Serious work for people who like to own outcomes.

You will be the right hand to Motavi’s principal. You will run the calendar, the inbox and the follow-through across a portfolio of operating companies and a steady flow of acquisitions. This is a high-trust role with real responsibility for someone who stays ahead of problems.

What you’ll do

• Own the principal’s calendar, correspondence and priorities across time zones
• Prepare briefs, agendas and follow-ups for operating reviews and deal meetings
• Coordinate travel, site visits and closing logistics
• Track commitments across portfolio companies and close the loop on every one
• Handle confidential financial, legal and personnel matters with total discretion

You might be

• 5+ years supporting a founder, C-suite executive or investment principal
• Exceptionally organized, fast and calm under load
• A clear, concise writer who can speak for the principal
• Fluent in Google Workspace or Microsoft 365, with modern tooling to match

Compensation

$160,000–$230,000 base, plus annual bonus and full benefits.

Apply by email →

You will lead deals end to end, from first call with a founder through diligence, structuring, closing and handoff to operations. You will focus on nuclear-capable construction, defense and nuclear specialty contractors, light manufacturing and fabrication.

What you’ll do

• Build proprietary deal flow with owners, brokers and industry relationships
• Lead valuation, diligence, quality-of-earnings and legal workstreams
• Structure and negotiate transactions using principal capital
• Own the first 100 days of integration alongside operating leaders

You might be

• 7+ years in lower-middle-market private equity, a family office, search fund or corporate development
• Fluent in industrial, construction or energy services businesses
• Someone founders trust: direct, respectful and fast

Compensation

$225,000–$300,000 base, plus deal-based bonus and full benefits.

Apply by email →

You will be the analytical engine behind our acquisitions. You will source and screen targets, build models and run diligence on everything from fabrication shops to RV parks and assisted-living communities.

What you’ll do

• Source and qualify targets across our acquisition criteria
• Build operating and valuation models, and write clear investment memos
• Coordinate diligence with accountants, counsel and site inspectors
• Track pipeline and market data across target sectors

You might be

• 2–5 years in investment banking, private equity, real estate or corporate finance
• Excellent at financial modeling and plain-English writing
• Curious about how real businesses make money

Compensation

$150,000–$195,000 base, plus annual bonus and full benefits.

Apply by email →

You will build and maintain the shared software our companies run on: dispatch, field service, quoting, quality documentation and finance integrations. You will also own several of our standalone applications.

What you’ll do

• Design, ship and operate production web applications and APIs
• Integrate ERP, accounting, telematics and field data into one clear picture
• Evaluate the software inside acquisition targets and plan migrations
• Set the engineering standards for a small, senior team

You might be

• 6+ years building and running production software, end to end
• Strong in TypeScript and/or Python, with SQL and cloud infrastructure
• Comfortable talking to a shop foreman as easily as a CFO

Compensation

$185,000–$245,000 base, plus annual bonus and full benefits.

Apply by email →

You will be the senior security engineer for a group of manufacturing, engineering, construction and logistics companies. Several of them handle Controlled Unclassified Information (CUI) for defense and nuclear customers. Most have 20 to 300 employees, a mix of office, shop-floor and field users, and IT that grew up one decision at a time. Your job is to bring all of them to a consistent, auditable standard without slowing down the people who build things.

The environment

• Microsoft 365 and Entra ID across most companies, with GCC High for CUI workloads; Intune and Defender for Endpoint
• AWS for internally built software, managed with our DevOps team
• Shop floors with CNC machines, PLCs, HMIs and engineering workstations that can’t simply be patched on a Tuesday
• Field crews on rugged tablets and laptops, often on cellular connections
• A managed detection and response (MDR) partner for 24/7 monitoring; you own the relationship and the escalations

What you’ll do

• Own the System Security Plans, POA&Ms and SPRS scores for each company handling CUI, and lead them through CMMC Level 2 assessment
• Design and enforce identity standards: Conditional Access, phishing-resistant MFA, privileged access and joiner-mover-leaver processes
• Segment OT networks from business IT, inventory every connected asset, and build safe patch and remote-access processes with plant managers
• Run vulnerability management and configuration baselines across endpoints, servers and cloud accounts
• Lead security diligence on acquisition targets and run a 90-day integration playbook once a company joins
• Write and test the incident response plan, run tabletop exercises with each company’s leadership, and act as incident commander when it counts
• Answer customer security questionnaires and supplier assessments from prime contractors and utilities

Your first 90 days

• Complete a gap assessment against NIST SP 800-171 for each in-scope company
• Close the highest-risk identity and remote-access gaps
• Deliver a prioritized 12-month roadmap with budget, which ownership will actually fund

You might be

• 7+ years in security engineering, with at least a few in a multi-site or multi-entity environment
• Hands-on with NIST SP 800-171, DFARS 252.204-7012 and CMMC 2.0. You have written an SSP someone else had to audit
• Deep in the Microsoft security stack: Entra ID, Intune, Defender, Purview; GCC High experience is a strong plus
• Familiar with industrial networks and protocols (Modbus, EtherNet/IP, OPC UA) and with ISA/IEC 62443 concepts
• Comfortable scripting in PowerShell or Python to automate the boring parts
• Able to explain risk to a plant manager and a CFO in the same afternoon
• Certifications such as CISSP, GICSP or CMMC CCP are welcome but not required

Requirements

• U.S. person status required for access to export-controlled and CUI data
• Occasional travel to sites, roughly 10%
• Participation in an escalation rotation with our MDR partner

Compensation

$185,000–$250,000 base, plus annual bonus and full benefits.

Apply by email →

You will own the AWS foundation that our software and operating companies run on. That covers a multi-account organization, production workloads for our internal and commercial applications, and the steady work of bringing acquired companies’ systems onto a common, secure, cost-effective platform. You will be the person who knows why every account, VPC and IAM role exists.

What you’ll do

• Run our AWS Organizations landing zone: Control Tower, IAM Identity Center, SCPs and account vending
• Manage all infrastructure as code in Terraform, with reviewed, repeatable changes and no console drift
• Operate containerized and serverless workloads on ECS Fargate and Lambda, backed by RDS PostgreSQL, S3 and CloudFront
• Build and maintain CI/CD pipelines in GitLab CI, with OIDC-based deploy roles and no long-lived keys
• Design networking with VPCs, Transit Gateway, PrivateLink, Route 53 and site-to-site VPNs to plants and offices
• Own observability (CloudWatch, OpenTelemetry), backups and tested disaster recovery with defined RPO and RTO
• Treat cost as a feature: tagging standards, Savings Plans, rightsizing and a monthly spend review with ownership
• Migrate acquired companies’ applications, servers and data into the landing zone, and work with security on GovCloud for CUI workloads

You might be

• 6+ years in DevOps, SRE or platform engineering, with most of it spent deep in AWS
• Able to debug an IAM policy evaluation, a VPC routing table and a failing ECS deployment without a tutorial
• Fluent in Terraform, including module design, state management and safe refactors
• Strong in Linux, containers and at least one of Python, Go or Bash for tooling
• Experienced with multi-account security: GuardDuty, Security Hub, Config, CloudTrail and KMS
• AWS Certified Solutions Architect or DevOps Engineer at Professional level is a plus

Requirements

• U.S. person status required for GovCloud and CUI workloads
• A light, shared on-call rotation for production systems

Compensation

$180,000–$240,000 base, plus annual bonus and full benefits.

Apply by email →