Senior Platform Engineer, Security
Simplesense2 months ago
Remote, United States or Denver, CO, USASenior
Base Salary
$180k - $235k/yr
Responsibilities
- Translate compliance baselines into automated configuration-management playbooks for enterprise security tools.
- Build, maintain, and scale infrastructure-as-code deployments for operational environments and tools.
- Automate user provisioning and access using application features, APIs, and infrastructure-as-code methods.
- Embed security concepts and tooling into development and deployment pipelines through DevSecOps practices.
- Implement and harden automated security groups, network policies, firewalls, and cloud infrastructure for secure data segmentation.
- Deploy, configure, and maintain secure package-management proxies and local repositories.
- Write reusable infrastructure code, configuration scripts, and API integrations for secure-by-default platform architecture.
- Collaborate with engineering and security teams to integrate security tools into infrastructure pipelines and resolve deployment bottlenecks.
Requirements
- 5–10 years of professional experience in platform engineering, systems administration, cloud engineering, or DevSecOps with an emphasis on security and automation.
- Deep hands-on experience deploying, configuring, and tuning enterprise security tooling.
- Experience managing infrastructure-as-code with tools such as CloudFormation, Terraform, OpenTofu, or Ansible across hybrid environments.
- Strong experience using application APIs for configuration automation and management.
- Understanding of secure software supply chain mechanics, package repositories, artifact management, and proxy configurations.
- Strong AWS cloud engineering and security experience, including network topology automation, firewalls, autoscaling groups, SecurityHub, GuardDuty, and Inspector.
- Familiarity with NIST 800-53 and NIST 800-82 compliance.
- U.S. citizenship and ability to obtain a DoD NIPR network account and Common Access Card.
- Current DoD 8140 Intermediate or Advanced Foundational Qualification, or ability to obtain it within 90 days of hire.
- Secret Clearance, or ability to obtain one.
- Preferred experience in OT, ICS/SCADA, industrial technology, and OT/CS security tooling such as Nozomi.
- Preferred familiarity with the DoD Zero Trust strategy and target-level objectives.
- Relevant certifications such as AWS Certified Security - Specialty, GIAC GICSP/GRID, or CISSP are preferred.
- Preferred experience automating NIST 800-53 frameworks or DISA STIG compliance.
Benefits
- Equity
- Medical, life, short-term disability, and AD&D insurance
- Medical travel coverage
- Dental coverage
- Vision coverage
- 401k matching
- Hybrid work arrangement in the United States
About Simplesense
Simplesense builds, deploys, and sustains the Installation Resilience Platform that enables mission operators to rapidly adapt and respond. The Platform protects critical infrastructure from cyber attack while unlocking previously siloed information to monitor, diagnose, and improve response times to incidents. Our adversaries rapidly adopt the latest technology: we help defense users respond in kind.