ML platforms and services. Familiarity with operational considerations for AI workloads, including security, observability, scalability, availability, performance, and cost. Experience implementing CI/CD or platform automation supporting AI-enabled applications and services. Familiarity with AI security and governance considerations within federal or regulated environments. Experience with Helm, Argo CD, Flux, or other Kubernetes/GitOps technologies. Experience with observability technologies such as CloudWatch, Prometheus, Grafana, OpenTelemetry, Splunk, or ELK. Experience with software supply-chain security practices such as SBOM generation, artifact signing, provenance, container hardening, and policy enforcement . click apply for full job details
Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.
10/20/2026
Full time
Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.
Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.
10/19/2026
Full time
Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
09/30/2026
Full time
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.