Senior Software Architect – Secure Embedded Fleet Platform

Amazon; Herndon (VA); On-site; USD 168,000 - 227,000; Full time

Benefits offered by this job

Health insurance

RSUs

Job summary

Bespoke Solutions is seeking a Senior Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across secure environments.

The role sits at the intersection of distributed systems, security engineering, and fleet operations, with a US citizenship/TS/SCI clearance requirement and a path to polygraph-backed credentials. Arlington, VA area, on-site duties and AWS-aligned tech.

Qualifications

• 7+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems.
• 5+ years of non-internship professional software development experience.
• 5+ years of programming with at least one software programming language experience.
• Experience as a mentor, tech lead or leading an engineering team.
• Strong background in security-hardened system design, including PKI, mutual TLS, and cryptographic signing.
• Proficiency with PostgreSQL or similar relational databases, including row-level security and policy-based access control.
• Current, active US Government Security Clearance of Top Secret with SCI eligibility or above.

Responsibilities

• Architect and develop a decomposed, microservices-based platform comprising independently deployable and horizontally scalable subsystems (fleet management, rule execution, device communication, logging, security, and presentation layers)
• Design and implement secure inter-service communication across both control plane (REST/mTLS) and high-throughput data plane (streaming) protocol surfaces
• Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments
• Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting — designed to scale from single-tenant to hundreds of tenants over a 5-year horizon
• Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging
• Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails
• Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries
• Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections

Skills

System design

Security clearance

Mentorship

PostgreSQL

PKI / TLS

ABAC / RBAC

Cryptography

Education

Bachelor's degree in computer science or equivalent

Tools

PostgreSQL

Job description

Bespoke Solutions is seeking a Senior Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across secure environments.

The role sits at the intersection of distributed systems, security engineering, and fleet operations, with a US citizenship/TS/SCI clearance requirement and a path to polygraph-backed credentials. Arlington, VA area, on-site duties and AWS-aligned tech.