About Manifest
Manifest is on a mission to secure the global software and AI supply chain. Our platform automates the discovery and analysis of risks across internally built and third-party software and AI systems, giving security, product, and engineering teams complete visibility into the components and dependencies that make up their technology stack. From product security and AI risk to supplier risk and compliance, we help teams trust the software and AI they build and buy.
Founded by alumni from the Department of Defense, CISA, and Palantir, Manifest is backed by leading investors including Ensemble VC, First Round Capital, Homebrew, BoxGroup, XYZ Venture Capital, AE Ventures, Leap435, and Overmatch VC. The company partners with the US Air Force, DHS, Global 2000 companies, and critical infrastructure organizations across defense, automotive, and financial services to bring transparency, resilience, and trust to modern digital systems.
About the Role
Manifest is seeking an experienced Infrastructure Engineer to own the design, development, implementation, and ongoing operation of Manifest's infrastructure and build/release pipelines. You will extend and improve existing processes and systems, ensuring pipelines are fast, secure, performant, and scalable. By dogfooding Manifest's core products, you will be closely involved with Product, driving roadmap direction and helping users build and deliver software with less risk and greater security. This role requires an active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
What You Will Do
- Own the design, development, implementation, and ongoing operation of infrastructure and build/release pipelines
- Extend and improve existing processes to ensure pipelines are fast, secure, performant, and scalable
- Deploy IaC and automation (Terraform, Ansible, Helm, Go, etc.) to support platform and customer requirements
- Operate and sustain cloud-based CI/CD pipelines using DevSecOps principles and a shift-left mindset
- Automate application deployment using container technology (Kubernetes, GitHub, and other CI/CD tools)
- Build tools and packaging to support deployment across varied environments (AWS, Azure/GCP, on-prem, air-gapped, FedRAMP)
- Integrate DevSecOps tools and services into automated pipelines throughout the customer SDLC
- Research and adopt open-source tools to build and secure the development pipeline
- Implement and improve observability across MELT (Metrics, Events, Logs, Traces), including presentation and alerting
- Safely expose public endpoints (UIs, APIs) using load balancers, CDNs, and related tools
