Cybersecurity & IT Engineer

Compound Eye teaches machines to understand their surroundings in 3D and in real time using only passive sensors like cameras. Our VIDAS™ technology enables vehicles, drones, and other robots to determine their position and navigate their environment without LiDAR, radar, or GPS. Compound Eye has customers in both defense and commercial robotics and is backed by Khosla Ventures, RTX Ventures, and other leading investors.

We operate as a CMMC 2.0 Level 2 environment supporting a team of 20 computer vision and machine learning engineers.

The Role

We're hiring a Cybersecurity & IT Engineer to report directly to the VP of Engineering. You will own the identity, endpoint, network, and security practice that supports our engineering team. You'll inherit a working stack with room to improve it.

This is a hands‑on generalist role, not a ticket‑queue role and not a compliance‑paperwork role. You'll sit in engineering standups, find where access, identity, or network friction is slowing the team down, and have the autonomy to fix it. On a given week, you might harden conditional access policies in Entra, audit third‑party OAuth grants in Google Workspace, get a remote engineer a working path to a Jetson AGX sitting on a lab VLAN, fix a DMARC alignment failure, and write the internal standard that keeps all three from breaking again.

A large part of the job is enabling engineers to build securely rather than telling them not to. Our engineers connect distributed equipment over Cloudflare tunnels and mesh VPN overlays, run agentic tooling like Claude Code against real codebases, and stand up their own lab environments. You'll define what safety looks like, make the safe path the easy path, and make it work for a mostly‑remote team.

You won't own CMMC compliance and you are not expected to hold a certification yourself. But we're a CMMC 2.0 Level 2 environment, so every configuration decision you make needs to be NIST 800‑171 aware. You'll be the person the contractor comes to for evidence and implementation detail. You'll partner with our Dev Ops Engineer, who owns AWS workloads, GPU compute, and the developer toolchain.

Key Responsibilities

Build our internal security standard on top of NIST 800-171:
Hardening guides, onboarding/offboarding, access reviews, incident response runbooks

Run recurring access, logs, and configuration audits, and maintain evidence for our compliance contractor.

Own identity across Entra , Intune, Microsoft 365 (Defender, Purview, GCC High), and Google Workspace.

Own email authentication and DNS (SPF, DKIM, DMARC, MTA-STS) and manage zones/certificates across Cloudflare.

Secure engineer and lab access via Cloudflare Tunnel/Zero Trust Mesh, VPN jump hosts, and SSH certificate authorities.

Manage the device fleet (Windows, macOS, Linux, Android, iOS) and the physical network (firewalls, switches, VLANs, lab isolation).

Define AI tooling guardrails for Claude Code and other agentic workflows.

Keep documentation current and manage vendor relationships within budget.

Manage hardware logistics from our Redwood City office, including shipping, returns, and spare equipment storage.

To Thrive in This Role, You Have

5+ years in IT, systems administration, or security engineering, including time owning broad scope on a small team.

Hands‑on administration of both Microsoft 365 and Google Workspace.

Strong Linux administration, plus working competence with Windows and macOS.

Hands‑on networking experience with firewalls, VPNs, managed switches, VLANs, routing.

Practical experience with zero‑trust/overlay networking (Cloudflare Tunnel, Wire Guard, Tailscale, or similar).

Ownership of DNS and email authentication for a production domain.

Familiarity with NIST 800-171 and CMMC 2.0 sufficient to avoid…