Staff Platform Engineer (U.S.-based required)

Arch Systems is seeking a talented Staff Platform Engineer to join their rapidly scaling team. The role focuses on building, securing, and operating the infrastructure that powers their products and customer deployments, emphasizing compliance and operational excellence.

Responsibilities:

• Support deployment and operation of services in FedRAMP High-aligned environments
• Work with compliance platforms and partners to support secure deployment workflows, controls, evidence collection, and operational readiness
• Assist with security and compliance requirements for defense, government, and regulated customers
• Translate compliance obligations into practical engineering work, including infrastructure changes, access controls, logging, monitoring, vulnerability management, change management, incident response, and documentation
• Support future customer-driven compliance initiatives, including additional regulated SaaS or industry-specific security requirements
• Design, deploy, operate, and support cloud infrastructure across AWS and AWS GovCloud
• Build and maintain infrastructure using Infrastructure-as-Code, primarily Terraform
• Operate Kubernetes-based services and Helm-based deployment workflows across multiple environments
• Support production and customer-facing deployments, including regulated and isolated environments
• Improve reliability, observability, access controls, operational runbooks, and supportability of platform systems
• Support regular release operations across multiple environments
• Maintain and improve Helm charts, deployment pipelines, CI/CD workflows, and operational automation
• Participate in incident triage and operational support for platform-owned systems
• Create and maintain runbooks, operational documentation, and escalation paths for regulated deployments
• Improve monitoring, alerting, deployment safety, and operational readiness
• Work across teams on Security and Compliance
• Help customer-facing teams understand technical constraints and operational requirements for regulated deployments
• Provide clear written documentation and status updates for compliance-sensitive infrastructure work
• Mentor and support other engineers on secure infrastructure and compliance-aware operations

Requirements:

• 7+ years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or related roles
• Demonstrated ability to independently own complex infrastructure or operations projects from design through production support
• Hands-on experience operating production infrastructure in AWS
• Hands-on experience owning Infrastructure-as-Code, preferably Terraform
• Hands-on experience operating Kubernetes-based workloads and Helm-based deployments
• Strong understanding of cloud security fundamentals, including IAM, networking, encryption, secrets management, audit logging, vulnerability remediation, and monitoring
• Experience supporting production systems, incident response, operational runbooks, release processes, and post-incident follow-up
• Ability to translate security or compliance requirements into concrete infrastructure, operational, and documentation changes
• Strong written and verbal communication skills, especially for technical documentation, operational procedures, risk explanations, and compliance evidence
• Experience with AWS GovCloud
• Experience with FedRAMP, FedRAMP High, DoD, government, or public-sector cloud environments
• Experience with compliance automation platforms such as Vanta
• Experience with compliance frameworks such as SOC 2, NIST 800-53, NIST 800-171, ISO 27001, or similar
• Experience with FedRAMP accelerators like Knox Systems
• Experience with vulnerability management, container scanning, SBOMs, image hardening, and FIPS compliance
• Experience supporting regulated SaaS or enterprise B2B environments
• Experience with observability tooling like Prometheus, Grafana, CloudWatch, Loki, or similar
• Familiarity working remotely with globally distributed teams