Jobs / MOMENTUS Space
Senior DevSecOps Engineer
MOMENTUS Space · Austin, TX, United States
Austin, TX, United StatesFull timeExp: 7+ yrs190,000-225,000 USD/yearlyRemote
Remuneration
Base salary plus bonus, equity, medical, dental, and vision insurance, 401(k), disability and life insurance, flexible PTO, paid holidays, sick time, and paid parental leave
Location
Austin, TX, United States
Visa sponsorship
Not specified
Job summary
Operate and improve AWS, Kubernetes, and CI infrastructure while building a multi-account AWS GovCloud organization as code and migrating workloads into it. The role includes segmented cloud networking, secure software supply chain operations, and automated guardrails and evidence for NIST SP 800-171 and CMMC controls. It also supports governed access to AI models, coding agents, and MCP servers.
Benefits
Medical, dental, and vision insurance401(k) retirement planShort- and long-term disability insuranceLife insuranceFlexible paid time off11 paid holidaysSick timePaid parental leaveBonus and equity
Qualifications
- Production experience with Terraform or OpenTofu, including reusable modules, state management, imports, refactors, and plan review.
- Proficiency in Python or Go and shell scripting.
- Clear, concise technical writing.
- Hands-on AWS multi-account experience, including IAM policy evaluation, Organizations, service control policies, and identity federation.
- Cloud networking experience with VPCs, Transit Gateway routing and segmentation, firewalls, DNS, PrivateLink, and site-to-site VPN with BGP.
- CI/CD and container supply chain experience, including image builds, signing and verification, secrets management, and vulnerability scanning.
- Experience managing access to a hosted model service or LLM gateway.
- Experience with AI coding agents and awareness of risks including prompt injection, excessive agency, secret exposure, and untrusted tool servers.
- Seven or more years in infrastructure, platform, security, or site reliability engineering, including three or more years building on AWS with infrastructure as code.
- A bachelor's degree in computer science, computer engineering, or a related field, or equivalent practical experience.
- Desired: AWS GovCloud or regulated-environment experience, including FedRAMP, NIST SP 800-171, CMMC, or ITAR.
- Desired: Greenfield landing-zone or account-vending experience, including AWS Network Firewall and IPAM.
- Desired: Private PKI, HSM-backed key management, and mTLS experience.
- Desired: Service mesh and GitOps experience, such as Istio, Argo CD, or Flux.
- Desired: LLM gateway operations, per-user cost attribution, and model invocation logging.
- Desired: Experience building or securing MCP servers, agent workflows, or shared AI workflows adopted by other engineers.
- Desired: Production Kubernetes experience, preferably EKS.
- Desired: Aerospace, defense, export-controlled, DoD, or other U.S. government program experience.
- Desired: Ability to obtain and maintain a U.S. government security clearance.
Responsibilities
- Operate and improve AWS environments, Kubernetes clusters, and CI platforms; migrate workloads into the new organization.
- Build a multi-account AWS GovCloud organization using infrastructure as code.
- Build and operate segmented networks using Transit Gateway, firewalls, IPAM, PrivateLink, and facility VPNs.
- Deliver secure environment ingress and egress.
- Manage the software supply chain, including CI/CD runner fleets, FIPS-validated images, signed artifacts, replicated registries, and private PKI.
- Translate NIST SP 800-171 and CMMC controls into automated guardrails and evidence; triage and resolve security findings.
- Write design notes, review merge requests, maintain runbooks, and improve shared AI-assisted workflows.
- Deploy and support AI developer tools with managed settings; review, harden, and operate MCP servers and agent runtimes.
Skills
Argo CDAWSAzureBashEKSFluxGoIAMIstioKubernetesOpenTofuPythonTerraformGCPGitGitHub ActionsGitLab CIOpenTelemetrySecrets ManagerSnykTrivyVault
Degrees
BS in Computer Science, Computer Engineering, or a related field, or equivalent
Work schedule
Full-time
Industry
AerospaceDefenseSpace
Security clearance
Ability to hold and maintain a U.S. government security clearance
Relocation
No