Tech Stack

Description

You will drive automation and security engineering into Anduril's systems, translating compliance requirements into scalable, developer-friendly solutions. You'll build compliance infrastructure that enables secure, compliant deployments by default, directly supporting national defense missions.

Requirements

• Strong DevSecOps background with cloud infrastructure security and embedded systems security
• Expertise in federal compliance frameworks (NIST SP 800-171, 800-53, CMMC)
• Experience with Infrastructure as Code (Terraform) and Policy as Code
• Ability to interpret regulatory language into actionable technical controls
• Proficiency in cloud environments (AWS, Azure, GCP) and on-prem infrastructure

Responsibilities

• Design and maintain Infrastructure as Code and Policy as Code enforcing NIST SP 800-171, 800-53, CMMC
• Build and deploy scalable security controls across cloud (AWS, Azure, GCP) and on-prem environments
• Automate IaC pipelines for secure cloud deployments and compliance artifact generation
• Integrate Continuous Monitoring, DISA STIG scanning, and compliance reporting into automated workflows
• Analyze and operationalize federal regulations (NIST, CMMC, FedRAMP, SOC 2) into engineering guidance