Staff Data Engineer - TS/SCI Cleared

About the Company America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences. Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure. Founded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends identify anomalies and degradations before they become incidents. In an air-gapped environment, efficiency compounds. Build and improve the dashboards and alerts that make pipeline health visible, both on-site and to the Arlington team. Incident Response you investigate, form a design, and deliver without waiting for a spec. You respond with urgency to operational issues and own resolution within your sphere. You're unafraid to call an incident when the signal warrants it. You proactively create and update runbooks and documentation for the components you own. In an environment the rest of the team can't access, what you write down is what they know. You make informed decisions by consulting the right stakeholders and balancing detail with the big picture, and you execute against the spirit of the requirement, not just the letter. You actively seek out and eliminate sources of toil. Repetitive manual work in a constrained environment is a design problem, and you treat it like one. You understand the customer and the mission well enough to know which work has the greatest impact, and you redirect your focus when what you're doing isn't moving the needle. You tailor your communication to your audience, whether that's a product engineer in Arlington, a DevSecOps teammate, or a non-technical customer stakeholder, and you proactively share information so the right people stay informed and aligned. You're comfortable operating in secure environments where tooling is limited, internet access is not a given, and the stakes are real. Must Have 5+ years of experience in data engineering, or software engineering with a substantial data infrastructure focus. Strong programming ability in Python or Go, with code quality good enough that remote teammates can review, extend, and trust it. Hands‑on experience building ETL/ELT pipelines (example technologies: Airflow, NiFi, AWS Glue, or equivalent custom pipeline development). Strong SQL and schema design skills, including the ability to analyze access patterns and make sound partitioning and indexing decisions. Experience debugging production data systems: reading logs, tracing failures across components, and root-causing issues under time pressure. Experience in a forward deployed, field engineering, or embedded customer-facing engineering role, with demonstrated ability to work independently, including sound judgment about when to decide and when to decide and when to Ability to work on-site full-time at a government facility in Northern Virginia, with travel to Arlington, VA (typically 4 days per month). Nice to Have Experience with data lake and large-scale query technologies (example technologies: Apache Iceberg, Delta Lake, Trino, Presto, Spark, Athena). Experience with streaming and message queue technologies (example technologies: Kafka, NATS, Kinesis, RabbitMQ). Hands‑on experience with observability tooling (Grafana, Datadog, Splunk, or similar). Experience deploying and operating software in air-gapped, classified, or otherwise restricted environments. Background in a military, intelligence, or defense contracting environment. Familiarity with containerized environments (Docker, Docker Compose) and CI/CD concepts. Tech Environment (You Might Work With) Cloud: AWS (EC2, ECS, RDS, CloudWatch) in closed enclave environments Containers: Docker, Docker Compose Observability: Grafana, Loki, Tempo, Mimir (LGTM stack) Alerting / on-call: PagerDuty Messaging: NATS Databases: PostgreSQL Data integration: Twenty's purpose-built data platform and integration layer (in active development) Languages in use across engineering: Go, TypeScript, Python Security / Work Environment This role requires an active TS/SCI with full-scope polygraph . Work is performed on-site at a government facility in Northern Virginia, with travel to Twenty's Arlington, VA office typically 4 days per month. Access to systems is restricted and tooling constraints apply. Benefits What's on the table: Health. Medical, dental, and vision plan options. Life / AD