Senior DevSecOps Engineer

Tagup; Carlsbad (CA); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Employee Stock Option Plan

Comprehensive health insurance

401(k) plan

Regular company outings

Job summary

A defense technology company in Carlsbad is seeking an Infrastructure Security Engineer to support cloud infrastructure using Kubernetes and Terraform. The role encompasses building secure AWS environments, maintaining compliance, and integrating security into CI/CD processes. Ideal candidates will have strong Python and PostgreSQL skills as well as experience with compliance frameworks like SOC 2 and CMMC. This position offers a competitive salary of $160,000-$200,000, equity options, health insurance, and a collaborative team culture.

Qualifications

• Fluency in Kubernetes and Terraform, with EKS in production.
• Hands-on experience with Istio and Gateway API.
• Strong background in Python and PostgreSQL.
• Familiarity with compliance frameworks like SOC 2, CMMC, NIST SP 800-171.
• Experience operating in FedRAMP environments, specifically IL4/IL5.
• Proven track record in identifying and mitigating CVEs.

Responsibilities

• Help build and secure infrastructure across AWS and Kubernetes.
• Support compliance efforts, IL4/IL5, and maintain controls.
• Implement Infrastructure as Code with Terraform.
• Participate in vulnerability management and incident response.
• Collaborate with teams to weave security into the development lifecycle.
• Keep current on security and DevOps best practices.

Skills

Fluency in Kubernetes

Hands-on experience with Terraform

Strong background in Python

Experience with PostgreSQL

Familiarity with compliance frameworks

Experience operating in FedRAMP environments

Proven track record identifying and mitigating CVEs

Job description

Overview

Tagup is a defense technology company founded at MIT that is redefining logistics superiority with next-generation AI. We’re growing rapidly and are looking for change-makers passionate about delivering innovative technologies to solve the world’s highest-stakes problems. This is an exciting opportunity to engage in meaningful work that strengthens national security and contributes to the success of U.S. and allied forces. Join us in shaping the future of defense logistics for a safer tomorrow. At Tagup, curiosity isn’t a perk—it’s the job. If you like seeing the whole system, sharing what you know, and learning from sharp teammates, you’ll fit right in. We’re engineers and data scientists on a mission to make the machines and processes that power the world safer, more reliable, and more efficient. Our AI directly controls large-scale industrial equipment and logistics systems, delivering best-in-class performance for our customers.

What You'll Do

• Help build and secure infrastructure across AWS, Kubernetes, and other cloud-native services under the guidance of senior engineers
• Support ATO efforts and day-to-day compliance work (e.g., IL4/IL5, CMMC, NIST SP 800-171), preparing evidence and maintaining controls
• Implement Infrastructure as Code with Terraform and related tooling; maintain modules and improve reliability through reviews and testing
• Participate in vulnerability management—triage findings, assist with remediation, and contribute to incident response runbooks and postmortems
• Collaborate with application teams to weave security into CI/CD and the development lifecycle (secrets management, least privilege, policy checks)
• Keep current on security and DevOps best practices, proposing small, iterative improvements to strengthen our defenses and operations

What We're Looking For

• Fluency in Kubernetes and Terraform (EKS in production)
• Hands-on experience with Istio and Gateway API
• Strong background in Python and PostgreSQL
• Familiarity with compliance frameworks—SOC 2, CMMC (Level 1 & 2), NIST SP 800-171, etc
• Experience operating in FedRAMP environments (e.g., IL4, IL5)
• Proven track record identifying and mitigating CVEs

Salary

The estimated salary range for this role is $160,000-$200,000 annually. We align compensation with your experience and impact, and we aim to attract and retain top engineering talent. In addition to salary, every team member receives meaningful equity through our Employee Stock Option Plan. We also offer comprehensive health insurance, access to a 401(k) plan, and a team-oriented culture with regular company outings.

Why Join Tagup?

Join a mission-first team where your infrastructure work makes industrial systems safer, more reliable, and more efficient—today. At Tagup, our AI controls large-scale equipment and logistics, so you’ll design, automate, and run cloud platforms with IaC, Kubernetes, and PostgreSQL; ship secure, auditable CI/CD; lock down least-privilege by default; and keep compliance tight across multi-region environments. You’ll work shoulder-to-shoulder with platform engineers and data scientists, operate with an SRE mindset, and watch decisions move from plan to production fast—while earning competitive pay, meaningful equity, and building technology that matters.

Tagup is an equal opportunity employer and individuals seeking employment with us are considered without regard to race, color, religion, national origin, age, sex, marital status, physical or mental disability, veteran status, gender identity, sexual orientation, or any other characteristic protected by law.

Citizenship

Due to the nature of our work with the U.S. Department of Defense, applicants must be authorized to work for any employer in the U.S. We are unable to sponsor visas at this time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.