Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revolution. We're transforming how enterprises build software, turning enterprise requirements into enterprise grade code with an agentic software development platform that can autonomously execute 80% of the quantum of software development work. We're backed by multiple tier 1 investors, and have proven success as founders of previous start-ups.

Our Culture

Who we are

Led by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development. We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.

How we work

We move Blitzy Fast: Time is both our company’s and our clients’ most precious asset. We move quickly and decisively to innovate internally and deliver exceptional software externally.

Championship Mindset: We operate like a professional sports team. We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.

Passion for Invention: We’re pushing the frontier of what’s possible, requiring constant innovation and iteration.

We Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.

About the Role

In this role, you will own the reliability, security posture, and operational readiness of Blitzy’s compute-intensive AI workloads across both our multi-tenant/single-tenant PaaS offerings and air-gapped or public sector customer-hosted cloud environments. You will lead our infrastructure alignment with FedRAMP High (Class D) baselines, ensuring seamless FedRAMP certification and customer Authorization to Operate (ATO) processes while maintaining peak performance for autonomous code generation and validation pipelines.

Responsibilities

FedRAMP & Government Compliance Engineering. Architect and maintain cloud infrastructure aligned with FedRAMP High(Class D), NIST SP 800-53, and DoD Impact Level (IL4/IL5) security controls across AWS GovCloud or higher impact levels over AWS classified regions.

Customer-Hosted & PaaS Deployment Management. Deploy, operate, and automate Blitzy’s Kubernetes-based platform across both Blitzy-managed PaaS environments and customer-controlled, isolated VPCs.

Continuous Monitoring & Vulnerability Remediation. Implement automated compliance-as-code, continuous monitoring (ConMon), and vulnerability scanning pipelines to meet strict federal SLA timelines for POA&M and CVE remediation.

Air-Gapped & Boundary-Contained Observability. Design and operate logging, metrics, tracing, and alerting stacks that function completely within strict customer security boundaries without external data egress.

AI Workload Orchestration & Capacity Planning. Optimize Kubernetes clusters, GPU/compute scheduling, and distributed storage to support long-running, parallel AI agent execution and codebase knowledge graph ingestion.]

Zero-Trust Identity & Secrets Management. Enforce least-privilege access controls, FIPS 140-3 validated encryption in transit and at rest, mutual TLS (mTLS), and automated secrets rotation.

Support Blitzy’s Security and Compliance team’s efforts to produce evidence and documentation for third-party assessment organizations (3PAOs), System Security Plans (SSPs), and architecture diagrams.

Participate in cleared on-call rotations, lead root-cause analyses for production or customer-hosted escalations, and drive automated "fix-forward" reliability improvements.

Lead efforts to architect and deploy resilient infrastructure on AWS GovCloud / Azure Government. Support FedRAMP requirements for at least annual automated fail-over and recovery.

Support FedRAMP vulnerability management handling rules (NTC-0014), POAM, and Incident Response (if any) monthly reporting.