Platform Engineer

Second Front Systems, Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health & Wellness

PTO & Remote First

401(k) & Equity

Professional Development

Job summary

Second Front Systems, Inc. is seeking an infrastructure-focused Platform Engineer to strengthen our Platform Engineering function across European regulated environments.

You’ll deploy, operate, and maintain Game Warden across AWS, Azure, GCP, and sovereign-cloud regions, delivering secure, repeatable platform patterns that meet sovereignty and accreditation needs. You will land zones with IaC, govern Kubernetes, and drive compliant CI/CD, monitoring, and security controls at scale, collaborating

Qualifications

• Hands-on IaC with Terraform, CloudFormation, or Pulumi.
• Production-grade Kubernetes and container orchestration in live systems.
• 5+ years in platform engineering, DevSecOps, or SRE.
• Experience building secure CI/CD pipelines under high-assurance compliance.
• Fluent English and collaboration across distributed teams.
• AWS/Azure/GCP at scale; sovereignty/compliance focus.
• Experience in air-gapped or regulated environments.
• Government or NATO security clearance or eligibility.

Responsibilities

• Deploy Game Warden and other products across cloud regions per specs.
• Build landing zones and reference architectures with IaC.
• Operate and maintain secure CI/CD pipelines and observability.
• Ensure sovereignty, accreditation, and regulatory compliance.
• Provide runbooks and technical evidence for deployments.
• Govern Kubernetes and container runtimes across environments.
• Collaborate with platform and engineering teams to resolve constraints.
• Sequence platform rollouts and upgrades to minimize disruption.

Skills

Platform engineering

DevSecOps

Cloud infrastructure

CI/CD pipelines

Go/Python/Rust scripting

Kubernetes

AWS/Azure/GCP

Security clearance eligibility

English communication

Tools

Terraform

CloudFormation

Pulumi

Job description

• Second Front Systems is looking for an infrastructure-focused, compliance-minded, operationally disciplined Platform Engineer to strengthen our Platform Engineering function across European regulated environments
• This role sits at the intersection of systems, tooling, and engineering — translating infrastructure reliability and deployment velocity into warfighter-ready software delivery. You’ll be responsible for deploying, operating, and maintaining Game Warden across EMEA cloud environments while establishing secure, repeatable platform patterns that satisfy sovereignty and assurance requirements
• You’ll build landing zones and reference architectures using infrastructure-as-code and cloud-native tooling, keeping European deployments aligned with our global platform patterns while preserving accreditation inheritance across target environments
• We need someone who can operate cloud-native infrastructure at production scale; build and maintain secure CI/CD pipelines, monitoring, and observability for regulated and potentially air-gapped environments; and produce the technical evidence and documentation needed to support applicable European security, accreditation, and regulatory requirements
• As a key partner to our implementation and delivery teams, you’ll prepare production environments and hand them off with complete runbooks and technical evidence — serving as the operational bridge between platform architecture and customer deployment
• Deploy Game Warden and other Second Front products across AWS, Azure, GCP, and sovereign-cloud infrastructure in European regions, to specification
• Architect landing zones that satisfy sovereignty, customer-control, and GDPR requirements without single-vendor lock-in
• Govern Kubernetes, container runtimes, and infrastructure-as-code tooling to enforce repeatability across deployments
• Drive CI/CD, networking, identity, observability, and security controls against target-environment constraints and threat models
• Implement the technical controls and documentation required for EAL, FedRAMP, GovRAMP, NATO, UK MOD, or equivalent customer accreditation regimes
• Translate engineering tooling requirements into platform specifications, ensuring CI/CD, containerization, and accreditation workflows meet time-sensitive delivery windows
• Work with platform and engineering leads to resolve conflicts between automation, hardening, and operational constraints
• Sequence platform rollouts and upgrades to minimize disruption to active development while maintaining compliance posture and system hardening

Benefits

• Health & Wellness: Receive 100% medical, dental, and vision coverage for you and your family.
• PTO & Remote First: We provide flexible time off, recognize 11 federal holidays, and offer paid parental leave.
• 401(k) & Equity: Invest in your future. Our 401(k) and equity incentives help you build wealth as we grow together.
• Professional Development: We value your drive to grow and provide an annual stipend for self-directed professional development.

• EU citizenship (any of the 27 EU member states) and the right to work in the EUHands-on experience writing and maintaining infrastructure-as-code with Terraform, CloudFormation, or Pulumi
• Working knowledge of networking, IAM, SAML/OAuth, APIs, and distributed-systems troubleshooting in production
• Production-grade Kubernetes and container orchestration experience in live systems
• 5+ years of hands-on platform engineering, DevSecOps, cloud infrastructure, SRE, or systems engineering experience in production environments
• A track record building, securing, and operating CI/CD pipelines under regulatory or high-assurance compliance requirements
• Fluent English and a proven ability to collaborate asynchronously across distributed global engineering teams
• Deep fluency with AWS, Azure, GCP, or equivalent cloud platforms operating at scale
• Existing government or NATO security clearance, or eligibility to obtain one
• Experience operating in air-gapped, classified, or other high-assurance environments
• Familiarity with EAL/Common Criteria, FedRAMP, GovRAMP, NATO, or UK MOD accreditation processes; and/or familiarity with other frameworks such as NIS-2, CRA, etc
• Proficiency in a systems or scripting language (e.g., Go, Python, or Rust) for building internal tooling