InfraSec Engineer

ASI; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Air Space Intelligence (ASI) is hiring a DevSecOps Engineer to design, build, and manage infrastructure to meet FedRAMP and DoD compliance. You’ll orchestrate cloud environments, deploy secure pipelines, and enforce security best practices across the stack.

Join a mission-driven team securing critical federal systems, with focus on automation, resilience, and secure coding. Candidates should have hands-on cloud security experience and U.S. security clearance eligibility.

Qualifications

• Proven experience implementing FedRAMP or DoD security controls.
• Strong understanding of security frameworks, including SOC 2, NIST CSF, and FedRAMP.
• Hands-on experience securing cloud environments, particularly AWS GovCloud, Azure GCCH, or Platform One.
• Demonstrated coding skills in Python or Rust.
• Demonstrated skills in Infrastructure as code (Terragrunt/Terraform).
• Experience with Helm/Kubernetes including managing AWS EKS.
• Familiarity with managing security automation tools, vulnerability scanning, and penetration testing.
• Understanding of secure coding best practices, including OWASP Top 10 and SANS Top 25.
• Experience implementing Zero Trust principles, least privilege access, and cloud security best practices.
• Recent or current U.S. Security Clearance or eligibility to obtain a U.S. Security clearance.

Responsibilities

• Design, build, and manage the infrastructure to achieve FedRAMP and DoD compliance.
• Orchestrate cloud environments and deploy secure software pipelines.
• Enforce security best practices across development and operations.
• Ensure ASI’s systems are resilient and compliant with federal security requirements.
• Collaborate with security, software, and cloud teams to implement controls.

Skills

FedRAMP/DoD controls

Security frameworks (SOC 2, NIST CSF)

Cloud security (AWS GovCloud, Azure GC

Python

Rust

Infrastructure as Code (Terragrunt/Ter

Kubernetes (Helm, AWS EKS)

Security automation & vulnerability/pe

Secure coding (OWASP Top 10, SANS Top

Zero Trust & least privilege

US Security Clearance eligibility

Tools

Terraform

Terragrunt

Kubernetes

AWS GovCloud

Platform One

Job description

About Air Space Intelligence

ASI's mission-critical technology powers decision-making across aviation, defense, energy, and other critical infrastructure domains. Backed by top-tier investors including Andreessen Horowitz, Spark Capital, and Renegade Partners, ASI delivers operational decision superiority—compressing days of analysis into seconds of action. ASI is leading the way and pushing the boundaries of what’s possible.

ASI's mission-critical technology powers decision-making across aviation, defense, energy, and other critical infrastructure domains. Backed by top-tier investors including Andreessen Horowitz, Spark Capital, and Renegade Partners, ASI delivers operational decision superiority—compressing days of analysis into seconds of action. ASI is leading the way and pushing the boundaries of what’s possible.

What You Will Do

Air Space Intelligence is building mission-critical, secure infrastructure for defense. We are seeking a DevSecOps Engineer to design, build, and manage the infrastructure required to achieve FedRAMP and DoD compliance. This role is essential in orchestrating cloud environments, deploying secure software pipelines, and enforcing security best practices. You will work at the intersection of security, automation, and cloud infrastructure, ensuring ASI’s systems are both resilient and compliant with DoD and federal cloud security requirements.

What We Value

• Proven experience implementing FedRAMP or DoD security controls.
• Strong understanding of security frameworks, including SOC 2, NIST CSF, and FedRAMP.
• Hands-on experience securing cloud environments, particularly AWS GovCloud, Azure GCCH, or Platform One.
• Demonstrated coding skills in Python/Rust.
• Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
• Experience with Helm/Kubernetes including managing AWS EKS.
• Familiarity with managing security automation tools, vulnerability scanning, and penetration testing.
• Understanding of secure coding best practices, including OWASP Top 10 and SANS Top 25.
• Experience implementing Zero Trust principles, least privilege access, and cloud security best practices.
• Recent or current U.S. Security Clearance or eligibility to obtain a U.S. Security clearance.

How We Hire

We look at the interview process not as a screening or test, but rather as an opportunity to simulate what it would look like working together. We build the interview process around you.

ASI works with export controlled technology and restricted U.S. Government data, including on contracts mandating U.S. immigration status and location restrictions for performing personnel. Employment offers are contingent on ability to timely obtain all required authorizations for contemplated job duties.