Site Reliability Engineer (Classified Deployments)

Location: Southern California or Washington, D.C.

Clearance: Active Secret required; TS/SCI strongly preferred

Work Mode: Hybrid/On‑site with government customers

Citizenship: U.S. Citizen

Compensation: $160,000 - $190,000 (based on experience)

About the Role

We are seeking an Ops‑heavy, SecOps‑focused Site Reliability Engineer to deploy and support Quindar systems in classified, air‑gapped, and enclave environments. This role requires hands‑on work inside customer facilities, managing deployments into existing classified cloud infrastructure (AWS preferred) while ensuring reliability, security, and compliance.

You will own day‑to‑day operations, secure configuration, and troubleshooting for mission‑critical deployments across Secret and TS/SCI environments. The ideal candidate has direct experience with Kubernetes, Terraform, DevSecOps pipelines, and classified cloud constructs (C2E, IL‑enclaves, air‑gapped networks).

Key Responsibilities

• Deploy, operate, and maintain software in classified/air‑gapped customer environments.
• Manage Kubernetes workloads (EKS, Rancher, or equivalent) and automate infrastructure using Terraform.
• Implement SecOps controls: container hardening, image scanning, SBOM, supply chain security.
• Maintain compliance with NIST 800‑171, SOC2, FedRAMP Moderate, and support ATO/Continuous ATO workflows.
• Support incident response and on‑call rotation for mission-critical systems.
• Ensure high availability, performance, observability, and reliability across deployments.
• Work directly with customer technical teams on-site in SoCal or D.C.

Required Skills

• Active Secret+ clearance (TS/SCI preferred).
• Experience deploying software into classified, air‑gapped, C2E/C2S, or IL-enclave environments.
• Strong proficiency with Kubernetes (EKS, Rancher, OpenShift) and Terraform.
• Hands-on experience with CI/CD, secure pipelines, and DevSecOps tooling.
• Solid understanding of secure networking: VPNs, TLS, ALB/NLB, VPC peering, enclave boundary protections.
• Knowledge of identity management (AWS IAM, Keycloak, Auth0).
• Strong Linux fundamentals and operational troubleshooting skills.
• Ability to work on‑site with government customers.

Preferred

• AWS C2E, GovCloud, or DoD/IC deployment experience.
• Experience at a defense prime or cleared integrator.
• Prior involvement with ATO or Continuous ATO efforts.

#Air-gapped

#IL enclave

#C2E #C2S

#GovCloud

#AWS Secret Region

#Secure enclave

#Kubernetes OR #K8s

#EKS

#Rancher

#OpenShift

#Helm

#Terraform

#IaC OR “Infrastructure as Code”

#Ansible

#GitOps