Senior Software Engineer - Guardian (C2/SA/Multi-Domain) TS Clearance Required

Aviture; Omaha (NE); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work environment

Castaway Week events at Omaha HQ

Generous PTO and team events

Job summary

Aviture is seeking a senior engineer to design and operate mission-critical, real-time software in air-gapped and GovCloud environments. You will work on the Guardian platform used by USAF, AFRC, USSTRATCOM and DOS, delivering cross-domain, secure capabilities.

You will design real-time workflows, map interfaces, and integrate sensors and comms, all within strict RMF/ATO controls, on-site in Omaha with periodic work inside enclaves.

Qualifications

• 5+ years building real-time systems with Java 17+/Spring Boot and Node.js/TypeScript, plus React for operational UIs.
• OGC/Geo standards in production: WMS/WFS/WMTS, GeoJSON, KML, tiling pipelines; CesiumJS or Mapbox GL.
• TAK/CoT ecosystem: generating/consuming Cursor-on-Target; familiarity with ATAK plugins or TAK Server integration.
• Streaming & messaging: Kafka (or NATS/RabbitMQ) + schema mgmt (Protobuf/Avro); back-pressure and exactly-once patterns.
• Gov environments: Delivered software inside AWS GovCloud (IL4/5) and on-prem IL5/IL6 with RMF Steps 1-6, eMass, POA&M/SPR; contributed content to an ATO package.
• Security hardening: DISA STIG/SRG, FIPS crypto, PKI, ABAC/RBAC.
• Observability: Prometheus/Grafana + ELK/Opensearch in disconnected enclaves; red/black deployment in air-gapped sites.
• Multi-tenant, multi-domain EA: boundary services, data labeling/marking, and release control across domains.

Responsibilities

• Design and ship real-time command-and-control workflows across air/ground teams.
• Build mobile and web mapping with tactical overlays, history replay, and multi-user collaboration/markup/reporting.
• Integrate sensors & comms (CoT/TAK, ADS-B, AIS, Iridium SBD, SATCOM) into Guardian data planes.
• Implement operational chat/voice/video with message persistence and audit in IL5/IL6.
• Engineer MLS patterns and cross-domain flows for SA feeds and alerts.
• Own DevSecOps in restricted networks: reproducible builds, SBOMs, STIG-hardened images, signed artifacts, offline updates.

Skills

Java

Spring Boot

Node.js/TypeScript

React

Geo standards

TAK/CoT

Kafka

RBAC/ABAC

Tools

AWS GovCloud

RMF/ATO

Packer/Ansible

Job description

At Aviture, we're a team of builders—creating mission-critical software that empowers our customers and makes a real impact. We're looking for a senior-level engineer who thrives on solving complex problems, cares about good architecture, and wants to work on systems that matter.

Clearance: Active TS/SCI (or TS with SCI eligibility) required; CI poly preferred.
Worksite: On-site (Omaha, NE + customer sites CONUS); periodic work inside IL5/IL6 enclaves.
Citizenship: U.S. only (government program requirement).

Mission

Guardian is Aviture's C2/situational-awareness platform used by USAF, AFRC, USSTRATCOM, and DOS (VIP protection/panic). You'll build and operate multi-domain, real-time capabilities in air-gapped and GovCloud environments with strict RMF/ATO controls.

What You'll Do

• Design and ship real-time command-and-control workflows (tasking, tracks, alerts, deconfliction) across air/ground teams.
• Build mobile + web mapping with tactical overlays, historical replay, and multi-user collaboration/markup/reporting.
• Integrate sensors & comms (e.g., CoT/TAK, ADS-B, AIS, Iridium SBD, SATCOM/radio gateways, BFT) into Guardian data planes.
• Implement operational chat/voice/video (XMPP/Matrix/WebRTC/WebSockets) with message persistence and audit in IL5/IL6.
• Engineer multi-level security (MLS) patterns and cross-domain flows (data diode/CDS policy) for SA feeds and alerts.
• Own DevSecOps in restricted networks: reproducible builds, SBOMs, STIG-hardened images, signed artifacts, and offline updates

Why this is hard (and worth it)

You'll be building capabilities operators rely on in the field. It's real time, real users, and zero room for brittle code. If you've only done green-field SaaS, this will feel like another planet—in a good way.

Must-have experience (no exceptions)

• 5+ years building real-time systems with Java 17+/Spring Boot and Node.js/TypeScript, plus React (or React Native) for operational UIs.
• OGC/Geo standards in production: WMS/WFS/WMTS, GeoJSON, KML, tiling pipelines; CesiumJS or Mapbox GL.
• TAK/CoT ecosystem: generating/consuming Cursor-on-Target; familiarity with ATAK plugins or TAK Server integration.
• Streaming & messaging: Kafka (or NATS/RabbitMQ) + schema mgmt (Protobuf/Avro); back-pressure and exactly-once patterns.
• Gov environments: Delivered software inside AWS GovCloud (IL4/5) and on-prem IL5/IL6 with RMF Steps 1-6, eMASS, POA&M/SPR; contributed content to an ATO package.
• Security hardening: Implemented DISA STIG/SRG, FIPS 140-2/3 crypto, PKI (smartcard/PIV), authZ with ABAC/RBAC.
• Observability: Prometheus/Grafana + ELK/Opensearch in disconnected enclaves; red/black deployment in air-gapped sites.
• Multi-tenant, multi-domain EA: boundary services (NIPR/SIPR/JWICS), data labeling/marking, and release control across domains.

Nice-to-have (we'll ask you about it)

• C2/JADC2 touchpoints (Link-16 familiarity, J-series semantics, not necessarily waveform).
• Cross Domain Solutions (e.g., Radiant Mercury, Forcepoint) policy scripting or deployment experience.
• Geospatial toolchain: GDAL, tippecanoe, MBTiles, vector tile pipelines, geofencing at scale.
• Mobile ops: Offline-first data sync, background location, and crypto at rest on iOS/Android.
• DoD 8570: Security+ CE (min), CASP/CISSP nice.
• Infrastructure: K8s (RKE/KE), Packer/Ansible, HashiCorp Vault, artifact signing (cosign/Sigstore).

Day-to-day constraints you're comfortable with

• Working inside a SCIF, no external package registries, artifact whitelists, and change control boards.
• 2-hour incident response windows for operational outages; on-call rotation shared by the team.
• Writing to operational runbooks, not just code comments.

• PPO or a High Deductible Health Plan, HSA eligible plan, Dental, Vision, and Supplemental Life.
• Generous paid time off that starts accruing on day one.
• Hybrid work environment with quarterly Castaway Week events in the Omaha HQ Office, all expenses paid, from across the country to participate in team-building, collaboration, and fun events.
• Company vacations!!! Previous destinations have included Napa Valley, Cancun, Cabo San Lucas and Aspen.
• Matching 401k with 100% vesting in six months.
• Pick your preferred workstation! Mac? PC? We'll support you with the tech you need to do your best work.
• Get paid to go to national and international conferences and training, so that you can stay up to date with the latest innovations.
• Flexible work schedules: Work the times that fits your schedule, with all meetings required to be scheduled between 9 am and 3 pm CST.
• Free lunch every Friday and recurring team events for you and your family to enjoy.
• Incentive and bonus pay.
• Opportunities for connection and growth through peer coaching, recurring Lightning Talks to share things we're passionate about, and a bi-weekly company-wide All Hands.