Senior Software Engineer - Guardian (C2/SA/Multi-Domain) TS Clearance Required
AI Summary
Senior software engineer designing and delivering real-time, multi-domain guardian systems with MLS and cross-domain data flows, focusing on C2/situational-awareness platforms for government customers.
About this role
At Aviture, we’re a team of builders—creating mission-critical software that empowers our customers and makes a real impact. We’re looking for a senior-level engineer who thrives on solving complex problems, cares about good architecture, and wants to work on systems that matter.
Clearance: Active TS/SCI (or TS with SCI eligibility) required; CI poly preferred.
Worksite: On-site (Omaha, NE + customer sites CONUS); periodic work inside IL5/IL6 enclaves.
Citizenship: U.S. only (government program requirement).
Mission
Guardian is Aviture’s C2/situational-awareness platform used by USAF , ** AFRC , ** USSTRATCOM , and ** DOS (VIP protection/panic). You’ll build and operate multi-domain, real-time capabilities in ** air-gapped and ** GovCloud environments with strict ** RMF/ATO controls.
What You’ll Do
* Design and ship **real-time command-and-control workflows** (tasking, tracks, alerts, deconfliction) across air/ground teams.
* Build **mobile + web mapping** with ** tactical overlays **, historical replay, and multi-user ** collaboration/markup/reporting **.
* Integrate **sensors & comms** (e.g., CoT/TAK, ADS-B, AIS, Iridium SBD, SATCOM/radio gateways, BFT) into Guardian data planes.
* Implement **operational chat/voice/video** (XMPP/Matrix/WebRTC/WebSockets) with message persistence and audit in IL5/IL6.
* Engineer **multi-level security (MLS)** patterns and ** cross-domain** flows (data diode/CDS policy) for SA feeds and alerts.
* Own **DevSecOps** in restricted networks: reproducible builds, SBOMs, STIG-hardened images, signed artifacts, and offline updates
Why this is hard (and worth it)
You’ll be building capabilities operators rely on in the field. It’s **real time **, ** real users **, and ** zero room for brittle code **. If you’ve only done green-field SaaS, this will feel like another planet—in a good way.
Requirements
Must-have experience (no exceptions)
- 5+ years building ** real-time** systems with ** Java 17+/Spring Boot** and ** Node.js/TypeScript , plus ** React (or React Native) for operational UIs.
- OGC/Geo standards in production: ** WMS/WFS/WMTS **, ** GeoJSON **, ** KML , tiling pipelines; ** CesiumJS or ** Mapbox GL **.
- TAK/CoT ecosystem: generating/consuming ** Cursor-on-Target ; familiarity with ** ATAK plugins or TAK Server integration.
- **Streaming & messaging:Kafka (or NATS/RabbitMQ) + schema mgmt ( Protobuf/Avro **); back-pressure and exactly-once patterns.
- Gov environments: Delivered software inside ** AWS GovCloud (IL4/5)** and ** on-prem IL5/IL6** with ** RMF Steps 1-6 **, ** eMASS , POA&M/SPR; contributed content to an ** ATO package.
- Security hardening: Implemented ** DISA STIG/SRG , ** FIPS 140-2/3 crypto, ** PKI** (smartcard/PIV), authZ with ** ABAC/RBAC **.
- **Observability:Prometheus/Grafana + ** ELK/Opensearch in disconnected enclaves; red/black deployment in air-gapped sites.
- Multi-tenant, multi-domain EA: boundary services (NIPR/SIPR/JWICS), data labeling/marking, and release control across domains.
Nice-to-have (we’ll ask you about it)
- C2/JADC2 touchpoints (Link-16 familiarity, J-series semantics, not necessarily waveform).
- Cross Domain Solutions (e.g., Radiant Mercury, Forcepoint) policy scripting or deployment experience.
- Geospatial toolchain: GDAL, tippecanoe, MBTiles, vector tile pipelines, geofencing at scale.
- Mobile ops: Offline-first data sync, background location, and crypto at rest on ** iOS/Android **.
- **DoD 8570 **: Security+ CE (min), CASP/CISSP nice.
- Infrastructure: K8s (RKE/KE), Packer/Ansible, HashiCorp Vault, artifact signing (cosign/Sigstore).
Day-to-day constraints you’re comfortable with
- Working **inside a SCIF **, no external package registries, ** artifact whitelists **, and ** change control boards **.
- 2-hour incident response windows for operational outages; on-call rotation shared by the team.
- Writing to **operational runbooks **, not just code comments.
Benefits
- PPO or a High Deductible Health Plan, HSA eligible plan, Dental, Vision, and Supplemental Life.
- Generous paid time off that starts accruing on day one.
- Hybrid work environment with quarterly Castaway Week events in the Omaha HQ Office, all expenses paid, from across the country to participate in team-building, collaboration, and fun events.
- Company vacations!!! Previous destinations have included Napa Valley, Cancun, Cabo San Lucas and Aspen.
- Matching 401k with 100% vesting in six months.
- Pick your preferred workstation! Mac? PC? We’ll support you with the tech you need to do your best work.
- Get paid to go to national and international conferences and training, so that you can stay up to date with the latest innovations.
- Flexible work schedules: Work the times that fits your schedule, with all meetings required to be scheduled between 9 am and 3 pm CST.
- Free lunch every Friday and recurring team events for you and your family to enjoy.
- Incentive and bonus pay.
- Opportunities for connection and growth through peer coaching, recurring Lightning Talks to share things we’re passionate about, and a bi-weekly company-wide All Hands.
Skills
Explore related jobs
More jobs at Aviture
Similar ABAC jobs
Jobs in Omaha
Welder - 2nd shiftGraepel North America · Omaha, Nebraska
Laser Operator Second ShiftGraepel North America · Omaha, Nebraska- STeam Leader - Roofing Sales ProfessionalStronghouse · Omaha, Niger
- Commercial Entry Door Sales Representative – Construction & Building Materials IndustryDH Pace · Omaha NE
- Senior Product DesignerGallup · Omaha Riverfront
- Specialty Representative, Rheumatology - Omaha, NEAbbvie · Omaha, NE