Cloud, Deployment & DevSecOps Engineer

Nominal

United States

Remote

USD 140,000 - 180,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

100% health insurance coverage

Unlimited PTO and sick leave

Free lunch, snacks, and coffee

Professional Development Stipend

In‑office hardware lab with project $‑

Annual company retreat

Parental leave (12 weeks)

Fertility and family planning ($15,000

Wellness stipend ($100/month)

Job summary

Nominal seeks a Cloud, Deployments & DevSecOps Engineer to secure the platform that feeds defense and hardware teams. You will secure cloud deployments across AWS, GovCloud, and on‑prem environments, build guardrails, and automate security signals integrated with engineering workflows.

You will shape security controls, implement device identity and network protections, and drive continuous compliance through IaC and incident response practices in a fast‑moving hardware software environment.

Qualifications

Deep AWS security experience with hands-on cloud engineering.
Strong Kubernetes experience, including securing clusters and workloads.
Experience implementing cloud identity, access and network security controls.
Experience building or operating cloud logging, monitoring and threat detection.
Experience with infrastructure as code and security automation.
Experience working with engineering teams to implement and maintain production security controls.

Responsibilities

Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
Develop secure cloud architectures and define service boundaries.
Harden Kubernetes and EKS environments, including workload identity and network policies.
Build centralized logging, monitoring, dashboards and detection capabilities.
Develop cloud detection and response workflows and support incident response.
Implement infrastructure-as-code guardrails and policy automation.
Improve deployment pipeline security through artifact signing and verification.
Develop container security standards including base images and compliance.
Collaborate with engineering to integrate security telemetry from customer environments.
Support FedRAMP and other federal deployment requirements with controls and evidence.

Skills

AWS security

Kubernetes security

Cloud security controls

Logging & monitoring

Infrastructure as code

Security automation

DevSecOps collaboration

Tools

CKS certification

Job description

About Nominal

Engineers today are building some of the most ambitious machines humanity has ever seen. They should have AI that’s purpose-built for them.

Nominal is building the Hardware Intelligence Platform that gives engineers increased visibility into complex physical systems, helps them make better decisions, and ultimately gets their products into the real world faster. It brings together the systems, data, intelligence, and applications hardware engineering requires to meet the AI moment. Hardware engineering teams use Nominal to simulate, test, manufacture, and operate the physical systems that keep the world moving, from spacecraft and autonomous vehicles to next‑generation energy systems and robotics.

Our customers span aerospace, defense, manufacturing, transportation, energy, and robotics. They include Anduril, Shield AI, Wisk Aero, Pratt Miller Motorsports, Antares, and Shinkei Systems, amongst others, alongside programs within the U.S. Air Force and Navy. Our team draws from SpaceX, Palantir, Anduril, Applied Intuition, Tesla, and other leading companies, united by a common mission: giving hardware engineers the tools to build the future with speed, safety, and confidence. We're a fast-moving team that owns problems end-to-end, works across disciplines, and thrives at the intersection of hardware and software.

Some of the world’s leading technology investors, including Sequoia, Lightspeed, Founders Fund, General Catalyst, Lux Capital, and Insight Partners, are backing Nominal’s ambition to change how machines are built and operated. We’re looking for engineers who want to take on hard problems and help make a new generation of world-changing hardware possible.

About the role

As a Cloud, Deployments & DevSecOps Engineer, you’ll join the team that secures the platform hardware and defense teams rely on to ingest, analyze, and act on their test and operations data. We deploy across AWS, AWS GovCloud, customer-hosted clouds, and on-premises environments, and you’ll own the security controls, detection, and compliance evidence that make those deployments trustworthy for customers, including those with federal requirements. You’ll work directly with engineering to build these controls into how we deploy and operate.

This role is ideal for someone who pairs deep AWS security experience with hands-on cloud engineering, and who would rather build guardrails and automation that engineers adopt than review from the sidelines. You’ll shape which security problems we take on and in what order, with little oversight.

What you’ll do

Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.
Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation.
Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls.
Develop container and base-image security standards, including images that meet applicable FIPS requirements.
Partner with engineering to obtain and integrate available security telemetry from customer environments.
Support FedRAMP and other federal deployment requirements through technical controls and evidence.

We’re looking for someone with

Deep AWS security experience combined with hands-on cloud engineering and deployment experience.
Strong Kubernetes experience, including securing clusters and workloads.
Experience implementing cloud identity, access and network security controls.
Experience building or operating cloud logging, monitoring and threat detection.
Experience with infrastructure as code and security automation.
Experience working directly with engineering teams to implement and maintain production security controls.

Skills that supercharge us

Certified Kubernetes Security Specialist (CKS).
Experience with Azure, GCP, Oracle Cloud or self-hosted deployments.
Experience supporting FedRAMP, AWS GovCloud or DoD IL4/IL5 environments.
Experience with secure CI/CD, artifact signing, container security or software supply chain controls.
Experience handling cloud security incidents or complex deployment failures.

Benefits/Perks