DevOps Engineer

Arcessio; San Francisco (CA); On-site; USD 140,000 - 170,000; Full time

Job summary

Arcessio is seeking a security-focused professional to own our infrastructure and deployment pipeline, with emphasis on Azure deployments and the protection of sensitive data. You will drive the compliance program across NIST controls, CMMC/SPRS, and SOC 2 Type II, partnering with leadership to turn controls into lasting processes.

The role is remote-friendly and open to candidates across the United States, with occasional in-person sync when needed.

Qualifications

• Eligible to obtain and hold a U.S. security clearance.
• Strong DevOps / infrastructure background with CI/CD, cloud and IaC.
• Security-first mindset for infrastructure hardening and compliance.
• Ability to implement a defined set of controls from a documented framework.

Responsibilities

• Own our infrastructure and deployment pipeline, including Azure deployments.
• Own security posture for data transmission, storage, and access control.
• Drive compliance program for NIST controls, CMMC/SPRS, and SOC 2 Type II.
• Collaborate with leadership and IT to convert controls backlog into ongoing program.
• Relieve product/ML engineers of security concerns to accelerate shipping.

Skills

DevOps / infrastructure

CI/CD

Cloud computing (Azure)

Containerized deployments

Infrastructure as code

Security-focused mindset

Job description

As we take on more government and defense work, the security and integrity of our infrastructure becomes its own discipline — and we want someone who owns it rather than spreading it thin across the product engineers. The "sec" in this role is the point: you'll be responsible for how sensitive data moves, where it lives, and who can see it, so the rest of the team can focus on building.

This is a remote-friendly role open to candidates across the U.S., with occasional in-person sync when the work calls for it.

What you’ll do

• Own our infrastructure and deployment pipeline — including deploying into containerized, customer-provided environments and on Azure.
• Own the security posture for controlled and sensitive data: data transmission, storage, access control, key management, and who can and can't see what.
• Drive our compliance program from identification into implementation — NIST controls (we're already tracking these in ControlMap), CMMC / SPRS, and recurring assessments like SOC 2 Type II.
• Partner with leadership and IT on compliance requirements and timelines, and turn a backlog of controls into an ongoing, sustainable program that doesn't grind product velocity to a halt.
• Take security concerns off the plates of full-stack and ML engineers so they can ship.

Must-haves

• Eligible to obtain and hold a U.S. security clearance — an active clearance is not required today, but you must be able to qualify for one.
• Strong DevOps / infrastructure background — CI/CD, cloud (Azure especially), containerized deployments, and infrastructure-as-code.
• A security-focused mindset for infrastructure hardening and compliance — you think about access, isolation, and blast radius by default.
• Ability to implement a defined set of controls in our stack — turning a documented framework into working configuration, policy, and automation.

Nice to have

• Prior government or defense experience — ideally in defense contracting — and comfort operating inside those environments.
• Hands on exposure to NIST 800-171, CMMC, or navigating an ATO Process