Note: The job is a remote job and is open to candidates in USA. Arch Systems empowers discrete manufacturing facilities with deep data insights that enable optimal efficiency, precise KPIs, and proactive decision-making. The Staff Platform Engineer will design, deploy, operate, and improve secure cloud infrastructure across AWS and AWS GovCloud, with a focus on regulated and defense-related deployments. The role also supports compliance engineering, infrastructure automation, platform reliability, release operations, incident response, and operational documentation.
Responsibilities
- Support deployment and operation of services in FedRAMP High-aligned environments
- Work with compliance platforms and partners to support secure deployment workflows, controls, evidence collection, and operational readiness
- Assist with security and compliance requirements for defense, government, and regulated customers
- Translate compliance obligations into practical engineering work, including infrastructure changes, access controls, logging, monitoring, vulnerability management, change management, incident response, and documentation
- Support future customer-driven compliance initiatives, including additional regulated SaaS or industry-specific security requirements
- Design, deploy, operate, and support cloud infrastructure across AWS and AWS GovCloud
- Build and maintain infrastructure using Infrastructure-as-Code, primarily Terraform
- Operate Kubernetes-based services and Helm-based deployment workflows across multiple environments
- Support production and customer-facing deployments, including regulated and isolated environments
- Improve reliability, observability, access controls, operational runbooks, and supportability of platform systems
- Support regular release operations across multiple environments
- Maintain and improve Helm charts, deployment pipelines, CI/CD workflows, and operational automation
- Participate in incident triage and operational support for platform-owned systems
- Create and maintain runbooks, operational documentation, and escalation paths for regulated deployments
- Improve monitoring, alerting, deployment safety, and operational readiness
- Work across teams on Security and Compliance
- Help customer-facing teams understand technical constraints and operational requirements for regulated deployments
- Provide clear written documentation and status updates for compliance-sensitive infrastructure work
- Mentor and support other engineers on secure infrastructure and compliance-aware operations
Skills
- The role is open to candidates based in the United States
- Due to the nature of the work and the environments supported by this position, candidates must be U.S. citizens
- • 7+ years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or related roles
- • Demonstrated ability to independently own complex infrastructure or operations projects from design through production support
- • Hands-on experience operating production infrastructure in AWS
- • Hands-on experience operating Kubernetes-based workloads and Helm-based deployments
- • Strong understanding of cloud security fundamentals, including IAM, networking, encryption, secrets management, audit logging, vulnerability remediation, and monitoring
- • Experience supporting production systems, incident response, operational runbooks, release processes, and post-incident follow-up
- • Ability to translate security or compliance requirements into concrete infrastructure, operational, and documentation changes
- • Strong written and verbal communication skills, especially for technical documentation, operational procedures, risk explanations, and compliance evidence
- • Hands-on experience owning Infrastructure-as-Code, preferably Terraform
- • Experience with AWS GovCloud
- • Experience with FedRAMP, FedRAMP High, DoD, government, or public-sector cloud environments
- • Experience with compliance automation platforms such as Vanta
- • Experience with compliance frameworks such as SOC 2, NIST 800-53, NIST 800-171, ISO 27001, or similar
- • Experience with FedRAMP accelerators like Knox Systems
- • Experience with vulnerability management, container scanning, SBOMs, image hardening, and FIPS compliance
- • Experience supporting regulated SaaS or enterprise B2B environments
- • Experience with observability tooling like Prometheus, Grafana, CloudWatch, Loki, or similar
- • Familiarity working remotely with globally distributed teams
Benefits
- 10% discretionary performance bonus based upon qualifications and experience
- Equity ownership
- Remote-first work culture with flexibility and balance
- Professional development with pathways for skill enhancement, leadership growth, and increasing product vision expertise
- For U.S.-based employees: comprehensive medical, dental, and vision coverage for employees and dependents
- For U.S.-based employees: retirement contributions
- For U.S.-based employees: additional programs that support wellbeing and professional development
- International candidates hired through approved global employment partners receive regionally competitive benefits
- International candidates hired through approved global employment partners are eligible for non-qualified stock options (NQSOs)
- Collaborative environment with continuous learning, mutual respect, and cross-functional collaboration
Company Overview