Senior DevSecOps Engineer
Summary
Senior IC who owns the infrastructure behind Dexter, a manufacturing software platform: architecting cloud and customer-managed (including air-gapped) environments, building IaC and CI/CD pipelines, running compute for simulation and AI workloads, and handling security, observability, and incident response. Stack: Python plus Go/Rust/TypeScript, AWS/Azure, Kubernetes, Helm.
We are hiring a Senior DevSecOps Engineer to own the infrastructure that makes Dexter secure, reliable, and repeatable to deploy. You will lead the architecture of our cloud and self-hosted environments, automate the software delivery lifecycle, and build the compute platform behind simulation, scheduling, and AI workloads.
About the Role
We are hiring a Senior DevSecOps Engineer to own the infrastructure that makes Dexter secure, reliable, and repeatable to deploy. You will lead the architecture of our cloud and self-hosted environments, automate the software delivery lifecycle, and build the compute platform behind simulation, scheduling, and AI workloads.
This is a senior individual contributor role with broad technical ownership. You will define infrastructure standards, lead complex deployment decisions, and work directly with customer IT and security teams. Your work will shape how engineers build, release, monitor, and operate Dexter as customer adoption grows.
Customer-managed deployment is a core product capability. You will turn requirements such as private networking, enterprise identity, restricted egress, and offline upgrades into tested deployment patterns and reusable automation.
In this role, you will
- Architect and operate production infrastructure across cloud and customer-managed environments, with clear standards for isolation, availability, capacity, and cost.
- Build reusable infrastructure as code and CI/CD pipelines for provisioning, configuration, upgrades, rollback, and release validation across connected and disconnected environments.
- Design the execution infrastructure for simulation, optimization, and AI workloads, including job queues, resource scheduling, retries, and long-running compute.
- Define service-level objectives and own observability, incident response, backup and recovery, database migrations, and operational documentation.
- Partner with customer IT, security, and deployment teams to implement least-privilege access, network segmentation, encryption, secrets management, audit logging, and vulnerability remediation; translate recurring deployment issues into product improvements.
What You Bring
- 7+ years of cloud, infrastructure, platform, or backend engineering experience, including technical leadership of production systems.
- Strong software engineering skills in Python and at least one additional language such as Go, Rust, or TypeScript, with experience building infrastructure automation.
- Hands-on experience deploying and operating software in highly regulated or security-sensitive environments, including customer-managed infrastructure with strict access controls, network isolation, or restricted external connectivity.
- Deep experience with AWS or Azure, Kubernetes, Helm, and Infrastructure as Code; ability to troubleshoot across application, database, and network layers.
- A track record of owning production reliability and incident response, operating isolated customer or tenant environments, and leading architecture reviews with engineering and security stakeholders.
What Will Set You Apart
- Experience supporting ITAR-controlled technical data or CUI workloads; implementing controls aligned with NIST SP 800-171; or deploying into GovCloud or DoD IL4/IL5 environments.
- Experience with air-gapped software delivery, software supply chain security, policy as code frameworks, or compute-intensive containerized workloads.
We encourage candidates with strong relevant experience to apply, including those whose backgrounds do not align with every qualification. Some customer assignments require U.S. person status under ITAR.
Help build the software that advances American manufacturing.
