Spatial Front, Inc. (SFI) is seeking an AI Platform Engineer (OCI Security) to support our growing modernization team. SFI was recently awarded the 2025 USA Today National Top Places to Work award and the 2025 Washington Post Top Workplaces. The ideal candidate will perform hands-on engineering to deploy, adapt, secure, and operate containerized artificial intelligence applications within Oracle Cloud Infrastructure (OCI) supporting PeopleSoft HCM and related enterprise systems.
This role requires a combination of cloud infrastructure, application security, container, networking, identity and access management, and software engineering skills. The candidate will work closely with AI developers, integration engineers, cybersecurity personnel, DevSecOps engineers, DBAs, and infrastructure teams to ensure AI applications can operate securely within hardened Federal and DoD cloud environments. This includes modifying application configuration, deployment patterns, authentication and authorization approaches, integrations, and supporting infrastructure as needed to meet security and operational requirements. As a valued member of the SFI team, you will help establish secure and scalable AI capabilities for mission-critical Federal Government systems.
Location
Crystal City, VA - On-Site/Hybrid
Responsibilities
- Design, deploy, configure, secure, and maintain AI application environments within Oracle Cloud Infrastructure (OCI).
- Adapt existing containerized applications and supporting services for deployment within secured and hardened OCI environments.
- Design and implement secure OCI networking including Virtual Cloud Networks (VCNs), private subnets, routing, Network Security Groups (NSGs), private endpoints, DNS, and connectivity to enterprise services and data sources.
- Implement and maintain identity, authentication, and authorization capabilities using OCI IAM and approved enterprise identity-management technologies.
- Work with application developers to modify authentication, authorization, session management, service identities, and application configuration as required to meet Federal and DoD security requirements.
- Design secure service-to-service communication between web applications, AI services, large language models, APIs, databases, integration services, and other enterprise resources.
- Deploy and support containerized applications using Docker, Kubernetes/Oracle Kubernetes Engine (OKE), OCI Container Registry (OCIR), or comparable container technologies.
- Configure and secure AI application access to approved LLM services, APIs, enterprise applications, databases, and other supporting services.
- Implement secure patterns for AI tool and data integrations, including controlled access to enterprise services and Model Context Protocol (MCP)-based connections where applicable.
- Apply least-privilege access, network segmentation, encryption, secrets management, certificate management, and other security controls across AI application environments.
- Configure and manage OCI Vault, keys, certificates, secrets, service credentials, and other sensitive application configuration.
- Develop and maintain Infrastructure as Code (IaC) using Terraform or comparable technologies to create repeatable, controlled, and auditable cloud environments.
- Integrate platform deployment with source control, CI/CD pipelines, automated builds, security scanning, artifact management, configuration management, and release processes.
- Configure application and infrastructure logging, monitoring, audit trails, metrics, alerts, and operational dashboards.
- Partner with cybersecurity teams to implement security controls, hardening requirements, vulnerability remediation, access restrictions, audit requirements, and other compliance measures.
- Troubleshoot issues across application configuration, OCI networking, IAM, containers, certificates, APIs, service connectivity, authentication, authorization, and cloud infrastructure.
- Participate in application and architecture reviews to identify security, deployment, networking, authentication, and integration changes needed for successful cloud implementation.
- Develop reusable platform standards, security patterns, Terraform modules, deployment templates, technical documentation, and operational procedures.
- Participate in Agile/SAFe activities including PI Planning, backlog refinement, technical reviews, demonstrations, testing, release readiness, and production support.
- Other duties as assigned.