Senior Infrastructure Engineer (Active TS/SCI clearance required)

Manifest; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Unlimited PTO

Health, dental, and vision insurance

Stock options

401(k) and retirement options

Job summary

Manifest is seeking an experienced Infrastructure Engineer to own the design, development, implementation, and ongoing operation of its infrastructure and build/release pipelines. You will extend and improve processes to keep pipelines fast, secure, and scalable, while dogfooding Manifest’s core products for hands-on delivery and security.

This role requires an active TS/SCI clearance and involves deploying IaC, automating deployments, and integrating DevSecOps into cloud-based CI/CD

Qualifications

• IaC and automation to design, deploy, and manage infrastructure.
• Experience with cloud-based CI/CD pipelines and DevSecOps mindset.
• Ability to deploy and operate Kubernetes in cloud environments.
• Strong networking and runtime troubleshooting in complex environments.
• Experience packaging software for multiple runtime environments.
• Experience exposing secure endpoints with load balancers and CDNs.
• Strong written and verbal technical documentation skills.

Responsibilities

• Own design, development, implementation, and ongoing operation of infrastructure and build/release pipelines.
• Extend and improve processes to ensure fast, secure, scalable pipelines.
• Deploy IaC and automation to support platform and customer needs.
• Operate cloud-based CI/CD pipelines with DevSecOps and shift-left.
• Automate deployment using containers and Kubernetes across environments.
• Build tools and packaging for multi-runtime environments (cloud/on-prem/air-gapped).
• Integrate DevSecOps tools into automated pipelines across the SDLC.
• Research open-source tools to strengthen the development pipeline.
• Improve observability (Metrics, Events, Logs, Traces) and alerting.
• Expose public endpoints securely using load balancers and CDNs.
• Collaborate with Product to shape roadmap and enable secure software delivery.
• Leverage Manifest core products to stay aligned with day-to-day work.
• Assist developers in delivering secure applications (CORS, API security).

Skills

IaC & automation tools

Cloud-based CI/CD

Kubernetes operations

Networking & runtime troubleshooting

Multi-runtime packaging

Public endpoints security

Technical documentation

Tools

Terraform

Ansible

Helm

Go

Kubernetes

Load balancers

CDNs

Job description

About Manifest

Manifest is on a mission to secure the global software and AI supply chain. Our platform automates the discovery and analysis of risks across internally built and third-party software and AI systems, giving security, product, and engineering teams complete visibility into the components and dependencies that make up their technology stack. From product security and AI risk to supplier risk and compliance, we help teams trust the software and AI they build and buy.

Founded by alumni from the Department of Defense, CISA, and Palantir, Manifest is backed by leading investors including Ensemble VC, First Round Capital, Homebrew, BoxGroup, XYZ Venture Capital, AE Ventures, Leap435, and Overmatch VC. The company partners with the US Air Force, DHS, Global 2000 companies, and critical infrastructure organizations across defense, automotive, and financial services to bring transparency, resilience, and trust to modern digital systems.

About the Role

Manifest is seeking an experienced Infrastructure Engineer to own the design, development, implementation, and ongoing operation of Manifest's infrastructure and build/release pipelines. You will extend and improve existing processes and systems, ensuring pipelines are fast, secure, performant, and scalable. By dogfooding Manifest's core products, you will be closely involved with Product, driving roadmap direction and helping users build and deliver software with less risk and greater security. This role requires an active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.

What You Will Do

• Own the design, development, implementation, and ongoing operation of infrastructure and build/release pipelines
• Extend and improve existing processes to ensure pipelines are fast, secure, performant, and scalable
• Deploy IaC and automation (Terraform, Ansible, Helm, Go, etc.) to support platform and customer requirements
• Operate and sustain cloud-based CI/CD pipelines using DevSecOps principles and a shift-left mindset
• Automate application deployment using container technology (Kubernetes, GitHub, and other CI/CD tools)
• Build tools and packaging to support deployment across varied environments (AWS, Azure/GCP, on-prem, air-gapped, FedRAMP)
• Integrate DevSecOps tools and services into automated pipelines throughout the customer SDLC
• Research and adopt open-source tools to build and secure the development pipeline
• Implement and improve observability across MELT (Metrics, Events, Logs, Traces), including presentation and alerting
• Safely expose public endpoints (UIs, APIs) using load balancers, CDNs, and related tools
• Collaborate closely with Product to help drive roadmap direction and improve how users build and deliver software
• Dogfood Manifest's core products as part of day-to-day work
• Assisting developers in delivering secure applications (CORS policies, API security engineering)

Required Skills

• IaC and automation tools: Terraform, Ansible, Helm, Go
• Cloud-based CI/CD pipelines with a DevSecOps and automation-first approach
• Kubernetes — deploying, operating, and troubleshooting in cloud environments
• Networking and runtime troubleshooting, including complex remote and air-gapped environments
• Building and packaging software for multiple runtime environments (cloud, on-prem, air-gapped, FedRAMP)
• Exposing secure public endpoints using load balancers, CDNs, and related tools
• Strong verbal and written communication, including technical and design documentation

Required Qualifications

• Active TS/SCI clearance required
• Experience routinely developing and deploying IaC and automation to support platform and customer needs
• Experience operating and sustaining cloud-based CI/CD pipelines with a shift-left and DevSecOps mindset
• Experience automating application deployments using container technology in cloud environments
• Experience building tools and packaging for varied runtime environments (cloud, on-prem, air-gapped)
• Experience integrating DevSecOps tools into automated pipelines across the SDLC
• Experience deploying and operating applications with Kubernetes in a cloud environment
• Experience with US Government networks (FedRAMP, CMMC, etc.)
• Prior experience with commercial software products (SaaS and on-prem) serving external/3rd-party customers

Desired / Bonus Skills and Experience

• Ability to deploy Kubernetes in edge environments (bare VM and bare metal)
• Packaging software for on-prem/edge using Zarf, Helm charts, Packer, virtual appliances, etc.
• Securing AWS environments, containers, and Kubernetes clusters
• SDLC security tooling — SCA, DAST, SAST, and other DevSecOps tools
• Deploying and supporting self-hosted LLMs
• Secure SDLC practices, including bug bounty programs and software vulnerability management (SVM)

Salary: $150,000 – $210,000/year + meaningful stock options. Placement within the range depends on experience and skills.

• Help organizations gain visibility into their software supply chain and improve security
• Fully remote (with potential for hybrid co-working)
• Unlimited PTO (taken seriously)
• Medical, dental, and vision insurance — 100% covered for you and your dependents
• Competitive salary and meaningful stock options
• 401(k) and retirement options
• Ground-floor opportunity at a well-funded, early-stage startup
• Additional benefits to come (retirement, holiday gifts, etc.)