Infrastructure Engineer

About the role

ABOUT GALLATIN

At Gallatin, we are rebuilding defense logistics for the warfighters of the United States and allied forces. We take an AI-first approach to improve defense readiness through software products that streamline and modernize logistics operations from factory to foxhole and result in better decisions and outcomes.

We believe that you won't change the world by phoning it in and as such we work in-office in one of our core engineering locations: El Segundo, CA; Austin, TX, Washington DC, San Francisco, CA

ABOUT THE ROLE

The Infrastructure team owns the platform that delivers Navigator to the warfighters who rely on it. Our scope spans Kubernetes clusters in commercial and government cloud, application streaming for thin-client users on classified networks, a unified artifact pipeline that signs and ships the same builds to every environment we run, and air-gapped appliances at forward sites where Contested Logistics is a daily reality, not a slide.

We’re looking for an Infrastructure Engineer who builds security into the systems they operate instead of treating it as a separate workstream. You’ll architect, build, and run the platform end to end: writing RFCs and PRDs, writing and reviewing production code alongside Product and Engineering teammates, and owning the outcome once it ships. The work spans cloud-native deployments, edge appliances, data platforms, and the application streaming layer that brings Navigator to classified environments. You’ll partner with our Governance, Risk, and Compliance (GRC) leads and mission owners on STIGs, CVE remediation, audit prep, and the controls work that allows us to operate in environments such as IL5, IL6, and JWICS.

Success looks like a platform that stays up under real operational load, ships trusted artifacts to every profile we run, and passes audits without fire drills.

(Note: This position requires the ability to obtain and maintain a security clearance.)

WHAT YOU'LL DO

BUILD AND OPERATE THE PLATFORM

- Design, develop, test, iterate on, and deploy secure production systems across cloud-native and edge appliance deployments.

- Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives.

- Run production Kubernetes across commercial and government cloud, including operators, networking, storage, and multi-cluster operations that hold up under operational load.

- Harden the artifact pipeline so the same signed builds run in commercial cloud, single-tenant high-side, and air-gapped appliance deployments.

- Keep the platform reliable through proactive monitoring, logging, and alerting, and own the response when something breaks.

SECURITY AND COMPLIANCE AS A DAILY DISCIPLINE

- Embed application and infrastructure security into the systems you build — identity, network segmentation, secrets management, and CVE remediation as part of the work, not a phase at the end.