Note: The job is a remote job and is open to candidates in USA. Sphinx Defense is a company focused on building software to address complex national security challenges in Space. They are seeking an Infrastructure Security Engineer to secure and scale their cloud-native infrastructure, integrating security throughout the software development lifecycle and collaborating with engineering teams to maintain secure applications and infrastructure.
Responsibilities
- Configure, integrate, and maintain security platforms across AWS cloud environments and Kubernetes clusters
- Build security directly into CI/CD pipelines and software delivery workflows
- Own the configuration and administration of cloud security tools including identity management, monitoring, vulnerability scanning, policy enforcement, and application security
- Configure and maintain SSO integrations and security configurations across engineering platforms
- Manage the security posture of multiple AWS accounts and AWS Organizations
- Develop and maintain Infrastructure as Code and configuration as code using Terraform, Helm, Flux, ArgoCD, or similar technologies
- Configure monitoring, alerting, and logging pipelines that provide visibility into production environments
- Continuously evaluate, implement, and optimize security tooling to improve automation, scalability, and developer experience
Skills
- 5+ years of experience in DevSecOps, Cloud Security, DevOps, Site Reliability Engineering, or a related field
- Extensive experience configuring and securing AWS cloud environments across multiple accounts or AWS Organizations
- Hands-on experience administering production Kubernetes environments
- Experience configuring and integrating security tooling into GitLab or similar CI/CD platforms
- Experience implementing Infrastructure as Code using Terraform and managing Kubernetes deployments with Helm, Flux, or ArgoCD
- Enjoy designing secure systems rather than simply operating existing security tools
- Thrive in collaborative environments and enjoy working directly with software engineers to build secure platforms
- Experience configuring and administering AWS security services across multiple accounts
- Experience configuring and maintaining Okta and enterprise identity management
- Experience administering GitLab, including SSO and CI/CD security integrations
- Experience implementing and configuring Kubernetes security solutions such as Kyverno, NeuVector, Falco, or Trivy
- Experience configuring Web Application Firewalls (WAFs) and cloud-native security controls
- Experience configuring monitoring, alerting, and centralized logging platforms such as Sumo Logic
- Experience managing software repositories and artifact management platforms such as Nexus
- Experience integrating security tooling into software development workflows instead of managing security as a separate function
- Strong troubleshooting, communication, and cross-functional collaboration skills
- Experience supporting DoD, national security, or other highly regulated environments
- Experience implementing security policies as code and policy enforcement frameworks
- Familiarity with supply chain security and software composition analysis
- Experience with incident response and cloud security investigations
- Familiarity with SonarQube or similar code quality/security scanning tools
- Active Secret clearance with the ability to obtain TS/SCI (or current TS/SCI)
Benefits
- Quarterly bonus structure
- Equity ownership in the company
- 100% Premium coverage for medical, dental, and vision for you and dependants
- Health Savings Accounts
- Life Insurance
- 401k employer contribution plan
- Generous paid time off policy
- Flexible work/remote work policy
- Profit sharing
- Employer 401(k) contribution
- 100% employer covered medical, dental, and vision insurance for you and your dependents
Company Overview