Senior Infrastructure Automation Engineer

BridgePhase is a software engineering company focused on designing, building, securing, and operating cutting-edge software solutions that drive mission success and operational excellence for Federal Government organizations. We are dedicated to supporting the Air Force’s technological edge by delivering innovative software engineering services that directly support cyber operations, threat defense, and mission assurance. Our goal is to be a trusted mission partner in enabling cyber readiness and resilience across the Air Force and U.S. Cyber Command. 
 

We’re seeking a Senior Infrastructure Automation Engineer to join our mission-driven team supporting the U.S. Air Force’s Unified Platform software factory in San Antonio. In this role, you’ll help defend critical Air Force cyber infrastructure, drive compliance with Department of Defense security standards, and enhance the security posture of operational systems that protect national interests. You’ll work closely with development, cyber, and mission teams to secure platforms across their entire lifecycle - from design and implementation to ongoing monitoring and incident response. 
 

This role blends infrastructure engineering with cybersecurity. It’s about automating cloud-native platforms with security baked in.  Our ideal candidate thrives on solving complex problems at the intersection of infrastructure, automation, and mission assurance. 
 

In this position, you can expect to: 

• Design and implement secure, automated infrastructure solutions across AWS and Kubernetes environments, embedding cybersecurity at every layer. 
• Provision and manage mission-critical Splunk components (indexers, search heads, forwarders) to support observability and threat detection at scale. 
• Build infrastructure-as-code using Terraform, Helm, and scripting languages like Python or Bash to ensure repeatability, security, and speed. 
• Support the deployment and lifecycle of applications running on Kubernetes, with an understanding of how platform components interact in a hardened enclave. 
• Engineer and operate AWS environments using IAM, KMS, VPC, Transit Gateway, and native security services to meet DoD requirements. 
• Integrate infrastructure with security tooling such as container scanners, static/dynamic analysis, intrusion detection, and runtime protection. 
• Support policy-as-code and compliance automation to streamline Authority to Operate (ATO) and enforce zero trust architecture principles. 
• Monitor logs, metrics, and telemetry from across the stack to identify misconfigurations, vulnerabilities, or anomalies in real time. 
• Collaborate with DevSecOps and mission teams to embed secure-by-design principles into the CI/CD pipeline. 
• Maintain and evolve secrets management, identity federation, and role-based access controls across enclaves. 
• Support incident response and troubleshooting activities, ensuring platform resilience and mission continuity. 

As with any technical environment, the exact role responsibilities will evolve with the changing needs of our client. We are looking for adaptable engineers who thrive on new challenges and can take on additional responsibilities beyond those listed above. 
 

Preferred Experience and Qualifications: 

• AWS: Hands-on experience with AWS infrastructure and services, with a strong understanding of security controls—especially IAM, KMS, VPC, and Transit Gateway 
• Splunk: Proven experience provisioning and managing Splunk infrastructure components, including search heads and indexers 
• Automation: Expertise with Terraform and Helm for infrastructure provisioning and application deployment 
• Scripting: Proficiency in Python or Bash for automating tasks and integrating across the stack 
• Kubernetes: Solid understanding of Kubernetes architecture and hands-on experience deploying and supporting containerized applications and platform components 
• Cybersecurity Integration: Practical knowledge of securing infrastructure and automating security across the tech stack—identity and access, network, data, and applications 
• DevSecOps Mindset: Experience integrating infrastructure and security into CI/CD pipelines using policy-as-code, secrets management, and automated compliance checks 
• Active Secret Clearance is Required 
• Industry certifications such as CISSP, CEH, GCIH, GCIA, or AWS Security Specialty are preferred. 
• B.S. in Cybersecurity, Information Assurance, Computer Science, or equivalent experience. 
• This position is remote-friendly, but candidates local to San Antonio, TX may be asked to provide on-site support as needed. 

While we've outlined our ideal candidate, we recognize that talent comes in many forms. If you don't check every box but have a strong background in cybersecurity, a desire to secure mission-critical systems, and a drive to grow, we strongly encourage you to apply. We value professionals who bring curiosity, commitment, and adaptability to the mission of securing national cyber infrastructure. 
 

About Our Company: 
At BridgePhase, our values shape our culture and guide our actions. We act with integrity, honesty, and respect, earning trust and fostering collective success. We are critical thinkers and problem solvers, driving innovation and positive disruption to solve hard challenges at speed and scale. Our work is characterized by courage, compassion, commitment, and teamwork. We apply disciplined engineering principles and a proven agile approach that deliver flexible, simplified, durable and performant solutions that drive continuous improvement and have lasting impact and sustained value. Additionally, we invest in our communities through strategic charitable initiatives, empowering our employees to make meaningful contributions to causes they are passionate about. 
 

Our Benefits: 
We pride ourselves on providing top-tier benefits that rival those found in larger organizations. Below are some of the perks our team enjoys:  

• Competitive compensation based on experience  
• Flexible PTO plan  
• Paid Sick Leave  
• 100% Paid Paternal Leave (16 weeks Maternity, 6 weeks Paternity)   
• 401k plan with 6% employer matching (zero vesting period)  
• Excellent health, dental, and vision benefits  
• Professional development budget that can be used for certifications and training  
• Paid community service days