Senior DevSecOps Engineer - AWS GovCloud & AI Tooling

MOMENTUS; San Jose (CA); On-site; USD 190,000 - 225,000; Full time

Job summary

Momentus seeks a Senior DevSecOps Engineer to run and evolve its cloud, focusing on AWS, Kubernetes, and CI. You will create a GovCloud environment defined as code and enable secure software supply chains for a regulated engineering team.

You will lead security-automation efforts, translate standards into guardrails, and shape a broad, high-impact role in a small team. Onsite preferred in San Jose, with hybrid/remote options.

Qualifications

• 7+ years in infrastructure, platform, security or SRE.
• Hands-on AWS multi-account with IAM policy evaluation and SCPs.
• Experience with CI/CD, containers, and supply chain security.
• Experience running AI tooling and model gateways.
• Clear technical writing and design documentation are required.
• Ability to translate standards (NIST SP 800-171, CMMC) into guardrails.

Responsibilities

• Operate and improve AWS environments, Kubernetes clusters, and CI; migrate workloads to GovCloud.
• Build a new multi-account AWS GovCloud organization as code.
• Design and operate network planes, Firewalls, PrivateLink, VPNs.
• Deliver secure ingress/egress and manage software supply chain.
• Collaborate with security/compliance to implement automated guardrails.
• Develop design notes, MR reviews, and runbooks; support AI developer tooling.

Skills

Python

Go

Shell scripting

Education

BS in Computer Science / Computer Engineering

Equivalent practical experience

Tools

Terraform

OpenTofu

CI/CD

Kubernetes

AWS

AWS GovCloud

Job description

Momentus seeks a Senior DevSecOps Engineer to run and evolve its cloud, focusing on AWS, Kubernetes, and CI. You will create a GovCloud environment defined as code and enable secure software supply chains for a regulated engineering team.

You will lead security-automation efforts, translate standards into guardrails, and shape a broad, high-impact role in a small team. Onsite preferred in San Jose, with hybrid/remote options.