Senior DevSecOps Engineer

Tagup Inc.; Boston (MA); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Employee Stock Option Plan

Comprehensive health insurance

Access to a 401(k) plan

Job summary

Tagup Inc. is seeking a Cloud/DevOps Engineer in Boston, MA, to enhance infrastructure security and performance. You will automate processes using IaC with Terraform, manage multi-region environments, and ensure compliance across operations.

The ideal candidate is fluent in Kubernetes and Terraform, with a strong background in Python and PostgreSQL. The position offers a competitive salary and benefits, including equity and health insurance.

Qualifications

• Fluency in Kubernetes and Terraform (EKS in production).
• Hands-on experience with Istio and Gateway API.
• Strong background in Python and PostgreSQL.
• Familiarity with compliance frameworks—SOC 2, CMMC (Level 1 & 2), NIST SP 800‑171.

Responsibilities

• Help build and secure infrastructure across AWS and Kubernetes.
• Support compliance work and maintain controls.
• Implement Infrastructure as Code with Terraform.
• Participate in vulnerability management and incident response.
• Collaborate to integrate security into CI/CD processes.

Skills

Kubernetes

Terraform

Python

PostgreSQL

Compliance frameworks

Incident response

Tools

AWS

Istio

Gateway API

Job description

Tagup is a defense technology company founded at MIT that is delivering logistics decision advantage with next-generation AI. We’re growing rapidly and are looking for change-makers passionate about delivering innovative technologies to solve the most challenging problems in the world’s highest stakes environments. This is an exciting opportunity to engage in meaningful work that strengthens national security and contributes to the success of U.S. and allied forces. Join us in shaping the future of defense logistics for a safer tomorrow.

At Tagup, curiosity isn’t a perk—it’s the job. If you like seeing the whole system, sharing what you know, and learning from sharp teammates, you’ll fit right in. We’re engineers and data scientists on a mission to make the machines and processes that power the world safer, more reliable, and more efficient. Our AI directly controls large-scale industrial equipment and logistics systems, delivering best-in‑class performance for our customers.

We’re hiring a Cloud/DevOps Engineer to bring an SRE mindset to our platform: automate with IaC, orchestrate with Kubernetes, and tune PostgreSQL‑backed services for performance and uptime. You’ll build secure, auditable CI/CD, enforce least‑privilege by default, and uphold compliance across distributed, multi‑region environments.

What You’ll Do

• Help build and secure infrastructure across AWS, Kubernetes, and other cloud‑native services under the guidance of senior engineers.
• Support ATO efforts and day‑to‑day compliance work (e.g., IL4/IL5, CMMC, NIST SP 800‑171), preparing evidence and maintaining controls.
• Implement Infrastructure as Code with Terraform and related tooling; maintain modules and improve reliability through reviews and testing.
• Participate in vulnerability management—triage findings, assist with remediation, and contribute to incident response runbooks and postmortems.
• Collaborate with application teams to weave security into CI/CD and the development lifecycle (secrets management, least privilege, policy checks).
• Keep current on security and DevOps best practices, proposing small, iterative improvements to strengthen our defenses and operations.

What We’re Looking For

• Fluency in Kubernetes and Terraform (EKS in production).
• Hands‑on experience with Istio and Gateway API.
• Strong background in Python and PostgreSQL.
• Familiarity with compliance frameworks—SOC 2, CMMC (Level 1 & 2), NIST SP 800‑171, etc.
• Experience operating in FedRAMP environments (e.g., IL4, IL5).
• Proven track record identifying and mitigating CVEs.
• Experience mitigating CVEs in production systems.

Salary

The estimated salary range for this role is $160,000–$200,000 annually. We align compensation with your experience and impact, and we aim to attract and retain top engineering talent. In addition to salary, every team member receives meaningful equity through our Employee Stock Option Plan. We also offer comprehensive health insurance, access to a 401(k) plan, and a team-oriented culture with regular company outings.

Why Join Tagup?

Join a mission-first team where your infrastructure work makes industrial systems safer, more reliable, and more efficient—today. At Tagup, our AI controls large-scale equipment and logistics, so you’ll design, automate, and run cloud platforms with IaC, Kubernetes, and PostgreSQL; ship secure, auditable CI/CD; lock down least‑privilege by default; and keep compliance tight across multi‑region environments. You’ll work shoulder‑to‑shoulder with platform engineers and data scientists, operate with an SRE mindset, and watch decisions move from plan to production fast—while earning competitive pay, meaningful equity, and building technology that matters.

Tagup is an equal‑opportunity employer and individuals seeking employment with us are considered without regard to race, color, religion, national origin, age, sex, marital status, physical or mental disability, veteran status, gender identity, sexual orientation, or any other characteristic protected by law.

Citizenship

Due to the nature of our work with the U.S. Department of Defense, applicants must be authorized to work for any employer in the U.S. We are unable to sponsor visas at this time.