Job Opportunities API

At Aviture, we’re a team of builders—creating mission-critical software that empowers our customers and makes a real impact. We’re looking for a senior-level engineer who thrives on solving complex problems, cares about good architecture, and wants to work on systems that matter. Clearance: Active TS/SCI (or TS with SCI eligibility) required; CI poly preferred. Worksite: On-site (Omaha, NE + customer sites CONUS); periodic work inside IL5/IL6 enclaves. Citizenship: U.S. only (government program requirement). Mission Guardian is Aviture’s C2/situational-awareness platform used by USAF , AFRC , USSTRATCOM , and DOS (VIP protection/panic). You’ll build and operate multi-domain, real-time capabilities in air-gapped and GovCloud environments with strict RMF/ATO controls. What You’ll Do Design and ship real-time command-and-control workflows (tasking, tracks, alerts, deconfliction) across air/ground teams. Build mobile + web mapping with tactical overlays , historical replay, and multi-user collaboration/markup/reporting . Integrate sensors & comms (e.g., CoT/TAK, ADS-B, AIS, Iridium SBD, SATCOM/radio gateways, BFT) into Guardian data planes. Implement operational chat/voice/video (XMPP/Matrix/WebRTC/WebSockets) with message persistence and audit in IL5/IL6. Engineer multi-level security (MLS) patterns and cross-domain flows (data diode/CDS policy) for SA feeds and alerts. Own DevSecOps in restricted networks: reproducible builds, SBOMs, STIG-hardened images, signed artifacts, and offline updates Why this is hard (and worth it) You’ll be building capabilities operators rely on in the field. It’s real time , real users , and zero room for brittle code . If you’ve only done green-field SaaS, this will feel like another planet—in a good way. Requirements Must-have experience (no exceptions) 5+ years building real-time systems with Java 17+/Spring Boot and Node.js/TypeScript , plus React (or React Native) for operational UIs. OGC/Geo standards in production: WMS/WFS/WMTS , GeoJSON , KML , tiling pipelines; CesiumJS or Mapbox GL . TAK/CoT ecosystem: generating/consuming Cursor-on-Target ; familiarity with ATAK plugins or TAK Server integration. Streaming & messaging: Kafka (or NATS/RabbitMQ) + schema mgmt ( Protobuf/Avro ); back-pressure and exactly-once patterns. Gov environments: Delivered software inside AWS GovCloud (IL4/5) and on-prem IL5/IL6 with RMF Steps 1-6 , eMASS , POA&M/SPR; contributed content to an ATO package. Security hardening: Implemented DISA STIG/SRG , FIPS 140-2/3 crypto, PKI (smartcard/PIV), authZ with ABAC/RBAC . Observability: Prometheus/Grafana + ELK/Opensearch in disconnected enclaves; red/black deployment in air-gapped sites. Multi-tenant, multi-domain EA: boundary services (NIPR/SIPR/JWICS), data labeling/marking, and release control across domains. Nice-to-have (we’ll ask you about it) C2/JADC2 touchpoints (Link-16 familiarity, J-series semantics, not necessarily waveform). Cross Domain Solutions (e.g., Radiant Mercury, Forcepoint) policy scripting or deployment experience. Geospatial toolchain: GDAL, tippecanoe, MBTiles, vector tile pipelines, geofencing at scale. Mobile ops: Offline-first data sync, background location, and crypto at rest on iOS/Android . DoD 8570 : Security+ CE (min), CASP/CISSP nice. Infrastructure: K8s (RKE/KE), Packer/Ansible, HashiCorp Vault, artifact signing (cosign/Sigstore). Day-to-day constraints you’re comfortable with Working inside a SCIF , no external package registries, artifact whitelists , and change control boards . 2-hour incident response windows for operational outages; on-call rotation shared by the team. Writing to operational runbooks , not just code comments. Benefits PPO or a High Deductible Health Plan, HSA eligible plan, Dental, Vision, and Supplement