Senior Full-Stack Software Engineer (Infrastructure/DevOps)

Redhorse transforms the way the government uses data and technology. We are seeking an "Everything Engineer" with a focus on Infrastructure and DevOps to build the "runway" for a mission-critical modernization project. You will help replace a massive, decades-old legacy system that manages billions of dollars in international security cooperation with a modern web platform.

This role is "Agent-native." You won't just be writing YAML; you will lead an AI-integrated development lifecycle (Codex, Claude Code) to build automated, compliant infrastructure. You will be responsible for ensuring our platform meets DoD Impact Level 4 (IL4) security requirements while maintaining a lightning-fast CI/CD feedback loop for the entire engineering team.

Infrastructure as Code (IaC):

Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript).

Enforce compliance rules (cdk-nag NIST packs) from the first stack.

Manage networking, compute, data stores, and secrets.

High-Performance CI/CD:

Architect GitHub Actions with affected-only builds and remote caching.

Implement merge queues and test sharding.

Maintain a strict latency budget on PR gates to ensure speed.

Compliance & DevSecOps:

Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls.

Automate the generation of security-authorization evidence for the government.

Manage a dual-scan delivery pipeline for signed artifacts and provenance.

Zero Trust Architecture:

Implement CAC/ICAM-integrated identity and mTLS.

Develop policy-as-code authorization and continuous posture monitoring.A

Agentic Development:

Decompose infrastructure problems into precise specs for AI agents to implement.

Own all merged code, ensuring agent output meets production-grade standards.

Refine the team’s versioned engineering "harness" and rules.

Full-Stack Breadth:

Debug flakiness anywhere in the stack, from application code to database schemas.

Support the application engineering team by optimizing their feedback loops.

Clearance: Must be eligible for a US Secret security clearance.

7+ years building and operating production cloud platforms.

Agentic AI Proficiency: Hands-on experience with agentic AI development tools (Codex, Claude Code, or equivalent) on production codebases.

Technical Stack: Deep fluency in TypeScript and AWS CDK. Software engineering depth in Node.js and PostgreSQL/Prisma. Experience with container orchestration (EKS/ECS). Compliance Knowledge: Proven track record of operating cloud infrastructure for products at DoD IL4 or similar high-security environments.

Deep fluency in TypeScript and AWS CDK.

Software engineering depth in Node.js and PostgreSQL/Prisma.

Experience with container orchestration (EKS/ECS).

Compliance Knowledge: Proven track record of operating cloud infrastructure for products at DoD IL4 or similar high-security environments.

We encourage all candidates who meet the basic requirements to apply, even if you do not have any of the following experience:

Security Hardening: Experience with STIG and hardening containers or OS images. Performance Engineering: Background in developer-experience (DevEx) or build-performance optimization. Legacy Modernization: Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL. Workflow Engines: Familiarity with Temporal workflows for managing long-running processes.

Experience with STIG and hardening containers or OS images.

Performance Engineering: Background in developer-experience (DevEx) or build-performance optimization. Legacy Modernization: Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL. Workflow Engines: Familiarity with Temporal workflows for managing long-running processes.

Background in developer-experience (DevEx) or build-performance optimization.

Legacy Modernization: Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL. Workflow Engines: Familiarity with Temporal workflows for managing long-running processes.

Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL.

Workflow Engines: Familiarity with Temporal workflows for managing long-running processes.

Familiarity with Temporal workflows for managing long-running processes.