DevOps Engineer

Arcessio is the AI layer for manufacturing intelligence and execution. Our AI agents turn part data into optimal manufacturing decisions and procurement-ready workflows, then execute product through our network of qualified suppliers.

As we take on more government and defense work, the security and integrity of our infrastructure becomes its own discipline — and we want someone who owns it rather than spreading it thin across the product engineers. The “sec” in this role is the point: you’ll be responsible for how sensitive data moves, where it lives, and who can see it, so the rest of the team can focus on building.

This is a remote-friendly role open to candidates across the U.S., with occasional in-person sync when the work calls for it.

What you’ll do

• Own our infrastructure and deployment pipeline — including deploying into containerized, customer-provided environments and on Azure.
• Own the security posture for controlled and sensitive data: data transmission, storage, access control, key management, and who can and can’t see what.
• Drive our compliance program from identification into implementation — NIST controls (we’re already tracking these in ControlMap), CMMC / SPRS, and recurring assessments like SOC 2 Type II.
• Partner with leadership and IT on compliance requirements and timelines, and turn a backlog of controls into an ongoing, sustainable program that doesn’t grind product velocity to a halt.
• Take security concerns off the plates of full-stack and ML engineers so they can ship.

Must-haves

• Eligible to obtain and hold a U.S. security clearance — an active clearance is not required today, but you must be able to qualify for one.
• Strong DevOps / infrastructure background — CI/CD, cloud (Azure especially), containerized deployments, and infrastructure-as-code.
• A security-focused mindset for infrastructure hardening and compliance — you think about access, isolation, and blast radius by default.
• Ability to implement a defined set of controls in our stack — turning a documented framework into working configuration, policy, and automation.

Nice to have

• Prior government or defense experience — ideally in defense contracting — and comfort operating inside those environments.
• Hands on exposure to NIST 800-171, CMMC, or navigating an ATO Process