Principal Infrastructure Engineer

CONSEQUENTIAL WORK. DEDICATED PEOPLE.

ABOUT ONEBRIEF

Onebrief builds collaboration and AI-powered workflow software for military planning and operational coordination.

Today, many critical planning workflows still rely on fragmented systems, static documents, and disconnected tools that make collaboration and decision-making unnecessarily difficult. Onebrief brings modern software, AI, and real-time collaboration into those environments, helping teams operate with greater clarity, coordination, and adaptability in situations where decisions carry real-world consequences.

We are a distributed team of builders from military, operational, and technology backgrounds who care deeply about improving how important work gets done. Some team members work remotely, while others work directly alongside customers in operational environments around the world.

Founded in 2019, Onebrief is backed by leading investors including General Catalyst, Battery Ventures, Insight Partners, Sapphire Ventures, and Human Capital. Valued at more than $2 billion, we continue to invest in product innovation, AI capabilities, and team growth.

ABOUT THE ROLE

Onebrief's infrastructure team owns the platform that delivers our software to military staffs. Our charter spans Kubernetes clusters in commercial and government cloud, application streaming for thin-client users on classified networks, a unified artifact pipeline that signs and ships the same builds to every environment we operate, and air-gapped appliances at forward sites.

We're hiring an Infrastructure Engineer who builds security into the systems they operate rather than treating it as a separate workstream. You'll architect, build, and run the platform end to end. This includes RFCs, PRDs, and reviewing and writing production code alongside Product and Engineering teammates. The work cuts across cloud-native deployments, edge appliances, data platforms, and the application streaming layer that puts Onebrief on classified environments. You'll partner with Governance, Risk, and Compliance (GRC) and mission owners on STIGs, CVE remediation, audit prep, and the controls work that lets us operate in environments such as IL5, IL6, and JWICS.

Success means a platform that stays up under real operational load, ships trusted artifacts to every profile we run, and passes audits without fire drills.

ABOUT YOU

People by-name request you because you bias towards action. You are a problem-solver by nature who genuinely cares about the mission and the outcome. You operate without hand-holding. You read a problem, weigh tradeoffs, and move. Sometimes the tradeoffs have harsh consequences that you pay for later, but you are resilient and adapt. When the work crosses into expertise you don't have, you dig into the problem, pull in the right teammates, apply their feedback, and continue.

WHAT YOU'LL DO

• Design, develop, test, iterate, and deploy secure production systems across cloud-native and edge appliance deployments
• Embed with cross-functional teams and advise on infrastructure, security, and deployment best practices that hold up in production
• Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives
• Harden the artifact pipeline so the same signed builds run in cloud, single-tenant high-side, and air-gapped appliance deployments

WHAT WE LOOK FOR

You'll do well in this role if you bring:

• 8+ years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure role
• Full-stack engineering experience when necessary, e.g., production experience designing, building, and operating services in a modern backend language (e.g., Go, Python, Rust, TypeScript)
• Deep production Kubernetes experience: operators, networking, storage, multi-cluster operations, and a feel for what breaks at scale
• Expertise with major cloud providers (e.g., Amazon AWS, Microsoft Azure), with strong instincts for designing across providers and profiles
• Strong application and infrastructure security fundamentals: identity, network segmentation, secrets management, common vulnerability classes, and sound security judgment under ambiguity
• Demonstrated ability to build working solutions from scratch, connect disparate applications together, and jump into existing code bases to add value
• Experience packaging and shipping workloads into disconnected or air-gapped environments
• Demonstrated leadership/mentorship experience
• Ability to obtain a SECRET clearance

Nice to have qualifications:

• Active US SECRET or TOP SECRET security clearance
• Government cloud expertise (AWS GovCloud, Azure Government)
• FedRAMP, IL4/IL5, IL6, or JWICS environment exposure
• Audit experience (FedRAMP, SOC 2, or equivalent)
• Big data and distributed data experience
• Prior experience supporting defense, intelligence, or other regulated industries

Notice to Third Party Recruitment Agencies Please note that Onebrief does not accept unsolicited resumes from recruiters or employment agencies. In the absence of an executed Recruitment Services Agreement, there will be no obligation to any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without an agreement Onebrief explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, shall be deemed the property of Onebrief.