Principal Software Engineer, InfraEng Platform Team

Anduril-1; Costa Mesa (CA); On-site; USD 253,000 - 336,000; Full time

Job summary

Anduril Industries seeks a Principal Software Engineer for the InfraEng Platform Team in the US, leading the hub and APIs that expose infrastructure as self-service across cloud and on‑prem environments.

You will set architecture, standards, and delivery practices, writing core services in Go, Python, or Java while mentoring others and owning production reliability.

Qualifications

• 10+ years of software engineering experience with platform or infrastructure scale.
• Proficiency in Go, Python, or Java; choose the best tool for the job.
• Deep understanding of control plane vs data plane design and reconciliation.
• Hands-on AWS or equivalent cloud experience across compute, networking, IAM, storage, and Kubernetes.
• Strong grounding in containers and immutable infrastructure patterns.

Responsibilities

• Evaluate the existing codebase and set technical direction.
• Design and build the hub's core APIs, services, and data models for self-service infra.
• Define control plane vs data plane boundaries and document rationale.
• Establish contracts for partner teams to plug into the hub.
• Build a single identity and authorization layer with audit trails.
• Ship backend services and the console, CLI, and API surfaces.
• Turn infra requests into bounded self-service actions.
• Establish CI/CD pipelines and deployment safety controls.
• Own production including observability, on-call, and postmortems.
• Mentor new engineers joining the team.

Skills

Go/Python/Java proficiency

Cloud experience (AWS)

RBAC/ABAC concepts

CI/CD pipelines

Ownership & on-call

Tools

Docker

Kubernetes

Terraform

OpenTofu

Azure

Job description

Principal Software Engineer, InfraEng Platform Team

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

ABOUT THE TEAM

Infrastructure Engineering builds and runs the foundations Anduril operates on. That includes wired and wireless connectivity, our private backbone, private and public cloud, and the systems that run on them.
The InfraEng Platform Team owns the central hub for all of it: the console, CLI, and API the rest of the company uses to consume infrastructure. We do not build every capability ourselves. Partner teams own their domains, and we help them expose those capabilities through the hub.
We define and champion the shared patterns: one identity model, one authorization model built on RBAC and ABAC, one audit trail, and one set of ergonomics. Partner services meet the contract for their space, and the platform makes that contract easy to meet. The goal is to replace tickets with safe, bounded self-service across every team and provider.

ABOUT THE ROLE

You will be the first software engineer on the InfraEng Platform Team and one of the first in Infrastructure Engineering. A small codebase exists today. Part of your early work is deciding whether it is the right foundation to extend or whether to replace it.
From there, you will set the architecture, engineering standards, and delivery practices the team builds on. This is a hands‑on role. You will go deep into networking, systems, and cloud when the problem requires it, and your fingerprints will be on everything this team ships.

WHAT YOU’LL DO

• Evaluate the existing codebase and set technical direction: keep, extend, or rebuild.
• Design and build the hub’s core: the APIs, services, and data models that expose infrastructure as self-service across AWS, Azure, and on‑prem.
• Decide where control planes and data planes separate, where they nest, and where they should not. Document the reasoning so others can extend it.
• Define the contracts and patterns partner teams use to plug into the hub, then help them adopt those patterns. Partners own their domains; you own the hub and the patterns.
• Build a single identity and authorization layer (RBAC and ABAC) with a complete audit trail for every action the platform exposes.
• Ship backend services and the console, CLI, and API surfaces users touch. Most of this will be in Go, Python, or Java, but you will pick the right tool for the job.
• Turn common infrastructure requests into bounded self‑service actions that take tickets off the critical path.
• Establish the CI/CD pipelines, source control practices, and deployment safety controls for a codebase with many contributors.
• Own what you build in production, including observability, on‑call, incident response, and postmortems.
• Partner with connectivity, backbone, cloud, and product teams on shared interfaces. Influence their roadmaps without direct authority.
• Mentor the engineers who join the team after you.

REQUIRED QUALIFICATIONS

• 10+ years of software engineering experience, including building and operating platform or infrastructure software at scale.
• Strong proficiency in Go, Python, or Java, or equivalent languages suited to systems and platform work. You choose the language that fits the problem.
• Deep understanding of control plane and data plane design: desired state, reconciliation, failure isolation, and blast radius.
• Strong hands‑on AWS or equivalent major cloud providers, experience across compute, networking, IAM, storage, and managed Kubernetes.
• Strong grounding in containers and ephemeral compute, such as Docker, Kubernetes, and immutable infrastructure patterns, or equivalent.
• Experience shipping both backend services and user‑facing surfaces (console, CLI, or API) for large and varied user bases.
• A track record of designing CI/CD pipelines and branching and release strategies that keep deployments safe with many contributors. You know when to add a gate and when to remove one.
• Depth below the application layer in networking, systems, or cloud, and the willingness to learn the others.
• High ownership and operational excellence. You run what you build, measure it, and fix root causes.
• Proven ability to influence senior stakeholders and peer teams without authority.
• Must be eligible to obtain and maintain a US Secret Security clearance.

PREFERRED QUALIFICATIONS

• Experience building or integrating with identity and authorization systems, such as OIDC, SAML, OPA, Cedar, or equivalent.
• Experience implementing RBAC or ABAC models within a product or system.
• Experience with Azure, on‑prem, or equivalent environments, including abstractions that work across providers.
• Experience with Kubernetes controllers or operators, Crossplane, or equivalent infrastructure abstraction frameworks.
• Infrastructure as code at scale with Terraform, OpenTofu, or equivalent tools.
• Familiarity with enterprise networking or backbone infrastructure and how platforms expose it to users.
• Experience in regulated environments such as FedRAMP, DoD IL levels, CMMC, or equivalent.
• Front‑end experience with TypeScript and React, or equivalent, for console development.

US Salary Range

$253,000 - $336,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top‑tier benefits for full‑time employees, including:

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits .

Protecting Yourself from Recruitment Scams

Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.

To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:

No Financial Requests:Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.

• Please always verify communications:
  • Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address.
  • Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to [e-mail] .

Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.

What to Do If You Suspect Fraud:Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to [e-mail] . Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts.

By submitting your application, you consent to Anduril Industries using a third‑party service provider to conduct pre‑employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third‑party service provider provides risk‑intelligence services that may include analysis of sanctions and watchlists, adverse media, public‑record information, and other lawful open‑source or commercial data sources. This third‑party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.

Export Controls - This position requires access to information and technology that is subject to U.S. export controls. Your responses to the questions below will be used solely to determine your eligibility under U.S. law to receive information and materials subject to U.S. export controls. * Select...

Are you any of the following “protected individual(s)” as defined in the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)?:

U.S. WORK AUTHORIZATION * Select...

Are you authorized to work in the United States?

Will you require sponsorship from Anduril for employment now or in the future (e.g, H1B visa)? * Select...

HISTORY WITH ANDURIL * Select...

Have you previously applied to a position at Anduril?

Have you ever been employed by Anduril or any company that Anduril has acquired? * Select...

CONFLICT OF INTEREST * Select...

Do you currently, or have you in the last 5 years, worked for the US government (e.g., Congressional staffer, member of the military, state, or federal agencies) and had oversight or similar responsibility over Anduril’s business or other interests?

How did you hear about Anduril? * Select...

If other, please specify

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Anduril Industries’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A “disabled veteran” is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A “recently separated veteran” means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.