Designs and implements cloud security controls across AWS, GovCloud, customer-hosted, and on-premises environments. Responsibilities include securing Kubernetes and EKS, building logging and threat detection, automating infrastructure compliance, hardening deployment pipelines and containers, supporting incident response, and meeting FedRAMP and federal requirements. The engineer partners closely with development teams to embed security controls, guardrails, and deployment automation into production systems.
About Nominal
🏢 About the role
🚀 What you’ll do
🔍 We’re looking for someone with
⚡ Skills that supercharge us
✨ Benefits/Perks
Engineers today are building some of the most ambitious machines humanity has ever seen. They should have AI that’s purpose-built for them.
Nominal is building the Hardware Intelligence Platform that gives engineers increased visibility into complex physical systems, helps them make better decisions, and ultimately gets their products into the real world faster. It brings together the systems, data, intelligence, and applications hardware engineering requires to meet the AI moment. Hardware engineering teams use Nominal to simulate, test, manufacture, and operate the physical systems that keep the world moving, from spacecraft and autonomous vehicles to next-generation energy systems and robotics.
Our customers span aerospace, defense, manufacturing, transportation, energy, and robotics. They include Anduril, Shield AI, Wisk Aero, Pratt Miller Motorsports, Antares, and Shinkei Systems, amongst others, alongside programs within the U.S. Air Force and Navy. Our team draws from SpaceX, Palantir, Anduril, Applied Intuition, Tesla, and other leading companies, united by a common mission: giving hardware engineers the tools to build the future with speed, safety, and confidence. We're a fast-moving team that owns problems end-to-end, works across disciplines, and thrives at the intersection of hardware and software.
Some of the world’s leading technology investors, including Sequoia, Lightspeed, Founders Fund, General Catalyst, Lux Capital, and Insight Partners, are backing Nominal’s ambition to change how machines are built and operated. We’re looking for engineers who want to take on hard problems and help make a new generation of world-changing hardware possible.
As a Cloud, Deployments & DevSecOps Engineer, you’ll join the team that secures the platform hardware and defense teams rely on to ingest, analyze, and act on their test and operations data. We deploy across AWS, AWS GovCloud, customer-hosted clouds, and on-premises environments, and you’ll own the security controls, detection, and compliance evidence that make those deployments trustworthy for customers, including those with federal requirements. You’ll work directly with engineering to build these controls into how we deploy and operate.
This role is ideal for someone who pairs deep AWS security experience with hands-on cloud engineering, and who would rather build guardrails and automation that engineers adopt than review from the sidelines. You’ll shape which security problems we take on and in what order, with little oversight.
- Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
- Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
- Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
- Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
- Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.
- Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation.
- Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls.
- Develop container and base-image security standards, including images that meet applicable FIPS requirements.
- Partner with engineering to obtain and integrate available security telemetry from customer environments.
- Support FedRAMP and other federal deployment requirements through technical controls and evidence.
- Deep AWS security experience combined with hands-on cloud engineering and deployment experience.
- Strong Kubernetes experience, including securing clusters and workloads.
- Experience implementing cloud identity, access and network security controls.
- Experience building or operating cloud logging, monitoring and threat detection.
- Experience with infrastructure as code and security automation.
- Experience working directly with engineering teams to implement and maintain production security controls.
- Certified Kubernetes Security Specialist (CKS).
- Experience with Azure, GCP, Oracle Cloud or self-hosted deployments.
- Experience supporting FedRAMP, AWS GovCloud or DoD IL4/IL5 environments.
- Experience with secure CI/CD, artifact signing, container security or software supply chain controls.
- Experience handling cloud security incidents or complex deployment failures.
- 🏥 100% coverage of medical, dental, and vision insurance
- 🏖️ Unlimited PTO and sick leave
- 🍽️ Free lunch, snacks, and coffee
- 🚀 Professional Development Stipend
- 🛠️ In-office hardware lab with a $250 project stipend
- ✈️ Annual company retreat
- 👶 12 weeks parental leave
- 🌱 Fertility and family planning ($15,000 lifetime)
- 💪 Wellness stipend ($100/month)
- 🛠️ $500/year hardware sensor stipend
- 💼 401(k)
- 📈 Employee-friendly equity terms
- 🏢 In-office 5 days per week
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
ITAR Requirements
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
CompensationThe base pay range for this role is $208,000 – $245,000 per year.
Nominal New York, New York, USA Office
New York, NY, United States
Nominal New York, New York, USA Office
New York, NY, United States
Similar Jobs
eCommerce • Fashion • Retail • Sales • Wearables • Design
Provide friendly, efficient customer service at the cash wrap and on the sales floor. Operate POS, process shipments and transfers, maintain stockroom and merchandising, support visual updates, assist customers, follow loss prevention and housekeeping standards, and perform physical tasks like lifting and stocking.
Top Skills:
Cash Register SystemsInternetIpadLaptopMobile PosPosWalkie Talkie
eCommerce • Legal Tech • Professional Services • Software • Data Privacy
Manage a portfolio of established customer accounts via inbound and outbound calls, uncover upsell and retention opportunities, meet sales and retention targets, monitor purchasing patterns, perform follow-up outreach, and build long-term customer relationships in a metrics-driven environment.
eCommerce • Legal Tech • Professional Services • Software • Data Privacy
Leads software engineering strategy, architecture, product roadmap execution, and development of scalable business applications. Manages and mentors teams of 15–30 engineers and support staff, builds a strong engineering culture, ensures technical feasibility, and addresses performance, reliability, and scalability issues. The role remains hands-on while guiding technical direction, cross-functional collaboration, and long-term engineering priorities.
Top Skills:
AgileAWSRest ApisRuby
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
