Infrastructure & Security Engineer

Firestorm is building the next generation of uncrewed aircraft and advanced manufacturing systems. As an Infrastructure & Security Engineer, you will own the security architecture and compliance envelope around the manufacturing software platform, ensuring robust security measures are implemented across various environments.

Responsibilities:

• Own the security architecture of the manufacturing software platform end-to-end: identity, secrets, network segmentation, audit logging, data residency, and the trust boundaries between environments
• Drive FedRAMP and ITAR readiness — translating compliance controls into concrete, operable technical implementation in partnership with compliance leadership and the DevSecOps team
• Own the edge-to-cloud trust model and data pipeline security in partnership with the embedded engineering team — how factory-floor systems authenticate, stream data, and maintain security boundaries under disconnection
• Define and enforce the compliance topology across commercial cloud, GovCloud, on-premise edge, and air-gapped DoD environments — what can talk to what, under what conditions, with what audit trail
• Serve as the security authority on architectural decisions, design reviews, and incident response across the department when the issue involves the platform's security posture
• Deliver solutions that harden security without compromising operability every release

Requirements:

• 5+ years of security engineering, cloud security architecture, or infrastructure-security experience with production ownership
• Strong background in security architecture: IAM, secrets management, network segmentation, audit logging, and boundary enforcement across multi-environment deployments
• Experience designing or operating systems in a regulated environment — FedRAMP, ITAR, HIPAA, PCI, or similar — with a track record of translating controls into working code and configuration, not just documentation
• Working proficiency in AWS or Azure and infrastructure-as-code tooling (Terraform or equivalent) — enough to partner effectively with the Cloud Infrastructure Engineer on joint design work, not necessarily to own runtime operations
• Demonstrated ability to influence architectural decisions across engineering teams through design reviews and written design documents
• Demonstrated history of holding yourself and your teammates to a high standard, even when it creates discomfort
• U.S. person status required due to ITAR/EAR constraints on the work
• Hands-on experience with AWS GovCloud, Azure Government, or other regulated cloud environments
• Prior FedRAMP Moderate or High authorization experience
• Experience with edge-to-cloud security architectures in industrial or manufacturing settings
• Familiarity with air-gapped deployment models
• Background that includes both greenfield security architecture and mature-platform hardening