{"id":3132459,"url":"https://alion.io/job/spatial-front-ai-platform-engineer-oci-security","title":"AI Platform Engineer (OCI Security)","company":{"id":4414873,"name":"Spatial Front","domain":"spatialfront.com","url":"https://alion.io/company/spatial-front","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":{"grade":"B","score":75,"open_postings":23,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-25T05:49:26Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Oracle ERP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"AI Agents","optional":true},{"name":"API Gateway","optional":true},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Machine Learning","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-14T13:04:41Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T10:59:43Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Description\nSpatial Front, Inc. (SFI) is seeking an AI Platform Engineer (OCI Security) to support our growing modernization team. SFI was recently awarded the 2025 USA Today National Top Places to Work award and the 2025 Washington Post Top Workplaces. The ideal candidate will perform hands-on engineering to deploy, adapt, secure, and operate containerized artificial intelligence applications within Oracle Cloud Infrastructure (OCI) supporting PeopleSoft HCM and related enterprise systems.\nThis role requires a combination of cloud infrastructure, application security, container, networking, identity and access management, and software engineering skills. The candidate will work closely with AI developers, integration engineers, cybersecurity personnel, DevSecOps engineers, DBAs, and infrastructure teams to ensure AI applications can operate securely within hardened Federal and DoD cloud environments. This includes modifying application configuration, deployment patterns, authentication and authorization approaches, integrations, and supporting infrastructure as needed to meet security and operational requirements. As a valued member of the SFI team, you will help establish secure and scalable AI capabilities for mission-critical Federal Government systems.\nLocation\nCrystal City, VA - On-Site/Hybrid\nResponsibilities\nDesign, deploy, configure, secure, and maintain AI application environments within Oracle Cloud Infrastructure (OCI).\nAdapt existing containerized applications and supporting services for deployment within secured and hardened OCI environments.\nDesign and implement secure OCI networking including Virtual Cloud Networks (VCNs), private subnets, routing, Network Security Groups (NSGs), private endpoints, DNS, and connectivity to enterprise services and data sources.\nImplement and maintain identity, authentication, and authorization capabilities using OCI IAM and approved enterprise identity-management technologies.\nWork with application developers to modify authentication, authorization, session management, service identities, and application configuration as required to meet Federal and DoD security requirements.\nDesign secure service-to-service communication between web applications, AI services, large language models, APIs, databases, integration services, and other enterprise resources.\nDeploy and support containerized applications using Docker, Kubernetes/Oracle Kubernetes Engine (OKE), OCI Container Registry (OCIR), or comparable container technologies.\nConfigure and secure AI application access to approved LLM services, APIs, enterprise applications, databases, and other supporting services.\nImplement secure patterns for AI tool and data integrations, including controlled access to enterprise services and Model Context Protocol (MCP)-based connections where applicable.\nApply least-privilege access, network segmentation, encryption, secrets management, certificate management, and other security controls across AI application environments.\nConfigure and manage OCI Vault, keys, certificates, secrets, service credentials, and other sensitive application configuration.\nDevelop and maintain Infrastructure as Code (IaC) using Terraform or comparable technologies to create repeatable, controlled, and auditable cloud environments.\nIntegrate platform deployment with source control, CI/CD pipelines, automated builds, security scanning, artifact management, configuration management, and release processes.\nConfigure application and infrastructure logging, monitoring, audit trails, metrics, alerts, and operational dashboards.\nPartner with cybersecurity teams to implement security controls, hardening requirements, vulnerability remediation, access restrictions, audit requirements, and other compliance measures.\nTroubleshoot issues across application configuration, OCI networking, IAM, containers, certificates, APIs, service connectivity, authentication, authorization, and cloud infrastructure.\nParticipate in application and architecture reviews to identify security, deployment, networking, authentication, and integration changes needed for successful cloud implementation.\nDevelop reusable platform standards, security patterns, Terraform modules, deployment templates, technical documentation, and operational procedures.\nParticipate in Agile/SAFe activities including PI Planning, backlog refinement, technical reviews, demonstrations, testing, release readiness, and production support.\nOther duties as assigned.\nRequirements\n Must be a U.S. Citizen with an active Secret security clearance required\nBachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; equivalent relevant experience may be considered.\n5+ years of hands-on cloud infrastructure, platform engineering, DevSecOps, cloud security, application infrastructure, or related engineering experience in complex enterprise environments.\nHands-on experience with Oracle Cloud Infrastructure (OCI), including networking, compute, IAM, storage, security, logging, monitoring, and cloud-native application services.\nStrong knowledge of cloud networking including VCNs/VPCs, subnets, routing, DNS, security groups, firewalls, private endpoints, service connectivity, and hybrid connectivity.\nStrong knowledge of identity and access management, authentication, authorization, least-privilege access, service identities, secrets management, certificates, and encryption.\nExperience deploying and supporting containerized applications using Docker and Kubernetes/OKE or comparable technologies.\nExperience working with web application architectures and understanding how application authentication, authorization, APIs, services, and infrastructure interact.\nExperience modifying application configuration, deployment architecture, or supporting code to meet cloud security, networking, identity, or operational requirements.\nExperience using Terraform or another Infrastructure as Code technology to provision and manage cloud infrastructure.\nExperience with CI/CD, source control, automated builds, vulnerability scanning, logging, monitoring, and modern DevSecOps practices.\nStrong troubleshooting skills across application, cloud, container, networking, IAM, and integration layers.\nDesired Skills\nExperience deploying or securing artificial intelligence, generative AI, machine learning, or data-intensive applications in OCI or another enterprise cloud environment.\nExperience with OCI Generative AI, OCI Generative AI Agents, OCI Data Science, or related Oracle AI services.\nExperience with OCI IAM policies, dynamic groups, resource principals, identity domains, OAuth/OIDC, API authentication, and service-to-service authorization.\nExperience with OCI Vault, Certificates, Cloud Guard, Security Zones, Logging, Monitoring, private endpoints, and related OCI security services.\nExperience with Oracle Kubernetes Engine (OKE), OCI Container Registry (OCIR), OCI Functions, and API Gateway.\nExperience integrating containerized applications with large language models, APIs, databases, enterprise services, or AI tool frameworks.\nFamiliarity with Model Context Protocol (MCP), AI agent tool integration, or comparable approaches for securely connecting AI applications to enterprise systems and data sources.\nExperience securing web applications that require changes to commercial or enterprise authentication and authorization patterns to operate within hardened environments.\nKnowledge of AI-specific security concerns including prompt injection, excessive permissions, sensitive-data exposure, insecure tool access, and service-to-service authorization.\nWorking knowledge of Python, Bash, PowerShell, OCI CLI, OCI SDKs, or comparable scripting and automation technologies.\nExperience working in Agile or SAFe environments and using Azure DevOps (ADO) or a similar lifecycle-management tool.\nExperience supporting secured Federal or DoD enterprise systems is preferred.\nOCI Architect, OCI Security, Kubernetes, Terraform, cloud security, or related certification is a plus.\nAdditional Information\nClearance: Must be a U.S. Citizen with an active Secret security clearance.\n Work Environment: Onsite/Hybrid as required by the contract.\nThis is a full-time, W2 position.\nNo agencies, third parties, or Corp-to-Corp submissions.\nSpatial Front Inc. is an Equal Opportunity Employer - all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.\nSFI participates in E-Verify.\nSalary Description\n$100,000-$160,000","description_format":"text","description_chars":8634,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-23T04:27:18Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.622,"p_room":0.9,"age_days":10,"expected_fill_days":29,"reasons":["conf:4","stale_co","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":false},"html_url":"https://alion.io/job/spatial-front-ai-platform-engineer-oci-security","json_url":"https://alion.io/job/spatial-front-ai-platform-engineer-oci-security.json","meta":{"generated_at":"2026-10-25T14:06:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20181,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4414873},"rest":"https://alion.io/mcp/rest/get_company?id=4414873"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspatial-front-ai-platform-engineer-oci-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspatial-front-ai-platform-engineer-oci-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspatial-front-ai-platform-engineer-oci-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spatial-front-ai-platform-engineer-oci-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspatial-front-ai-platform-engineer-oci-security"}]}