Senior Software Engineer, Infrastructure

About Ironflow AI

We are building the world’s first AI-native ERP for defense tech — a system that thinks, reasons, and acts alongside the people who build, protect, and defend our way of life.

We’re not patching old ideas with a flashy new user interface. We’re starting fresh — reimagining how software supports operations at the cutting edge of the defense tech revolution. Built by veterans, engineers, and operators who’ve lived the pain of legacy systems. Ironflow combines natural language, intelligent agents, and real-world rigor to empower the frontline with clarity and speed.

If you’re bold, decisive, and obsessed with impact — join us. This is where curiosity meets purpose.

We're looking for a Senior Software Engineer specializing in Infrastructure who is excited about building and scaling the platform that powers our product. You'll own the reliability, performance, and security of our infrastructure while working closely with product engineers to ship features faster.

This is a high-ownership role at an early-stage company. The role has broad scope by design: you'll own the full infrastructure surface, from cluster operations to developer experience. We operate on AWS Gov Cloud in an environment purpose-built for ITAR and CUI compliance, which means the infrastructure decisions you make carry real regulatory weight. You won't be maintaining someone else's platform: you'll be the person who built it.

If you want broad ownership, a direct line to product impact, and the technical challenge of building compliance-grade infrastructure from scratch, this role is for you.

• Design, build, and maintain production infrastructure on AWS (EKS, RDS, ECR, VPC, IAM, Secrets Manager, etc.).
• Develop and manage our Kubernetes clusters: deploy workloads, tune Karpenter node autoscaling, maintain Helm charts, and keep clusters healthy.
• Own and extend our Git Ops deployment pipeline:
  Git Hub Actions for CI/CD, ArgoCD for continuous delivery, and Helm for packaging.
• Manage supporting cluster operators including Envoy Gateway, External DNS, cert-manager, Fluent Bit, and the AWS Load Balancer Controller.

• Own and improve our observability stack—Grafana for dashboards, Loki for log aggregation, Tempo for distributed tracing, and Prometheus for metrics.
• Support multi-environment reliability across dev, stage, and production Gov Cloud accounts.
• Improve system resilience through load testing (Locust), E2E testing (Playwright/Cucumber), and thoughtful capacity planning.

• Contribute to backend services (FastAPI, SQL Alchemy) in Python and Type Script.
• Work alongside product engineers as a first-class contributor, making architecture decisions that balance speed, cost, and reliability.
• Build developer experience tooling: local dev environments, CI pipeline improvements, and automated testing scaffolds that make the whole team faster.
• Support and extend Temporal-based workflow orchestration for background processing.

• Implement least-privilege IAM policies, IRSA (IAM Roles for Service Accounts), and network segmentation in a Gov Cloud environment.
• Manage secrets through AWS Secrets Manager and the External Secrets Operator with automated rotation.
• Maintain TLS automation via cert-manager and OIDC authentication flows.
• Enable SOC2, CMMC, and FedRAMP compliance activities: GRC platform integration, audit logging pipelines, FIPS-validated endpoint configuration, system boundary documentation, and evidence collection for third-party assessments.

• 5+ years of professional experience in infrastructure, Dev Ops, SRE, or platform engineering.
• Deep hands-on experience with AWS services in production (EKS, IAM, Secrets Manager, ECR, RDS). Experience with or strong working knowledge of AWS Gov Cloud is a significant plus.
• Strong Kubernetes expertise: you've operated clusters, debugged networking issues, managed Helm charts, and tuned workloads.
• Proficiency in Python and/or Type Script with a genuine interest in writing application code alongside infrastructure work.
• Experience with Git Ops workflows:
  ArgoCD, Git…