Security-Driven IT Infra & DevOps Engineer

TrustPoint; Dulles Town Center (VA); On-site; USD 139,000 - 172,000; Full time

Job summary

TrustPoint is building the world's first commercial GPS system in space and seeks an IT Infrastructure, Security & DevOps Engineer to design, deploy, and run our secure, scalable IT and cloud environment across offices, cloud, and field systems.

You will own networking, AWS, CI/CD, IaC, security programs, and compliance efforts including CMMC, FedRAMP, and ITAR/EAR safeguards, enabling fast, reliable engineering for satellites and ground systems.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or equivalent experience.
• 5+ years of experience in IT infrastructure, systems administration, or DevOps.
• Strong Linux system administration skills.
• Experience managing AWS environments.
• Experience with Terraform or other infrastructure as code tools.
• Experience with Docker and containerized applications.
• Strong networking knowledge including TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and firewalls.
• Experience with Git and CI/CD pipelines.
• Proficiency in Python, Bash, or PowerShell scripting.
• Hands-on experience implementing security controls in a regulated environment: NIST SP 800-171, 800-53, CMMC, FedRAMP, or ISO 27001.
• Experience writing and maintaining security documentation and audit evidence.
• Strong troubleshooting and communication skills.
• Must be a U.S. Person (U.S. citizen or permanent resident).

Responsibilities

• Design, configure, and maintain office, lab, and remote network infrastructure including routers, switches, firewalls, VLANs, VPNs, and Wi-Fi networks.
• Administer Windows, Linux, and macOS systems and manage user accounts, identity, permissions, MFA, and endpoint security through Microsoft 365 or Google Workspace.
• Design and maintain TrustPoint's AWS infrastructure including VPCs, EC2, IAM, Route 53, S3, RDS, CloudWatch, Systems Manager, and cloud networking.
• Deploy and manage infrastructure as code using Terraform, with secure, least-privilege IAM roles and policies, while optimizing cloud cost, performance, and security.
• Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins, and maintain artifact repositories, package registries, and container registries.
• Containerize applications using Docker and deploy workloads on ECS, Kubernetes, or similar orchestration platforms.
• Automate provisioning and operational tasks using Python or Bash.
• Deploy and maintain secure remote access solutions such as WireGuard, Tailscale, or NetBird for employees and field-deployed systems.
• Create reproducible development environments and internal tooling that improve engineering onboarding and productivity.
• Implement monitoring, alerting, and centralized logging using CloudWatch, Grafana, or Prometheus.
• Perform vulnerability assessments and security hardening, respond to infrastructure incidents, and participate in root cause analysis.
• Configure backup, disaster recovery, and business continuity solutions; maintain IT documentation and standard operating procedures; and procure and manage IT hardware and software assets.
• Lead TrustPoint's CMMC readiness and certification: scope the CUI enclave, implement NIST SP 800-171 controls, maintain the SSP and POA&M, manage the SPRS score, and carry us through assessment.
• Design and operate segmented environments for CUI and export-controlled data, including AWS GovCloud and Microsoft 365 GCC High or equivalent.
• Own DFARS compliance and related contract flowdowns, and implement ITAR/EAR safeguards in IT systems.
• Support FedRAMP-aligned control implementation and evidence for TrustPoint services delivered to government customers.
• Build the IT foundation for a future facility clearance (FCL), including NISPOM requirements and accredited classified systems under RMF; grow into ISSM for those systems.
• Run security operations: vulnerability management, patch cadence, EDR, log retention, access reviews, incident response, and security awareness training.

Skills

Linux administration

Networking

Windows administration

Python scripting

Security controls

Git

CI/CD

Education

Bachelor's degree in Computer Science / Information Technology or equivalent

Tools

AWS

Terraform

Docker

Kubernetes

Git

Job description

TrustPoint is building the world's first commercial GPS system in space and seeks an IT Infrastructure, Security & DevOps Engineer to design, deploy, and run our secure, scalable IT and cloud environment across offices, cloud, and field systems.

You will own networking, AWS, CI/CD, IaC, security programs, and compliance efforts including CMMC, FedRAMP, and ITAR/EAR safeguards, enabling fast, reliable engineering for satellites and ground systems.