Security-Driven Infrastructure Engineer (Kubernetes & Cloud)

Gallatin AI, Inc.; New York (NY); On-site; USD 80,000 - 210,000; Full time

Benefits offered by this job

Equity

Healthcare

401k

Unlimited PTO

Job summary

Gallatin AI, Inc. is seeking an Infrastructure Engineer to design, build, and run secure production systems across cloud-native and edge deployments. You will work with Product and Engineering on RFCs and PRDs while embedding security into every layer of the platform.

The role emphasizes compliance with STIGs, audit readiness, and robust incident response, supporting environments from IL5 to JWICS as needed, with a SECRET clearance potential.

Qualifications

• 5+ years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure roles.
• Deep production Kubernetes experience: operators, networking, storage, multi-cluster operations, and scaling considerations.
• Expertise with major cloud providers (AWS, Azure), with deployment across providers and profiles.
• Experience packaging and shipping workloads into disconnected or air-gapped environments.

Responsibilities

• Design, develop, test, iterate, and deploy secure production systems across cloud-native and edge appliance deployments.
• Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives.
• Harden the artifact pipeline so signed builds run in commercial cloud, high-side, and air-gapped environments.
• Run production Kubernetes across commercial and government cloud with multi-cluster operations and reliable performance.
• Maintain platform reliability through proactive monitoring, logging, and alerting; own incident response.

Skills

Kubernetes

Cloud (AWS/Azure)

DevSecOps

CI/CD

Tools

Terraform

CloudFormation

Palantir Foundry

Air-gapped deployments

Job description

Gallatin AI, Inc. is seeking an Infrastructure Engineer to design, build, and run secure production systems across cloud-native and edge deployments. You will work with Product and Engineering on RFCs and PRDs while embedding security into every layer of the platform.

The role emphasizes compliance with STIGs, audit readiness, and robust incident response, supporting environments from IL5 to JWICS as needed, with a SECRET clearance potential.