Senior DevSecOps Engineer — AWS GovCloud & Secure CI/CD

Momentus Space LLC; San Jose (CA); Hybrid; USD 190,000 - 225,000; Full time

Job summary

Momentus Space LLC seeks a Senior DevSecOps Engineer to manage and evolve its cloud infrastructure, spanning AWS, Kubernetes, and CI. You will shape a new AWS GovCloud org defined by code, while maintaining the existing environment and enabling secure, governed access for AI models and coding agents.

The role emphasizes building, security automation, and collaboration with security/compliance teams in a regulated environment; onsite preferred, with hybrid/remote options possible.

Qualifications

• Proficiency with Terraform or OpenTofu and multi-account AWS architectures.
• Proficiency in Python and/or Go, plus shell scripting.
• Clear, concise technical writing with documentation.
• Hands-on AWS experience in a multi-account organization (IAM, Organizations, SCPs, federation).
• Experience with cloud networking design, including VPC, Transit Gateway, PrivateLink, VPNs, and DNS.
• CI/CD and container supply chain experience, including image signing and vulnerability scanning.
• Hands-on experience with hosted model services or LLM gateways (Bedrock, Azure OpenAI, Vertex AI).
• Familiarity with AI coding agents, their risks (prompt injection, token exposure).

Responsibilities

• Operate and improve AWS environments, Kubernetes clusters, and CI; migrate workloads to new orgs as they come online.
• Build a new multi-account AWS GovCloud organization as code.
• Create and manage segmented network planes (Transit Gateway, Firewalls, PrivateLink, VPNs).
• Deliver secure environment ingress/egress and maintain access controls.
• Own the software supply chain from commit to cluster (CI/CD runners, signed artifacts, private registries).
• Translate NIST SP 800-171 and CMMC controls into automated guardrails and evidence; triage findings.
• Write design notes, merge requests, and runbooks; improve AI-assisted workflows.
• Roll out AI developer tooling with managed settings; review and harden MCP servers and agent runtimes.

Skills

Terraform

OpenTofu

Python

Go

Shell scripting

AWS multi-account

CI/CD

Networking

Security compliance

AI tooling

LLM gateway

Education

BS in CS/CE or related field

Tools

Kubernetes

Argo CD

Flux

Job description

Momentus Space LLC seeks a Senior DevSecOps Engineer to manage and evolve its cloud infrastructure, spanning AWS, Kubernetes, and CI. You will shape a new AWS GovCloud org defined by code, while maintaining the existing environment and enabling secure, governed access for AI models and coding agents.

The role emphasizes building, security automation, and collaboration with security/compliance teams in a regulated environment; onsite preferred, with hybrid/remote options possible.