Infrastructure Engineer - Deployment Team

Istari; United States; On-site; USD 143,000 - 165,000; Full time

Job summary

Istari is seeking a Senior Platform Services Engineer to deploy, operate, and support the Istari platform across customer environments, from pre-sales scoping through production operations and ongoing support.

The role collaborates with sales, product engineering, and infrastructure teams to deliver secure, compliant deployments in regulated environments, including AWS GovCloud and on-prem networks. Strong automation and customer communication are essential.

Qualifications

• Minimum 5 years in DevOps, Infra Eng, Net Eng, Platform Eng, or SRE.
• Strong cloud networking, VPN/IPSec, firewalls, IAM, and secrets.
• Experience with identity providers and federation protocols (SAML, OIDC, SSO).
• Knowledge of DBs including WAL, backups, monitoring.
• Experience with Kubernetes production and packaging with Helm.

Responsibilities

• Deploy and maintain the Istari platform in customer environments using Terraform and Helm across EKS, AKS, OpenShift, and on-prem clusters.
• Support customer networking—firewalls, VPN/IPSec, DNS, and connectivity troubleshooting.
• Configure and troubleshoot identity provider integrations (SAML, OIDC, SSO with KeyCloak, Okta, Azure AD).
• Enable Secure Sync, KMS policy exchange, IAM roles, and S3 access configuration.
• Build IaC packages and reference architectures for customer deployments.
• Monitor and troubleshoot complex infra issues with clear communication.

Skills

Kubernetes

Terraform

Python

Bash

SSO/OIDC

Network security

Helm

Zitadel

Tools

Helm

Zitadel

Okta

Job description

We are seeking a Senior Platform Services Engineer to join our Platform Services team within Customer Success. This role is central to deploying, operating, and supporting the Istari platform across customer environments, from pre-sales technical scoping through production operations and ongoing support.

This engineer will work directly with customers and cross-functionally with sales, product engineering, and infrastructure teams to deliver reliable, secure platform deployments. Our customers include defense, aerospace, and commercial organizations operating in regulated, security-sensitive environments; this engineer should be comfortable operating within established security and compliance baselines across AWS GovCloud, Azure IL5, on-premises, and air-gapped networks.

The ideal candidate combines strong hands-on infrastructure expertise with customer-facing communication skills, a consulting mindset, and a bias toward automation.

Core Responsibilities

• Deploy and maintain the Istari platform in customer environments using Terraform and Helm across multiple deployment variants (EKS, AKS, OpenShift, on-premises Kubernetes)

• Support customer networking requirements including firewall rule scoping, VPN/IPSec configuration, DNS coordination, and connectivity troubleshooting

• Configure and troubleshoot identity provider integrations (Zitadel, SAML, OIDC, SSO with KeyCloak, PingFederate, Okta, Azure AD)

• Enable and operate services for cross-organization data sharing, including Secure Sync deployment, KMS policy exchange, IAM roles, and S3 access configuration

• Build and maintain infrastructure-as-code packages and reference architectures for customer-managed deployments

• Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely customer communication

Qualifications

• Minimum of 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering

• Solid understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management

• Experience with identity providers and federation protocols (SAML, OIDC, SSO, Active Directory)

• Database knowledge including transaction write-ahead logging, backup/restore operations, and monitoring

• Experience with graph query languages (SPARQL, Cypher, DQL, or similar)

• Proven experience operating Kubernetes in production

• Experience with Helm charts and Kubernetes application packaging

• Scripting proficiency in Python, Bash, or Ansible

• Experience working directly with external customers in a technical delivery or consulting capacity

• Excellent troubleshooting and problem-solving skills in complex production environments

• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders

• U.S. Citizen

Preferred Qualifications

• Experience with AWS GovCloud, Azure Government (IL4/IL5), or other regulated cloud environments

• Experience with OpenShift, ROSA, or non-standard Kubernetes distributions

• Familiarity with compliance or security frameworks such as FedRAMP, NIST, SOC 2, CMMC, or similar

• Industry certifications such as CompTIA (Network+, Security+, Linux+), AWS Solutions Architect Associate, AWS SysOps Administrator Associate, Azure Administrator Associate, or similar

• Experience with network analysis tools (Wireshark, tcpdump)

• Experience with PostgreSQL, cloud storage platforms, and production networking patterns

• Experience with service mesh or advanced Kubernetes networking (Istio, Envoy)

• Active security clearance (Secret or Top Secret)

About Istari Digital

Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels -- whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.

Focus is rewarded. Finish is remembered.

Facts are friendly. Even when they are not fun.

Fellowship is fundamental. Make others successful.

143000 - 165000 USD a year

• In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.