THE ROLE
Spear AI is hiring a Senior Infrastructure Engineer to own deployment and authorization on our developer cloud for the undersea enterprise. It's an accredited platform for building, deploying, and operating mission software across unclassified and classified environments.
You'll take commercial and partner software from first onboarding through hardened deployment and Authority to Operate, working directly with government security staff to compress timelines without cutting corners. Authorization speed is what we're measured on. This is a builder's role. You decide when to build, when to reuse, and when a problem doesn't need solving, and you leave behind tooling that makes the next deployment faster than the last. The result is real capability in mission users' hands in months, not years.
ABOUT SPEAR AI
Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation’s security. As we expand, we’re building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you’re joining our Hardware, Software, or Services division, you’ll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure.
Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. You’ll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.
The Services Team. You'll sit with Spear AI's infrastructure engineers inside Services, our applied engineering and technical advisory arm. We embed with government customers to design, build, and operate platforms, pipelines, and software that take emerging capability from concept to fielded mission impact.
WHAT YOU'LL DO
• Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments, defined entirely as code and treated as software: versioned, reviewed, and tested.
• Onboard commercial and third-party software: containerize or package it, integrate it with platform identity (CAC/PIV, OIDC, SAML), logging, vulnerability scanning, and artifact services, and get it production-ready.
• Drive each capability through the Risk Management Framework to ATO: define the authorization boundary, map inherited and system-specific controls, own the SSP and supporting artifacts, remediate findings, and manage POA&Ms.
• Make and defend build, reuse, or buy decisions, with a bias toward the simplest thing that meets the security requirement.
• Harden systems to DISA STIGs and DoD/IC baselines and run and respond to vulnerability scans and continuous monitoring.
• Build CI/CD and DevSecOps pipelines that work inside air-gapped and restricted networks, including internal registries, mirrored package repositories, and controlled egress.
• Serve as the technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff.
• Build the templates, tooling, and golden paths that make every new capability deploy and authorize faster than the last, and mentor less experienced engineers on secure deployment.
WHAT WE'RE LOOKING FOR
A builder, not a console operator. You've designed and run production platforms that other engineers depend on, and you can explain why you built what you built and what you chose not to build. That conversation matters more to us than a list of AWS services on a resume. Infrastructure-as-code repos, internal tooling, and deployment systems you created are what make a candidate stand out.
Years are a guide, not a gate. If you've spent four to six years doing serious platform work at a defense tech company or fast-moving startup, we want to talk to you. Accreditation experience is a strong plus but not required. We'll pair you…