# Senior Software Engineer - Guardian (C2/SA/Multi-Domain) TS Clearance Required

> Aviture · Omaha, United States · Full-time · Posted 2025-11-21

**Workplace:** on_site

**Department:** Engineering

## Description

At Aviture, we’re a team of builders—creating mission-critical software that empowers our customers and makes a real impact. We’re looking for a senior-level engineer who thrives on solving complex problems, cares about good architecture, and wants to work on systems that matter.

**Clearance:** Active TS/SCI (or TS with SCI eligibility) required; CI poly preferred.  
**Worksite:** On-site (Omaha, NE + customer sites CONUS); periodic work inside IL5/IL6 enclaves.  
**Citizenship:** U.S. only (government program requirement).

**Mission**

Guardian is Aviture’s C2/situational-awareness platform used by **USAF**, **AFRC**, **USSTRATCOM**, and **DOS** (VIP protection/panic). You’ll build and operate multi-domain, real-time capabilities in **air-gapped** and **GovCloud** environments with strict **RMF/ATO** controls.

**What You’ll Do**

-   Design and ship **real-time command-and-control workflows** (tasking, tracks, alerts, deconfliction) across air/ground teams.
-   Build **mobile + web mapping** with **tactical overlays**, historical replay, and multi-user **collaboration/markup/reporting**.
-   Integrate **sensors & comms** (e.g., CoT/TAK, ADS-B, AIS, Iridium SBD, SATCOM/radio gateways, BFT) into Guardian data planes.
-   Implement **operational chat/voice/video** (XMPP/Matrix/WebRTC/WebSockets) with message persistence and audit in IL5/IL6.
-   Engineer **multi-level security (MLS)** patterns and **cross-domain** flows (data diode/CDS policy) for SA feeds and alerts.
-   Own **DevSecOps** in restricted networks: reproducible builds, SBOMs, STIG-hardened images, signed artifacts, and offline updates

**Why this is hard (and worth it)**

You’ll be building capabilities operators rely on in the field. It’s **real time**, **real users**, and **zero room for brittle code**. If you’ve only done green-field SaaS, this will feel like another planet—in a good way.

## Requirements

**Must-have experience (no exceptions)**

-   **5+ years** building **real-time** systems with **Java 17+/Spring Boot** and **Node.js/TypeScript**, plus **React** (or React Native) for operational UIs.
-   **OGC/Geo standards** in production: **WMS/WFS/WMTS**, **GeoJSON**, **KML**, tiling pipelines; **CesiumJS** or **Mapbox GL**.
-   **TAK/CoT** ecosystem: generating/consuming **Cursor-on-Target**; familiarity with **ATAK** plugins or TAK Server integration.
-   **Streaming & messaging:** **Kafka** (or NATS/RabbitMQ) + schema mgmt (**Protobuf/Avro**); back-pressure and exactly-once patterns.
-   **Gov environments:** Delivered software inside **AWS GovCloud (IL4/5)** and **on-prem IL5/IL6** with **RMF Steps 1-6**, **eMASS**, POA&M/SPR; contributed content to an **ATO** package.
-   **Security hardening:** Implemented **DISA STIG/SRG**, **FIPS 140-2/3** crypto, **PKI** (smartcard/PIV), authZ with **ABAC/RBAC**.
-   **Observability:** **Prometheus/Grafana** + **ELK/Opensearch** in disconnected enclaves; red/black deployment in air-gapped sites.
-   **Multi-tenant, multi-domain EA:** boundary services (NIPR/SIPR/JWICS), data labeling/marking, and release control across domains.

**Nice-to-have (we’ll ask you about it)**

-   **C2/JADC2** touchpoints (Link-16 familiarity, J-series semantics, not necessarily waveform).
-   **Cross Domain Solutions** (e.g., Radiant Mercury, Forcepoint) policy scripting or deployment experience.
-   **Geospatial toolchain:** GDAL, tippecanoe, MBTiles, vector tile pipelines, geofencing at scale.
-   **Mobile ops:** Offline-first data sync, background location, and crypto at rest on **iOS/Android**.
-   **DoD 8570**: Security+ CE (min), CASP/CISSP nice.
-   **Infrastructure:** K8s (RKE/KE), Packer/Ansible, HashiCorp Vault, artifact signing (cosign/Sigstore).

**Day-to-day constraints you’re comfortable with**

-   Working **inside a SCIF**, no external package registries, **artifact whitelists**, and **change control boards**.
-   **2-hour incident response** windows for operational outages; on-call rotation shared by the team.
-   Writing to **operational runbooks**, not just code comments.

## Benefits

-   PPO or a High Deductible Health Plan, HSA eligible plan, Dental, Vision, and Supplemental Life.
-   Generous paid time off that starts accruing on day one.
-   Hybrid work environment with quarterly Castaway Week events in the Omaha HQ Office, all expenses paid, from across the country to participate in team-building, collaboration, and fun events.
-   Company vacations!!! Previous destinations have included Napa Valley, Cancun, Cabo San Lucas and Aspen.
-   Matching 401k with 100% vesting in six months.
-   Pick your preferred workstation! Mac? PC? We’ll support you with the tech you need to do your best work.
-   Get paid to go to national and international conferences and training, so that you can stay up to date with the latest innovations.
-   Flexible work schedules: Work the times that fits your schedule, with all meetings required to be scheduled between 9 am and 3 pm CST.
-   Free lunch every Friday and recurring team events for you and your family to enjoy.
-   Incentive and bonus pay.
-   Opportunities for connection and growth through peer coaching, recurring Lightning Talks to share things we’re passionate about, and a bi-weekly company-wide All Hands.

## Apply

[Apply at Aviture](https://apply.workable.com/aviture/j/40CDBCC467/apply)

---
Powered by [Workable](https://www.workable.com)