Software Engineer - Software Infrastructure (Cybersecurity)

CX2; United States; Remote; USD 175,000 - 205,000; Full time

Benefits offered by this job

Stock options

Health benefits

401k enrollment

Unlimited PTO

Job summary

CX2 seeks an experienced Software Infrastructure Engineer focused on cybersecurity to harden edge and hybrid cloud infrastructure. You will secure provisioning, secrets, and configuration across disconnected environments, ensuring trustworthy sensor and platform orchestration for electromagnetic warfare capabilities.

You will shape security architecture, strengthen engineering culture, and support DoD/IC accreditation while enabling rapid, secure development and deployment in DDIL conditions.

Qualifications

• 8–10 years of experience building, securing, and operating software infrastructure at edge, on premises, or cloud.
• Cybersecurity fundamentals: hardening, threat modeling, vulnerability management, incident response.
• Deep understanding of containerization tech, especially Docker and Docker Compose, including image building and hardening, networking, and runtime isolation.
• Experience with provisioning/config management frameworks (Ansible, Chef, Puppet, SaltStack) and IaC tools (Terraform, OpenTofu).
• Experience with secrets management and PKI (Vault, KMS, SOPS, TPM/HSM).
• Linux administration and security (SELinux, AppArmor, firewalls, auditing, disk encryption).
• Bachelor’s degree in CS/CE/Cybersecurity or related field, or equivalent experience.

Responsibilities

• Design, harden, and defend containerized infrastructure across edge and cloud environments.
• Lead threat modeling, vulnerability management, and security reviews.
• Develop automated provisioning and installation frameworks (bare metal to baseline, including air-gapped environments).
• Manage lifecycle of secrets, keys, and certificates across fleet for intermittent connectivity.
• Ensure security controls meet DoD/IC accreditation and compliance requirements.
• Support DoD/IC requirements and secure DoD/IC cloud usage.

Skills

Cybersecurity

Edge computing

Linux security

Threat modeling

Vulnerability management

Incident response

Containerization (Docker)

CI/CD security

Kubernetes (K3s, Rancher)

Security architecture

Education

Bachelor’s degree in CS/CE/Cybersecurity or equivalent

Tools

Ansible

Chef

Puppet

SaltStack

Terraform/OpenTofu

HashiCorp Vault

AWS KMS

SOPS

Job description

CX2 is a next-generation defense technology company founded to deliver spectrum dominance for the United States and our allies. CX2’s AI-enabled hardware and software platforms detect, disrupt and defend the electromagnetic spectrum across land, air, sea and space domains.

Role Summary

CX2 is seeking an experienced Software Infrastructure Engineer specializing in cybersecurity to harden the infrastructure that lets CX2 detect, disrupt, and defend the electromagnetic spectrum.

You will own the security of our edge and hybrid cloud infrastructure from end to end. That means how devices are provisioned, how secrets are issued and rotated, and how systems are locked down, monitored, and accredited. All of it has to hold up in disrupted, degraded, intermittent, or limited (DDIL) network conditions. Your work ensures that CX2’s sensor and effector systems, and the platform that orchestrates them, can be trusted on any battlefield.

As a key member of CX2’s foundational engineering team, you will shape our security architecture, strengthen our engineering culture, and help deliver powerful electromagnetic warfare capabilities.

Key Responsibilities

• Secure Infrastructure Engineering: Design, harden, and defend containerized application infrastructure across small form factor edge compute and cloud environments. Lead threat modeling, vulnerability management, and security reviews, and evaluate and adopt new tools that maximize system security and reliability while protecting developer velocity.
• Provisioning and Configuration Management: Build and maintain automated, reproducible provisioning and installation frameworks (Ansible, Chef, etc.) that take hardware and cloud hosts from bare metal to a hardened, mission-ready baseline, including in air-gapped and disconnected environments.
• Secrets Management: Own the lifecycle of secrets, keys, and certificates across the fleet, including issuance, distribution, rotation, and revocation, for systems that must operate with intermittent or no connectivity.
• Constrained and Disconnected Environments: Optimize resource usage and harden against denied or degraded network conditions to serve both mobile and web based clients.
• Fulfill Department of Defense (DoD) and Intelligence Community (IC) Requirements: Understand, implement, and document the security controls needed to meet the software accreditation and certification standards set forth by the United States DoD and IC.

Required Qualifications

• Minimum of 8-10 years of experience building, securing, and operating software infrastructure at the edge, on premises, or in the cloud.
• Strong foundation in cybersecurity, including system and network hardening, threat modeling, vulnerability management, and incident response.
• Deep understanding of containerization technologies, with a focus on Docker and Docker Compose, including image building and hardening, container networking and storage, runtime isolation (namespaces, cgroups, seccomp, capabilities, rootless containers), and securing images and registries.
• Hands-on experience with provisioning and configuration management frameworks (Ansible, Chef, Puppet, SaltStack, etc.) and Infrastructure-as-Code tools (Terraform, OpenTofu, etc.).
• Experience with secrets management and PKI (HashiCorp Vault, OpenBao, AWS KMS, SOPS, TPM or HSM backed keys, etc.).
• Deep proficiency with Linux administration and security (SELinux, AppArmor, firewalls, auditing, disk encryption).
• Willing to work extended hours for mission critical deadlines.
• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, or equivalent relevant experience.

Preferred Qualifications

• Experience configuring, building, and hardening custom Linux kernels.
• Experience building and maintaining board support packages (BSPs) for embedded or small form factor hardware (L4T, Yocto, Buildroot, U-Boot, etc.), including secure and measured boot.
• Familiarity with DoD security frameworks and accreditation processes (RMF, DISA STIGs, NIST SP 800-53, FedRAMP, Impact Level (IL) 4-6).
• Expertise with government cloud platforms (AWS GovCloud, Azure Government Cloud).
• Proficiency with server and embedded Linux distributions (Ubuntu, NixOS, RHEL).
• Familiarity with container orchestration platforms such as Kubernetes (K3s, Rancher RKE2, etc.).
• Experience securing CI/CD pipelines and the software supply chain (SBOMs, artifact signing, reproducible builds).
• Security certifications such as CompTIA Security+, CISSP, or OSCP.
• Active Secret or TS/SCI security clearance.

ITAR Requirements

• To conform to U.S. Government export regulations, applicant must be a US Citizen, Green Card holder, or be eligible to obtain the required authorizations from the U.S. Department of State.

What We Offer

• Competitive salary, stock options and benefits, including health, vision and dental.
• 401K enrollment at 90 days.
• Unlimited PTO plus most Federal Holidays observed.
• High levels of responsibility and autonomy.
• Professional growth and development opportunities.

$175,000 - $205,000 a year

Exact compensation may vary based on skills, experience and location.

CX2 is a next-generation defense technology company securing spectrum dominance for the United States and its allies. We build AI-enabled hardware and software platforms to detect, disrupt, and defend the electromagnetic spectrum across land, air, sea, and space. Our systems are deployed in the most contested operational environments in the world. We’re backed by leading venture investors in the defense ecosystem and led by founders with track records at Meta, SpaceX, Epirus, and the U.S. Department of Defense.

Equal Opportunity Employer

CX2 is committed toequal employment opportunity. All qualified applicants will receive consideration for employmentwithout regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or any other protected characteristicunder federal, state, or local law, including those with a criminal history, in compliance with theCA Fair Chance Initiative for Hiring Ordinance.

To view CX2’s privacy policy, please visit: https://www.cx2.com/privacy