Senior Platform Engineer — Cloud Security & DevSecOps

Socket.dev; Fort Meade, Northern (MD, KY); Hybrid; USD 150,000 - 330,000; Full time

Job summary

Clarity Innovations is seeking a Senior Principal Platform Engineer to bridge compliance strategy with execution across a multi-tenant control plane. You will work with ISSO to translate policy into automated security controls, and implement secure, automated pipelines spanning cloud and air-gapped environments.

The role emphasizes Go/Python development, policy-as-code, and zero-trust networking to maintain an automated, continuously authorized state while collaborating with cross-functional

Qualifications

• 5+ years hands-on platform engineering in cloud infrastructure.
• Experience translating NIST/ RMF into software configurations.
• Proficiency in Go or Python and CI/CD automation.
• SBOM generation, vulnerability scanning, and provenance tooling experience.
• Active DoD Top Secret clearance.
• Experience with zero-trust architectures.

Responsibilities

• Policy-as-Code & control enforcement: translate NIST 800-53 into automated policies and cross-cloud guardrails.
• Automated evidence & ConMon: build pipelines and dashboards to support ATO lifecycle (eMASS/XACTA).
• Secure supply chain: automate SBOM generation, artifact signing, vulnerability scanning, provenance tracking.
• Zero-Trust Infrastructure: configure IAM, secrets management, service mesh, and network segmentation.
• Cross-Team Alignment: convert security requirements into actionable backlog items for engineering teams.

Skills

Platform security

Compliance frameworks

Go and Python

CI/CD automation

Supply chain security

Zero-trust architectures

DoD clearance

Tools

GitLab CI

HashiCorp Vault

SBOM tooling

Policy engines

Job description

Clarity Innovations is seeking a Senior Principal Platform Engineer to bridge compliance strategy with execution across a multi-tenant control plane. You will work with ISSO to translate policy into automated security controls, and implement secure, automated pipelines spanning cloud and air-gapped environments.

The role emphasizes Go/Python development, policy-as-code, and zero-trust networking to maintain an automated, continuously authorized state while collaborating with cross-functional