Cloud/DevOps Engineer

Tagup; Boston (MA); On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

Equity via ESOP

Health insurance

401(k) plan

Job summary

Tagup is hiring a Cloud/DevOps Engineer to bring an SRE mindset to our platform. You will automate infrastructure with Terraform, operate Kubernetes clusters, and optimize PostgreSQL-backed services for performance and uptime.

You’ll contribute to secure CI/CD, enforce least-privilege defaults, and uphold compliance across multi-region environments. You will collaborate with engineers and data scientists to deliver reliable, auditable systems for defense logistics, with equity, health benefits,

Qualifications

• Experience managing Kubernetes clusters in production environments.
• Strong Terraform and IaC experience to automate infrastructure.
• Proficient in Python and PostgreSQL for service tooling and data handling.
• Knowledge of security and compliance frameworks (SOC 2, NIST SP 800-171, CMMC).
• Experience operating in FedRAMP environments (IL4/IL5).

Responsibilities

• Build and secure infrastructure across AWS and Kubernetes platforms.
• Implement IaC using Terraform and maintain modules for reliability.
• Maintain secure CI/CD pipelines and auditable configurations.
• Support compliance efforts and evidence gathering for regulatory standards.
• Collaborate with platform and security teams to enforce least privilege and monitoring.

Skills

Kubernetes

Terraform

Python

PostgreSQL

Security compliance

FedRAMP IL4/IL5

Job description

Tagup is a defense technology company founded at MIT that is redefining logistics superiority with next-generation AI. We’re growing rapidly and are looking for change-makers passionate about delivering innovative technologies to solve the most challenging problems in the world’s highest stakes environments. This is an exciting opportunity to engage in meaningful work that strengthens national security and contributes to the success of U.S. and allied forces. Join us in shaping the future of defense logistics for a safer tomorrow. At Tagup, curiosity isn’t a perk—it’s the job. If you like seeing the whole system, sharing what you know, and learning from sharp teammates, you’ll fit right in. We’re engineers and data scientists on a mission to make the machines and processes that power the world safer, more reliable, and more efficient. Our AI directly controls large-scale industrial equipment and logistics systems, delivering best-in-class performance for our customers.

We’re hiring a Cloud/DevOps Engineer to bring an SRE mindset to our platform: automate with IaC, orchestrate with Kubernetes, and tune PostgreSQL-backed services for performance and uptime. You’ll build secure, auditable CI/CD, enforce least-privilege by default, and uphold compliance across distributed, multi-region environments.

What You'll Do

• Help build and secure infrastructure across AWS, Kubernetes, and other cloud-native services under the guidance of senior engineers
• Support ATO efforts and day-to-day compliance work (e.g., IL4/IL5, CMMC, NIST SP 800-171), preparing evidence and maintaining controls
• Implement Infrastructure as Code with Terraform and related tooling; maintain modules and improve reliability through reviews and testing
• Participate in vulnerability management—triage findings, assist with remediation, and contribute to incident response runbooks and postmortems
• Collaborate with application teams to weave security into CI/CD and the development lifecycle (secrets management, least privilege, policy checks)
• Keep current on security and DevOps best practices, proposing small, iterative improvements to strengthen our defenses and operations

What We're Looking For

• Fluency in Kubernetes and Terraform (EKS in production)
• Hands-on experience with Istio and Gateway API
• Strong background in Python and PostgreSQL
• Familiarity with compliance frameworks—SOC 2, CMMC (Level 1 & 2), NIST SP 800-171, etc
• Proven track record identifying and mitigating CVEs
• Experience operating in FedRAMP environments (e.g., IL4, IL5)
• Bonus Points Experience mitigating CVEs in production systems
• Background operating in FedRAMP environments (e.g., IL4, IL5)

Salary

The estimated salary range for this role is $160,000–$180,000 annually. We align compensation with your experience and impact, and we aim to attract and retain top engineering talent. In addition to salary, every team member receives meaningful equity through our Employee Stock Option Plan. We also offer comprehensive health insurance, access to a 401(k) plan, and a team-oriented culture with regular company outings.

Why Join Tagup?

Join a mission-first team where your infrastructure work makes industrial systems safer, more reliable, and more efficient—today. At Tagup, our AI controls large-scale equipment and logistics, so you’ll design, automate, and run cloud platforms with IaC, Kubernetes, and PostgreSQL; ship secure, auditable CI/CD; lock down least-privilege by default; and keep compliance tight across multi-region environments. You’ll work shoulder-to-shoulder with platform engineers and data scientists, operate with an SRE mindset, and watch decisions move from plan to production fast—while earning competitive pay, meaningful equity, and building technology that matters.

Tagup is an equal opportunity employer and individuals seeking employment with us are considered without regard to race, color, religion, national origin, age, sex, marital status, physical or mental disability, veteran status, gender identity, sexual orientation, or any other characteristic protected by law.

Citizenship: Due to the nature of our work with the U.S. Department of Defense, applicants must be authorized to work for any employer in the U.S. We are unable to sponsor visas at this time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.