Build and manage AWS GovCloud infrastructure with AWS CDK (TypeScript), enforce NIST compliance, design high-performance GitHub Actions CI/CD, automate security authorization evidence, implement Zero Trust (CAC/ICAM, mTLS), use agentic AI to generate infrastructure, own merged code, debug full stack issues, and support application teams while meeting DoD IL4 requirements.
About the Organization
Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.
About the Role
Redhorse transforms the way the government uses data and technology. We are seeking an "Everything Engineer" with a focus on Infrastructure and DevOps to build the "runway" for a mission-critical modernization project. You will help replace a massive, decades-old legacy system that manages billions of dollars in international security cooperation with a modern web platform.
This role is "Agent-native." You won't just be writing YAML; you will lead an AI-integrated development lifecycle (Codex, Claude Code) to build automated, compliant infrastructure. You will be responsible for ensuring our platform meets DoD Impact Level 4 (IL4) security requirements while maintaining a lightning-fast CI/CD feedback loop for the entire engineering team.
Key Responsibilities
- Infrastructure as Code (IaC):
- Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript).
- Enforce compliance rules (cdk-nag NIST packs) from the first stack.
- Manage networking, compute, data stores, and secrets.
- High-Performance CI/CD:
- Architect GitHub Actions with affected-only builds and remote caching.
- Implement merge queues and test sharding.
- Maintain a strict latency budget on PR gates to ensure speed.
- Compliance & DevSecOps:
- Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls.
- Automate the generation of security-authorization evidence for the government.
- Manage a dual-scan delivery pipeline for signed artifacts and provenance.
- Zero Trust Architecture:
- Implement CAC/ICAM-integrated identity and mTLS.
- Develop policy-as-code authorization and continuous posture monitoring.A
- Agentic Development:
- Decompose infrastructure problems into precise specs for AI agents to implement.
- Own all merged code, ensuring agent output meets production-grade standards.
- Refine the team’s versioned engineering "harness" and rules.
- Full-Stack Breadth:
- Debug flakiness anywhere in the stack, from application code to database schemas.
- Support the application engineering team by optimizing their feedback loops.
Required Experience/Clearance
- Clearance: Must be eligible for a US Secret security clearance.
- 3+ years years with a clear upward trajectory in cloud-native roles.
- Agentic AI Proficiency: Hands-on experience with agentic AI development tools (Codex, Claude Code, or equivalent) on production codebases.
- Technical Stack:
- Deep fluency in TypeScript and AWS CDK.
- Software engineering depth in Node.js and PostgreSQL/Prisma.
- Experience with container orchestration (EKS/ECS).
- Compliance Knowledge: Proven track record of operating cloud infrastructure for products at DoD IL4 or similar high-security environments.
Desired Experience
- Security Hardening:
- Experience with STIG and hardening containers or OS images.
- Performance Engineering:
- Background in developer-experience (DevEx) or build-performance optimization.
- Legacy Modernization:
- Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL.
- Workflow Engines:
- Familiarity with Temporal workflows for managing long-running processes.
We encourage all candidates who meet the basic requirements to apply, even if you do not have any of the following experience:
The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse's comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.
Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.
If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at [email protected]
Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.
Similar Jobs
Fintech
Build and validate predictive models, analyze large structured and unstructured datasets, generate business insights, present analytic results to stakeholders, and develop tools to advance analytics capabilities.
Top Skills:
ExcelMicrosoft WordOutlookSalesforce CRM
Fintech
Senior Business Analyst in Digital Product Management who identifies business needs, analyzes data, and designs process and product improvements. Leads requirements gathering, creates epics/features/stories, develops functional specifications, conducts testing, and drives change management to streamline, automate, and standardize operations using data-driven insights.
Top Skills:
ExcelFigmaLucidchartMiroSQLTableauVisio
Blockchain • Fintech • Payments • Financial Services • Cryptocurrency • Web3
Lead end-to-end KYC lifecycle for complex corporate customers: onboarding, periodic and event-driven reviews, enhanced due diligence, monitoring, reporting findings, recommending risk-based actions, driving workflow standardization, and supporting KYC tooling and metrics.
Top Skills:
Apple MacosBlockchainDocument RepositoriesGoogle SuiteOnboarding PlatformsScreening SolutionsSlack
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
