IT Infrastructure, Security & DevOps Engineer

GPS is a ubiquitous global utility in modern society; knowing one's location is critical for government, commercial, and personal applications. Still, today's solutions for determining location are inaccurate, slow, unencrypted, and susceptible to jamming and spoofing. TrustPoint is building the world's first commercial, authenticated GPS system in space to deliver secure, precise positioning, navigation, and timing to customers worldwide.

As TrustPoint's IT Infrastructure, Security & Dev Ops Engineer, you will design, deploy, and manage the IT infrastructure, cloud environments, networking, and developer platforms that power our engineering organization. The role bridges traditional IT operations and modern Dev Ops practice, ensuring our engineers have a secure, scalable, and automated environment to develop, test, and deploy the software behind our satellites, ground systems, and products.

You will own everything from office networking and endpoint management to AWS infrastructure, CI/CD pipelines, infrastructure automation, security, and developer enablement. Your work will directly improve developer productivity, system reliability, and the security of environments that span our offices, cloud, and globally distributed field systems.

You will also lead TrustPoint's IT security and compliance program. As our government business grows, our infrastructure has to meet the standards our customers operate under: CMMC for controlled unclassified information, FedRAMP-aligned practices for the services we deliver, and AWS Gov Cloud for regulated workloads. You will own that effort end to end, and build the IT foundation for a future facility clearance and the accredited environments that come with it.

• Design, configure, and maintain office, lab, and remote network infrastructure including routers, switches, firewalls, VLANs, VPNs, and Wi-Fi networks.
• Administer Windows, Linux, and macOS systems and manage user accounts, identity, permissions, MFA, and endpoint security through Microsoft 365 or Google Workspace.
• Design and maintain TrustPoint's AWS infrastructure including VPCs, EC2, IAM, Route 53, S3, RDS, Cloud Watch, Systems Manager, and cloud networking.
• Deploy and manage infrastructure as code using Terraform, with secure, least-privilege IAM roles and policies, while optimizing cloud cost, performance, and security.
• Build and maintain CI/CD pipelines using Git Hub Actions, Git Lab CI, or Jenkins, and maintain artifact repositories, package registries, and container registries.
• Containerize applications using Docker and deploy workloads on ECS, Kubernetes, or similar orchestration platforms.
• Automate provisioning and operational tasks using Python or Bash.
• Deploy and maintain secure remote access solutions such as Wire Guard, Tailscale, or Net Bird for employees and field-deployed systems.
• Create reproducible development environments and internal tooling that improve engineering onboarding and productivity.
• Implement monitoring, alerting, and centralized logging using Cloud Watch, Grafana, or Prometheus.
• Perform vulnerability assessments and security hardening, respond to infrastructure incidents, and participate in root cause analysis.
• Configure backup, disaster recovery, and business continuity solutions; maintain IT documentation and standard operating procedures; and procure and manage IT hardware and software assets.
• Lead TrustPoint's CMMC readiness and certification: scope the CUI enclave, implement NIST SP 800-171 controls, maintain the SSP and POA&M, manage the SPRS score, and carry us through assessment.
• Design and operate segmented…