[Hiring] IT Engineer @Spear AI

Role Description

We’re seeking a skilled IT Engineer to secure and scale the internal infrastructure that powers our mission-critical work.

As a small team wearing many hats, you’ll have a wide variety of responsibilities that include:

• Administer Google Workspace, manage Identity Provider (IdP), and set up SSO.
• Manage device enrollment and device scripting in Iru/Kandji.
• Author, maintain, and audit internal security policies and procedures.
• Enforce CMMC 2.0 Level 2 and NIST security frameworks with Vanta.
• Safeguard credentials and secrets across the team using 1Password.
• Harden AWS account security, IAM policies, and role-based access controls.
• Secure network access using Tailscale VPN.
• Develop Infrastructure as Code using Pulumi alongside the infrastructure team.
• Investigate security incidents and conduct routine vulnerability assessments.

Qualifications

• You’re fanatical about polish. Every detail matters.
• You care about correctness. You take pride in airtight and auditable systems and policies.
• You obsess over security. You think about the attack surface and how to reduce it.
• You dive deep. You read the spec, not just the summary.
• You live on the bleeding edge. You’re excited about upcoming platform features.
• You’re a great teacher. You communicate security requirements effectively.

Requirements

• Hands-on experience with CMMC, FedRAMP, or NIST 800-171 compliance frameworks.
• Experience writing and maintaining security policies and procedures.
• Experience with MDM platforms such as Kandji, Jamf, or similar.
• Experience administering Google Workspace at an organizational level.
• Experience managing SSO and IdP solutions such as Authentik, Okta, or Google Identity.
• Proficiency with AWS IAM, security groups, and access management.
• Experience with security and compliance platforms such as Vanta, Drata, or Tugboat Logic.
• Experience with secrets management tools such as 1Password or HashiCorp Vault.
• Experience managing and securing macOS, Linux, and Windows endpoints.
• Experience configuring and managing VPN solutions.

Nice to have

• Experience working in a defense contracting or government-adjacent environment.
• Familiarity with Pulumi or other Infrastructure as Code tools.
• Proficiency in bash/shell scripting and Python.

Benefits

• Unlimited PTO — Take the time you need to recharge and maintain work-life balance.
• Dedicated sick time — Your health and well-being come first.
• Comprehensive health and benefits – Medical, dental, and vision coverage.
• 11 Paid Holidays — Enjoy time off throughout the year.
• Professional development — Educational opportunities and resources.
• Collaborative environment — Work directly with leadership in a flat structure.
• Mission-driven work — Contribute to projects that support national security.
• Growth opportunities — Join us during an exciting expansion phase.
• 401(k) with company match.
• Onsite / Remote / Flexible work arrangements or hybrid options.
• Relocation assistance (position dependent).
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement (position dependent).