SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 190,000 - 225,000 / annual
Momentus is an early-stage aerospace company commercializing in-space transportation and infrastructure services. We are seeking a Senior DevSecOps Engineer to operate and evolve our cloud infrastructure while building a new regulated environment from the ground up.
You will own a broad scope of responsibilities on a small, high-impact team. Your primary mission is to maintain our existing AWS, Kubernetes, and CI environments while architecting and deploying a new multi-account AWS GovCloud organization defined entirely as infrastructure-as-code. This new environment will support NIST SP 800-171 and CMMC compliance requirements for our defense and aerospace work.
Key responsibilities include:
- Operating and improving existing AWS environments, Kubernetes clusters, and CI platforms; migrating workloads into the new GovCloud organization as it comes online
- Building a multi-account AWS GovCloud organization as code with full infrastructure-as-code practices
- Designing and operating segmented network planes using Transit Gateway, firewalls, IPAM, PrivateLink, and site-to-site VPNs to company facilities
- Delivering secure environment ingress/egress controls
- Owning the software supply chain end-to-end: CI/CD runner fleets, FIPS-validated images, signed artifacts, replicated registries, and private PKI
- Partnering with security and compliance teams to translate regulatory controls into automated guardrails and evidence generation
- Writing design documentation, conducting merge request reviews, and creating runbooks
- Rolling out and supporting AI developer tooling (Claude Code and similar) with managed settings; hardening and operating MCP servers and agent runtimes
This role emphasizes turning security requirements into executable code rather than maintaining compliance documentation. You will work closely with engineering teams to enable their productivity while maintaining security posture.
REQUIREMENTS:
- 7+ years in infrastructure, platform, security, or site reliability engineering, including 3+ years building on AWS with infrastructure as code
- BS in Computer Science, Computer Engineering, or related field, or equivalent practical experience
- Production-grade Terraform or OpenTofu experience: reusable modules, state management, imports/refactors, careful plan review
- Proficiency in Python and/or Go, plus shell scripting
- Clear, concise technical writing ability
- Deep hands-on AWS experience in multi-account organizations: IAM policy evaluation, AWS Organizations, service control policies, Identity Center or equivalent federation with external IDP
- Advanced cloud networking skills: VPC design, Transit Gateway routing and segmentation, firewalls and inspection, DNS, PrivateLink, site-to-site VPN with BGP; ability to debug connectivity issues across accounts under pressure
- CI/CD and container supply chain experience: image builds, signing and verification, secrets management, vulnerability scanning
- Kubernetes operations and security experience
- Familiarity with NIST SP 800-171 and/or CMMC frameworks
- U.S. citizenship, U.S. legal permanent resident status, or protected person status under 8 U.S.C. § 1324b(a)(3) is required due to export-controlled commodities access
Preference for onsite work, but hybrid and remote candidates will be considered.
