About the OrganizationNow is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role

Redhorse transforms the way the government uses data and technology. We are seeking an "Everything Engineer" with a focus on Infrastructure and DevOps to build the "runway" for a mission-critical modernization project. You will help replace a massive, decades-old legacy system that manages billions of dollars in international security cooperation with a modern web platform.

This role is "Agent-native." You won't just be writing YAML; you will lead an AI-integrated development lifecycle (Codex, Claude Code) to build automated, compliant infrastructure. You will be responsible for ensuring our platform meets DoD Impact Level 4 (IL4) security requirements while maintaining a lightning-fast CI/CD feedback loop for the entire engineering team.

Key Responsibilities

Infrastructure as Code (IaC):
- Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript).
- Enforce compliance rules (cdk-nag NIST packs) from the first stack.
- Manage networking, compute, data stores, and secrets.
High-Performance CI/CD:
- Architect GitHub Actions with affected-only builds and remote caching.
- Implement merge queues and test sharding.
- Maintain a strict latency budget on PR gates to ensure speed.
Compliance & DevSecOps:
- Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls.
- Automate the generation of security-authorization evidence for the government.
- Manage a dual-scan delivery pipeline for signed artifacts and provenance.
Zero Trust Architecture:
- Implement CAC/ICAM-integrated identity and mTLS.
- Develop policy-as-code authorization and continuous posture monitoring.
Agentic Development:
- Decompose infrastructure problems into precise specs for AI agents to implement.
- Own all merged code, ensuring agent output meets production-grade standards.
- Refine the team’s versioned engineering "harness" and rules.
Full-Stack Breadth:
- Debug flakiness anywhere in the stack, from application code to database schemas.
- Support the application engineering team by optimizing their feedback loops.

Required Experience/Clearance

Clearance: Must be eligible for a US Secret security clearance.
7+ years building and operating production cloud platforms.
Agentic AI Proficiency: Hands-on experience with agentic AI development tools (Codex, Claude Code, or equivalent) on production codebases.
Technical Stack:
- Deep fluency in TypeScript and AWS CDK.
- Software engineering depth in Node.js and PostgreSQL/Prisma.
- Experience with container orchestration (EKS/ECS).
Compliance Knowledge: Proven track record of operating cloud infrastructure for products at DoD IL4 or similar high-security environments.

Desired Experience

We encourage all candidates who meet the basic requirements to apply, even if you do not have any of the following experience:

Security Hardening:
- Experience with STIG and hardening containers or OS images.
Performance Engineering:
- Background in developer-experience (DevEx) or build-performance optimization.
Legacy Modernization:
- Experience bridging modern infra with legacy systems like Oracle 19c or PL/SQL.
Workflow Engines:
- Familiarity with Temporal workflows for managing long-running processes.