Principal Engineer, DevOps & Infrastructure
DepartmentTechnology
Employment TypeFull-time
LocationRemote / Hybrid / Conshohocken, PA
Reports ToCTO
About ZeroEyes, Inc.
ZeroEyes was founded by former Navy SEALs, self-starters and elite technologists with a mission to reduce the threat and impact of mass shootings and gun-related violence using our best-in-class artificial intelligence (AI) platform that detects visible firearms before there's a threat. As a member of the ZeroEyes team, you'll have the unique opportunity to join a forward-facing, purpose-driven company, and your perseverance and individual skill set will become crucial to our mission's success.
About the role
We're looking for a low-ego, high-ownership Principal Engineer to provide technical oversight, mentoring, and hands-on design for our DevOps and Infrastructure-as-Code (IaC) stack. You'll be the bar-setter for reliability, security, and velocity across our cloud and orchestration platform. AWS and FedRAMP experience is highly desired-you'll help us build, document, and run systems that meet rigorous compliance requirements while staying developer-friendly and cost-efficient.
We value people who have strong, well-informed opinions and express them diplomatically, who care more about truth than winning arguments, who mentor generously, and who take personal responsibility for the organization's success.
What you'll do
- Own the platform architecture: Define target state for cloud, network, identity, and runtime orchestration across AWS.
- Lead Infrastructure as Code: Establish standards and reusable modules (Terraform/Pulumi), policy-as-code (Kyvernol), GitOps workflows (FluxCD/Kustomize), and immutable images (Gitlab/Dagger).
- Drive FedRAMP/NIST alignment: Map controls (NIST 800-53), lead technical portions of the SSP, implement CIS/STIG hardening, FIPS-validated crypto usage, logging/monitoring requirements, and support ATO and continuous monitoring (ConMon) with auditors/3PAO.
- Elevate reliability: Define SLOs/error budgets, incident response/runbooks, postmortems without blame, chaos and DR testing, multi-AZ/region strategies, and cost-aware resilience (RTO/RPO).
- Hands-on enablement: Pair with teams to deliver CI/CD (GitLab Pipelines), container platforms (Kubernetes/EKS/GKE, ECS, Fargate), and service meshes/ingress.
- Security by default: Identity & access (IAM/Okta, SSO/SAML/OIDC), secrets (AWS SM/KMS), supply-chain security (SBOM, Sigstore/Cosign, SLSA/SSDF), network segmentation/zero-trust.
- Observability: Standardize metrics/logs/traces (Prometheus/Grafana/OpenTelemetry, ELK/Datadog), golden signals, actionable alerts, and capacity planning/FinOps.
- Mentor & multiply: Coach SRE/DevOps/Platform engineers, run design reviews/ADRs, and establish pragmatic guardrails that speed teams up.
- Vendor & cost management: Evaluate and right-size infra/services; build dashboards and budgets that the business can trust.
- Documentation & audits: Keep docs current (runbooks, diagrams, control evidence); make auditors happy without slowing engineers.
What you'll bring
- 10+ years building/running production infrastructure; 5+ years leading DevOps/SRE or platform teams; prior Principal/Staff scope.
- FedRAMP Moderate experience and working with a 3PAO.
- Deep IaC expertise (Terraform or Pulumi), GitOps, and modern CI/CD; wide breadth of knowledge, including container orchestration (ECS/EKS) and container security.
- Multi-cloud proficiency (AWS strongly preferred).
- Security engineering literacy: NIST/CIS/STIG, FIPS 140-2/3 crypto usage, key management (KMS/HSM), least-privilege IAM, and policy-as-code.
- Observability at scale (metrics/logs/traces), performance tuning, and cost governance/FinOps practices.
- Strong coding skills in at least one of C++/Python/Golang/.NET, plus Bash; able to build tooling and not just wire it together.
- Excellent written design docs and clear, candid communication; proven track record mentoring senior engineers.
- Nice-to-have: data pipeline or real-time video/ML workloads; service mesh (Istio), incident command experience.
Values
- No jerks
- Be authentic
- Be effective
- Attention to detail
- All in, all the time
Eligibility
- Must be authorized to work in the U.S. Ability to obtain and maintain a Public Trust or other clearance may be required.