Senior DevSecOps Engineer

New YorkHybridFull-time

AI Summary

Design, build, and secure cloud infrastructure for AI platforms, owning ATO processes and compliance while conducting vulnerability assessments and incident response.

About this role

Tagup is a defense technology company founded at MIT that is delivering logistics decision advantage with next-generation AI. We’re growing rapidly and are looking for change-makers passionate about delivering innovative technologies to solve the most challenging problems in the world’s highest stakes environments. This is an exciting opportunity to engage in meaningful work that strengthens national security and contributes to the success of U.S. and allied forces. Join us in shaping the future of defense logistics for a safer tomorrow.

We are seeking a Senior DevSecOps Engineer to design, build, and support the systems that keep our AI platforms resilient, secure, and scalable. In this role, you’ll be hands-on with modern cloud technologies, automation tools, and monitoring systems that enable our products to perform reliably in demanding environments.

If you’re passionate about building strong foundations, thrive on solving operational challenges, and want to contribute to technology that has real-world mission impact, you’ll feel right at home here.

What You'll Do

Architect and secure infrastructure across AWS, Kubernetes, and cloud-native systems.

Own ATO (Authority to Operate) processes and compliance frameworks (IL5+, CMMC, NIST).

Design infrastructure as code with Terraform and other modern tooling.

Conduct vulnerability assessments, penetration tests, and incident response.

Collaborate with our engineering team to embed security into the development lifecycle.

Stay ahead of security trends and continuously improve defenses.

What We’re Looking For

6+ years in infrastructure or security engineering roles.

Proven experience with ATO approvals (IL5+ or higher).

Strong knowledge of cloud infrastructure security, particularly AWS.

Familiarity with compliance frameworks: SOC2, NIST, CMMC.

Proficiency with networking, encryption, and modern security tools.

Skills

ATO (Authority To Operate)AWSCloud SecurityCMMCEncryptionIncident ResponseInfrastructure As CodeKubernetesNetworkingNISTPenetration TestingSOC2TerraformVulnerability Assessment