Staff Platform Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Design, secure, and manage the infrastructure that powers Arch Systems products and customer implementations.

• Create, deploy, manage, and enhance infrastructure across both commercial AWS and AWS GovCloud environments.

• Provide support for services in environments aligned with FedRAMP High standards.

• Collaborate with compliance platforms and partners to establish secure deployment workflows, controls, evidence collection, and ensure operational readiness.

• Convert compliance requirements into actionable infrastructure, including access control, logging, monitoring, vulnerability management, change management, incident response, and documentation tasks.

• Develop and maintain Infrastructure-as-Code, primarily using Terraform.

• Manage Kubernetes workloads and Helm-based deployments across various environments.

• Provide support for production and customer-facing deployments, including regulated and isolated settings.

• Enhance reliability, observability, access controls, runbooks, and platform maintainability.

• Assist in release operations across multiple environments.

• Maintain and enhance Helm charts, deployment pipelines, CI/CD workflows, and operational automation.

• Engage in incident triage and operational support.

• Create and maintain runbooks, operational documentation, and escalation procedures.

• Improve monitoring, alerting, deployment safety, and operational readiness.

• Collaborate with Security, Compliance, and customer-facing teams.

• Mentor and guide engineers on secure infrastructure and compliance-aware operations.

⛳️ Requirements

• Over 7 years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or similar roles.

• Proven ability to independently manage complex infrastructure or operations projects from design to production support.

• Practical experience in operating production infrastructure within AWS.

• Direct experience managing Infrastructure-as-Code, preferably using Terraform.

• Hands-on experience with Kubernetes-based workloads and Helm-based deployments.

• Solid understanding of cloud security principles, including IAM, networking, encryption, secrets management, audit logging, vulnerability remediation, and monitoring.

• Experience in supporting production systems, incident response, operational runbooks, release processes, and post-incident follow-ups.

• Ability to translate security or compliance needs into infrastructure, operational, and documentation modifications.

• Excellent written and verbal communication skills for technical documentation, operational procedures, risk analyses, and compliance evidence.

• Candidates must be U.S. citizens.

• Resumes should be submitted in English.

• Visa sponsorship is not available.

• Experience with AWS GovCloud, FedRAMP/FedRAMP High, DoD, government, or public-sector cloud environments is a significant advantage.

• Familiarity with Vanta, SOC 2, NIST 800-53, NIST 800-171, ISO 27001, Knox Systems, vulnerability management, container scanning, SBOMs, image hardening, FIPS compliance, regulated SaaS, observability tools, or working with globally distributed teams is a notable qualification.

🏝️ Benefits

• 10% discretionary performance bonus.

• Equity awards.

• Non-qualified stock options (NQSOs) for international hires through approved global employment partners.

• Comprehensive medical, dental, and vision coverage for U.S.-based employees and their dependents.

• Retirement contributions.

• Programs promoting wellbeing and professional development.

• Flexibility for remote work.

• Opportunities for professional development and career advancement.

• Collaborative, multidisciplinary work environment.

• Flexible and inclusive workplace culture.