3 days ago
Cambridge, MA, USASenior
Base Salary
$132k - $198k/yr
Responsibilities
- Architect and maintain infrastructure aligned with FedRAMP High, NIST SP 800-53, and DoD Impact Level 4/5 security controls.
- Deploy, operate, and automate Kubernetes-based platforms across Blitzy-managed PaaS environments and isolated customer-controlled VPCs.
- Implement compliance-as-code, continuous monitoring, vulnerability scanning, POA&M/CVE remediation, and federal reporting workflows.
- Design air-gapped logging, metrics, tracing, and alerting systems without external data egress.
- Optimize Kubernetes clusters, GPU and compute scheduling, distributed storage, and capacity for long-running parallel AI workloads.
- Enforce zero-trust identity, least-privilege access, FIPS 140-3 encryption, mutual TLS, and automated secrets rotation.
- Support security and compliance evidence, System Security Plans, architecture diagrams, third-party assessments, and customer ATO processes.
- Participate in cleared on-call rotations, lead root-cause analyses, and implement automated reliability improvements.
- Architect resilient infrastructure on AWS GovCloud and Azure Government, including annual automated failover and recovery.
- Define SLOs, SLIs, error budgets, and shared reliability targets for customer-hosted deployments.
- Manage customer-hosted release change control and deliver signed, versioned Helm and container image releases with tested upgrade and rollback paths.
Requirements
- 5+ years of experience in Site Reliability Engineering, DevSecOps, or Platform Engineering managing production workloads on AWS or Azure Government.
- Hands-on experience building, hardening, and auditing systems for FedRAMP, NIST 800-53, FISMA, or DISA STIG compliance, including FedRAMP certification or customer ATO work.
- Deep Linux knowledge covering kernels, systemd, networking, and troubleshooting, with experience in RHEL, Bottlerocket, Debian, Ubuntu, or similar systems.
- Deep production Kubernetes expertise, including EKS, AKS, or OpenShift, Helm charts, service meshes, and containerized workloads at scale.
- Strong proficiency with Terraform, Ansible, or comparable infrastructure-as-code tools.
- Experience with FIPS-compliant cryptography, hardened base images, CIS Benchmarks, Iron Bank, SBOM generation, and CI/CD security gates.
- Experience integrating customer identity providers such as Okta and EntraID through SAML/OIDC, with PIV/CAC sign-in, SCIM provisioning, and role mapping.
- Experience building monitoring and SIEM integrations using Prometheus, Grafana, OpenTelemetry, Splunk, or Datadog in restricted network enclaves.
- Fluency in Python, Go, or Bash for operational tooling, deployment automation, and self-healing infrastructure.
- Proven experience defining SLOs, error budgets, and capacity models for production systems.
Benefits
- Base salary of $132,000-$198,000 plus bonus and equity.
- Work involves in-person collaboration, cleared on-call rotations, customer-hosted environments, and restricted or air-gapped deployments.
Categories
Site Reliability
About Blitzy
Blitzy builds an agentic AI software development platform that ingests millions of lines across complex enterprise codebases to plan, generate, and validate production code. The privately held company, founded in 2023 and headquartered in Boston, sells to large engineering organizations modernizing or extending systems, offering an enterprise platform used to accelerate sprints and reduce manual effort; co-founders include Brian Elliott and former NVIDIA architect Sid Pardeshi.