Senior DevSecOps Engineer

Who we are

Picogrid is a leading venture-backed defense technology company founded to bridge the decades-long gap between modern technology and the critical demands of national security. Today, we're building the essential infrastructure to unify sensors, autonomy, and operators with our technology deployed in active operations around the world. Our mission is to deliver an operational advantage to secure the United States and its allies.

As a DevOps & Infrastructure Engineer at Picogrid, you will design, automate, and scale the infrastructure that powers Legion. You’ll partner with platform, edge applications, and client teams to build reliable delivery pipelines, enable repeatable deployments across cloud, on-prem, and edge environments, and improve the reliability and operability of production services. You’ll develop tooling and guardrails that standardize best practices across Kubernetes and Helm, Infrastructure as Code, and secure CI/CD enabling teams to ship quickly, safely, and in compliance with required standards.

• 5+ years in a production DevOps/Infrastructure role supporting modern service deployments.

• Strong experience building automation and reusable patterns (modules, templates, self-service workflows).

• Experience with GitOps and CI/CD for applications and infrastructure (e.g., Argo CD, Jenkins, GitHub Actions).

• Strong AWS experience and Infrastructure as Code with Terraform and/or CloudFormation/CDK.

• 3+ years developing in one or more languages used for tooling/automation (Go, Python, Java, TypeScript/JavaScript).

• Deep understanding of Kubernetes and Helm, including cluster operations and workload troubleshooting (networking, storage, upgrades, RBAC, and release management).

• Experience partnering with and guiding software teams on production best practices (deployment safety, reliability, observability).

• Experience with hybrid deployments, including on-prem/bare-metal: Linux provisioning and hardening, and deploying containerized stacks (e.g., Docker Compose).

• Experience implementing security and compliance controls in infrastructure and delivery pipelines (policy checks, scanning, approvals/exceptions, auditability).

• Ability to obtain and maintain a U.S. Top Secret security clearance.

• Experience deploying and operating in FedRAMP/FedStart authorized environments, including platforms such as Palantir Apollo (or equivalent compliant delivery platforms).

• Experience operating in DoD IL5+, Top Secret, and/or JWICS environments.

• Familiarity with relational and time-series databases (e.g., PostgreSQL, TimescaleDB, InfluxDB).

• Understanding of cloud-native/CNCF concepts and tooling.

• Experience working in regulated environments (e.g., financial services, healthcare, U.S. government).

• Knowledge of system hardening and compliance baselines (e.g., DoD STIG/SRG, CIS Benchmarks, FIPS).

• Familiarity with security/compliance frameworks (e.g., FedRAMP, NIST SP 800-53/800-171, CMMC, CSfC).

• Proficiency in Go

• Experience deploying across multiple environments (cloud, on-prem, and edge), including AMD/ARM targets (e.g., NVIDIA Jetson, SBCs/SOMs).

• Familiarity with IoT/edge fleet management (e.g., AWS Greengrass, Balena, Mender) and embedded image builds (e.g., Yocto).

• Experience operating container registries and secrets management platforms.

• Experience maintaining high-throughput messaging systems/queues to reliably handle thousands of messages at scale.

• Experience operating and scaling real-time streaming infrastructure (ingest/egress, routing, load balancing, observability, and reliability) to support hundreds of concurrent live streams with low latency and high availability.

• Base salary range: $140,000 - $185,000 per year. Base salary is just one part of your total compensation package at Picogrid.

• Significant stock options with a high potential upside as an early-stage company

• 401(k) with employer matching

• Full health coverage (medical, dental, and vision insurance)

• Relocation assistance provided (if applicable)

• Unlimited PTO (two-week minimum) and 11 paid holidays per year

• Paid parental leave for both parents

• Lunch provided when working in-office and a fully stocked kitchenette

• Free EV charging at the HQ

• Unique office in El Segundo, CA stocked with quality coffee, snacks, and craft beer

Export Control Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.