Application Engineer
Blitzy · Cambridge, MA
About this role
## Blitzy — Application Engineer (Government Security & Compliance) Blitzy is a Cambridge, MA–based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software. ### Culture - **Move Blitzy Fast:** Time is precious—innovate quickly and deliver exceptional software. - **Championship Mindset:** Operate like a professional sports team—high standards, collaboration in-person, mission focus. - **Passion for Invention:** Constant innovation and iteration. - **Work for the Customer:** Deliver outsized value and build deep, meaningful partnerships. --- ## About the Role As an **Application Engineer** focused on **Government Security and Compliance**, you’ll bridge Blitzy’s autonomous code-generation platform with the strict regulatory requirements of public sector clients. You’ll lead **technical deployment, hardening, and accreditation readiness** across: - **Platform-as-a-Service (PaaS)** in a hardened **DevSecOps** environment - **Isolated customer-hosted environments** Starting with **FedRAMP authorization**, you’ll expand into higher-impact government compliance frameworks. --- ## Responsibilities - Design, implement, and maintain **technical security controls** across Blitzy’s PaaS and customer-hosted deployments to achieve and sustain **FedRAMP Moderate (Class C)** and **High (Class D)** compliance baselines. - Engineer **repeatable, containerized deployment patterns** using **Infrastructure-as-Code (IaC)** for **air-gapped**, **GovCloud**, and **on-premises** environments. - Establish **continuous monitoring**, **automated container scanning**, and **SAST/DAST** pipelines to meet federal **POA&M** timelines. - Build dashboards to report on **vulnerability management posture**, **significant software changes**, **security incidents/tickets**, and **POA&M remediation**. - Implement and maintain **FedRAMP supply chain security controls** (e.g., **SBOMs**, **image signing**, **provenance**). - Collaborate with **security engineers**, **3PAOs**, and **agency Authorizing Officials (AOs)** to provide technical evidence, system diagrams, and **SSP** artifacts. - Configure secure data boundaries, **FIPS 140-3 validated cryptography**, and **zero-trust identity** controls for code ingestion and multi-agent inference workflows. - Work with **Forward Deployed Engineers** and public sector solutions teams to integrate Blitzy into complex, legacy government estates while preserving agency security postures. - Build a scalable compliance foundation transitioning from **FedRAMP traditional Rev5** toward an **automation-first 20x model**, and onward to **DoD Impact Levels (IL4/IL5/IL6)**. --- ## Qualifications - **5+ years** building, deploying, and hardening production cloud applications in **regulated enterprise** or **federal** environments. - Deep **FedRAMP & NIST** expertise, including hands-on participation in **ATO lifecycles** and engineering systems aligned to **NIST SP 800-53**. - Strong experience deploying workloads across **AWS GovCloud**, **Azure Government**, or **air-gapped Kubernetes** using **Terraform**, **Helm**, and **CI/CD automation**. - Experience implementing **DISA STIGs**, **CIS Benchmarks**, **FIPS-compliant encryption**, **RBAC**, and **zero-trust networking**. - Strong coding skills in **Python, Go, TypeScript**, or similar languages to automate compliance checks and troubleshoot distributed systems. - Ability to translate system archite
Listing freshness
CronJobs last confirmed this listing 54m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.