SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 150,000 - 210,000 / annual
Manifest is a software and AI supply chain security platform founded by alumni from the Department of Defense, CISA, and Palantir. The company helps security, product, and engineering teams gain visibility into software components, dependencies, and AI system risks across their technology stacks. Manifest serves the US Air Force, DHS, Global 2000 companies, and critical infrastructure organizations in defense, automotive, and financial services.
As Senior Infrastructure Engineer, you will own the design, development, implementation, and ongoing operation of Manifest's infrastructure and build/release pipelines. You will extend and improve existing processes and systems to ensure pipelines are fast, secure, performant, and scalable. A key aspect of this role is dogfooding Manifest's core products—you will use the platform as part of your daily work and collaborate closely with Product to drive roadmap direction and help users build and deliver software with less risk.
Key responsibilities include:
- Own infrastructure and CI/CD pipeline design, development, and operation
- Deploy Infrastructure as Code and automation (Terraform, Ansible, Helm, Go) to support platform and customer requirements
- Operate and sustain cloud-based CI/CD pipelines using DevSecOps principles and shift-left mindset
- Automate application deployment using container technology (Kubernetes, GitHub, other CI/CD tools)
- Build tools and packaging to support deployment across varied environments (AWS, Azure/GCP, on-prem, air-gapped, FedRAMP)
- Integrate DevSecOps tools and services into automated pipelines throughout the customer SDLC
- Research and adopt open-source tools to build and secure the development pipeline
- Implement and improve observability across MELT (Metrics, Events, Logs, Traces)
- Safely expose public endpoints (UIs, APIs) using load balancers, CDNs, and related tools
- Assist developers in delivering secure applications (CORS policies, API security engineering)
Requirements:
- Proven experience routinely developing and deploying IaC and automation to support platform and customer needs
- Experience operating and sustaining cloud-based CI/CD pipelines with shift-left and DevSecOps mindset
- Experience automating application deployments using container technology in cloud environments
- Experience building tools and packaging for varied runtime environments (cloud, on-prem, air-gapped)
- Experience integrating DevSecOps tools into automated pipelines across the SDLC
- Experience deploying and operating applications with Kubernetes in a cloud environment
- Prior experience with commercial software products (SaaS and on-prem) serving external/third-party customers
- Strong proficiency with IaC and automation tools: Terraform, Ansible, Helm, Go
- Networking and runtime troubleshooting, including complex remote and air-gapped environments
- Strong verbal and written communication, including technical and design documentation
Desired/Bonus Skills:
- Ability to deploy Kubernetes in edge environments (bare VM and bare metal)
- Packaging software for on-prem/edge using Zarf, Helm charts, Packer, virtual appliances
- Securing AWS environments, containers, and Kubernetes clusters
- Experience with US Government networks (FedRAMP, CMMC)
- SDLC security tooling (SCA, DAST, SAST, and other DevSecOps tools)
- Deploying and supporting self-hosted LLMs
- Secure SDLC practices, including bug bounty programs and software vulnerability management
