<h3>About the Organization</h3><div>Now is a great time to join <a href="https://himalayas.app/companies/redhorse">Redhorse</a> Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.</div><div><h3>About the Role</h3><p><a href="https://himalayas.app/companies/redhorse">Redhorse</a> transforms the way the government uses data and technology. We are seeking an "Everything Engineer" with a focus on Infrastructure and DevOps to build the "runway" for a mission-critical modernization project. You will help replace a massive, decades-old legacy system that manages billions of dollars in international security cooperation with a modern web platform.</p><p>This role is "Agent-native." You won't just be writing YAML; you will lead an AI-integrated development lifecycle (Codex, Claude Code) to build automated, compliant infrastructure. You will be responsible for ensuring our platform meets DoD Impact Level 4 (IL4) security requirements while maintaining a lightning-fast CI/CD feedback loop for the entire engineering team.</p></div><h3>Key Responsibilities</h3><ul><div><li>Infrastructure as Code (IaC):</li><li>Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript).</li><li>Enforce compliance rules (cdk-nag NIST packs) from the first stack.</li><li>Manage networking, compute, data stores, and secrets.</li><li>High-Performance CI/CD:</li><li>Architect GitHub Actions with affected-only builds and remote caching.</li><li>Implement merge queues and test sharding.</li><li> Maintain a strict latency budget on PR gates to ensure speed.</li><li>Compliance &amp; DevSecOps:</li><li>Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls.</li><li>Automate the generation of security-authorization evidence for the government.</li><li>Manage a dual-scan delivery pipeline for signed artifacts and provenance.</li><li>Zero Trust Architecture:</li><li>Implement CAC/ICAM-integrated identity and mTLS.</li><li>Develop policy-as-code authorization and continuous posture monitoring.A</li><li>Agentic Development:</li><li>Decompose infrastructure problems into precise specs for AI agents to implement.</li><li>Own all merged code, ensuring agent output meets production-grade standards.</li><li>Refine the team’s versioned engineering "harness" and rules.</li><li>Full-Stack Breadth:</li><li>Debug flakiness anywhere in the stack, from application code to database schemas.</li><li>Support the application engineering team by optimizing their feedback loops.</li></div></ul><h3>Required Experience/Clearance</h3><ul><ul style="list-style-type: disc;"><li>Clearance: Must be eligible for a US Secret security clearance.</l