AI Platform Engineer (OCI Security)

Spatial Front, Inc; Crystal City (TX); Hybrid; USD 100,000 - 160,000; Full time

Benefits offered by this job

Onsite/Hybrid work environment

Job summary

Spatial Front, Inc. is seeking an AI Platform Engineer (OCI Security) to deploy, secure, and operate containerized AI applications in Oracle Cloud Infrastructure to support federal government systems.

You will design secure OCI networks, IAM, and IaC with Terraform, and collaborate with AI developers, cybersecurity, and DevSecOps to meet DoD requirements; onsite/hybrid in Crystal City, VA. Join a team focused on secure, scalable AI capabilities for mission-critical environments and enterprise

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 5+ years in cloud infrastructure, platform engineering, or DevSecOps.
• Hands-on OCI experience including networking, IAM, security, and monitoring.
• Experience with Terraform and IaC to provision cloud environments.

Responsibilities

• Design, deploy, secure, and maintain AI environments in OCI.
• Adapt containerized apps for secured OCI environments.
• Design secure OCI networking including VCNs, subnets, NSGs, and private endpoints.
• Implement IAM, authentication, authorization, and encryption.
• Collaborate with developers to meet DoD security requirements.
• Secure service-to-service communication between apps, AI services, and databases.
• Deploy and support containerized apps using Docker and Kubernetes (OKE).
• Configure access to LLMs, APIs, and enterprise services securely.
• Apply least-privilege, encryption, secrets management, and certificate controls.
• Develop and maintain Terraform-based infrastructure with IaC best practices.
• Integrate deployment with CI/CD, source control, and security scanning.
• Configure logging, monitoring, and dashboards; support audits.

Skills

OCI security

Cloud infrastructure

Terraform

Docker

Kubernetes

CI/CD

DevSecOps

IAM & security

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field

Tools

OCI

Docker

Kubernetes (OKE)

Terraform

OCIR

OCI CLI

OCI SDKs

Job description

Description

Spatial Front, Inc. (SFI) is seeking an AI Platform Engineer (OCI Security) to support our growing modernization team. SFI was recently awarded the 2025 USA Today National Top Places to Work award and the 2025 Washington Post Top Workplaces. The ideal candidate will perform hands-on engineering to deploy, adapt, secure, and operate containerized artificial intelligence applications within Oracle Cloud Infrastructure (OCI) supporting PeopleSoft HCM and related enterprise systems. This role requires a combination of cloud infrastructure, application security, container, networking, identity and access management, and software engineering skills. The candidate will work closely with AI developers, integration engineers, cybersecurity personnel, DevSecOps engineers, DBAs, and infrastructure teams to ensure AI applications can operate securely within hardened Federal and DoD cloud environments. This includes modifying application configuration, deployment patterns, authentication and authorization approaches, integrations, and supporting infrastructure as needed to meet security and operational requirements. As a valued member of the SFI team, you will help establish secure and scalable AI capabilities for mission-critical Federal Government systems.

Location

Crystal City, VA - On-Site/Hybrid

Responsibilities

• Design, deploy, configure, secure, and maintain AI application environments within Oracle Cloud Infrastructure (OCI).
• Adapt existing containerized applications and supporting services for deployment within secured and hardened OCI environments.
• Design and implement secure OCI networking including Virtual Cloud Networks (VCNs), private subnets, routing, Network Security Groups (NSGs), private endpoints, DNS, and connectivity to enterprise services and data sources.
• Implement and maintain identity, authentication, and authorization capabilities using OCI IAM and approved enterprise identity-management technologies.
• Work with application developers to modify authentication, authorization, session management, service identities, and application configuration as required to meet Federal and DoD security requirements.
• Design secure service-to-service communication between web applications, AI services, large language models, APIs, databases, integration services, and other enterprise resources.
• Deploy and support containerized applications using Docker, Kubernetes/Oracle Kubernetes Engine (OKE), OCI Container Registry (OCIR), or comparable container technologies.
• Configure and secure AI application access to approved LLM services, APIs, enterprise applications, databases, and other supporting services.
• Implement secure patterns for AI tool and data integrations, including controlled access to enterprise services and Model Context Protocol (MCP)-based connections where applicable.
• Apply least-privilege access, network segmentation, encryption, secrets management, certificate management, and other security controls across AI application environments.
• Configure and manage OCI Vault, keys, certificates, secrets, service credentials, and other sensitive application configuration.
• Develop and maintain Infrastructure as Code (IaC) using Terraform or comparable technologies to create repeatable, controlled, and auditable cloud environments.
• Integrate platform deployment with source control, CI/CD pipelines, automated builds, security scanning, artifact management, configuration management, and release processes.
• Configure application and infrastructure logging, monitoring, audit trails, metrics, alerts, and operational dashboards.
• Partner with cybersecurity teams to implement security controls, hardening requirements, vulnerability remediation, access restrictions, audit requirements, and other compliance measures.
• Troubleshoot issues across application configuration, OCI networking, IAM, containers, certificates, APIs, service connectivity, authentication, authorization, and cloud infrastructure.
• Participate in application and architecture reviews to identify security, deployment, networking, authentication, and integration changes needed for successful cloud implementation.
• Develop reusable platform standards, security patterns, Terraform modules, deployment templates, technical documentation, and operational procedures.
• Participate in Agile/SAFe activities including PI Planning, backlog refinement, technical reviews, demonstrations, testing, release readiness, and production support.
• Other duties as assigned.

Requirements

• Must be a U.S. Citizen with an active Secret security clearance required
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; equivalent relevant experience may be considered.
• 5+ years of hands-on cloud infrastructure, platform engineering, DevSecOps, cloud security, application infrastructure, or related engineering experience in complex enterprise environments.
• Hands-on experience with Oracle Cloud Infrastructure (OCI), including networking, compute, IAM, storage, security, logging, monitoring, and cloud-native application services.
• Strong knowledge of cloud networking including VCNs/VPCs, subnets, routing, DNS, security groups, firewalls, private endpoints, service connectivity, and hybrid connectivity.
• Strong knowledge of identity and access management, authentication, authorization, least-privilege access, service identities, secrets management, certificates, and encryption.
• Experience deploying and supporting containerized applications using Docker and Kubernetes/OKE or comparable technologies.
• Experience working with web application architectures and understanding how application authentication, authorization, APIs, services, and infrastructure interact.
• Experience modifying application configuration, deployment architecture, or supporting code to meet cloud security, networking, identity, or operational requirements.
• Experience using Terraform or another Infrastructure as Code technology to provision and manage cloud infrastructure.
• Experience with CI/CD, source control, automated builds, vulnerability scanning, logging, monitoring, and modern DevSecOps practices.
• Strong troubleshooting skills across application, cloud, container, networking, IAM, and integration layers.

Desired Skills

• Experience deploying or securing artificial intelligence, generative AI, machine learning, or data-intensive applications in OCI or another enterprise cloud environment.
• Experience with OCI Generative AI, OCI Generative AI Agents, OCI Data Science, or related Oracle AI services.
• Experience with OCI IAM policies, dynamic groups, resource principals, identity domains, OAuth/OIDC, API authentication, and service-to-service authorization.
• Experience with OCI Vault, Certificates, Cloud Guard, Security Zones, Logging, Monitoring, private endpoints, and related OCI security services.
• Experience with Oracle Kubernetes Engine (OKE), OCI Container Registry (OCIR), OCI Functions, and API Gateway.
• Experience integrating containerized applications with large language models, APIs, databases, enterprise services, or AI tool frameworks.
• Familiarity with Model Context Protocol (MCP), AI agent tool integration, or comparable approaches for securely connecting AI applications to enterprise systems and data sources.
• Experience securing web applications that require changes to commercial or enterprise authentication and authorization patterns to operate within hardened environments.
• Knowledge of AI-specific security concerns including prompt injection, excessive permissions, sensitive-data exposure, insecure tool access, and service-to-service authorization.
• Working knowledge of Python, Bash, PowerShell, OCI CLI, OCI SDKs, or comparable scripting and automation technologies.
• Experience working in Agile or SAFe environments and using Azure DevOps (ADO) or a similar lifecycle-management tool.
• Experience supporting secured Federal or DoD enterprise systems is preferred.
• OCI Architect, OCI Security, Kubernetes, Terraform, cloud security, or related certification is a plus.

Additional Information

• Clearance: Must be a U.S. Citizen with an active Secret security clearance.
• Work Environment: Onsite/Hybrid as required by the contract.
• This is a full-time, W2 position.
• No agencies, third parties, or Corp-to-Corp submissions.
• Spatial Front Inc. is an Equal Opportunity Employer - all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
• SFI participates in E-Verify.

Salary Description

$100,000-$160,000