IT Engineer, Cybersecurity

We’re seeking a skilled IT Engineer to secure and scale the internal infrastructure that powers our mission-critical work.
Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation’s security. As we expand, we’re building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you’re joining our Hardware, Software, or Services division, you’ll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure.
Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. We also work with the U.S. Navy to collect and process their SONAR data. You’ll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.

We’re a small team wearing many hats, and you’d have a wide variety of responsibilities that include:

• Administer Google Workspace, manage Identity Provider (IdP), and set up SSO.

• Manage device enrollment and device scripting in Iru/Kandji.

• Author, maintain, and audit internal security policies and procedures.

• Enforce CMMC 2.0 Level 2 and NIST security frameworks with Vanta.

• Safeguard credentials and secrets across the team using 1
  
  Password.

• Harden AWS account security, IAM policies, and role-based access controls.

• Secure network access using Tailscale VPN.

• Develop Infrastructure as Code using Pulumi alongside the infrastructure team.

• Investigate security incidents and conduct routine vulnerability assessments.

We’re looking for someone with strong IT Engineering skills who shares our most important values:

• You’re fanatical about polish. Every detail matters. You love to make sure your configurations are documented, policies are enforced, and nothing slips through the cracks.

• You care about correctness. You take pride in the fact that the systems and policies you put in place are airtight and auditable.

• You obsess over security. You’re always thinking about the attack surface and how to reduce it without making engineers miserable.

• You dive deep. It’s important for you to really know how things work. You read the spec, not just the summary.

• You live on the bleeding edge. You’ve got a long list of upcoming platform features you’re excited about and can’t wait for the next nightly to drop.

• You’re a great teacher. You know how to communicate security requirements to engineers in a way that makes sense and gets buy-in.

• We ship — We don’t work on 18-month projects that are irrelevant before they’re even finished.

• Our work has impact — We build products that are deployed to U.S. submarines and integrate with the sonobuoys we manufacture.

• We’re growing responsibly — We have the resources to hire a lot more people, but we don’t want to build a massive team of people who don’t share our values.

• We’re remote — Work from wherever you want. We collaborate in real time on Slack or asynchronously via Git Hub.

• We’re profitable — We aren’t burning through cash trying to make the business work. But we also have investors who believe in us and are committed to our success.

• We care about doing great work — You don’t need permission to sweat the details here.

• We don’t take ourselves too seriously — We’re building products that make the world safer. But we don’t let that get to our heads.

• Hands‑on experience with CMMC, FedRAMP, or NIST 800‑171 compliance frameworks.

• Experience writing and maintaining security policies and procedures.

• Experience with MDM platforms such as…