Sr. Infrastructure Engineer - Deployment Team

We are seeking a Senior Platform Services Engineer to join our Platform Services team within Customer Success. This role is central to deploying, operating, and supporting the Istari platform across customer environments, from pre-sales technical scoping through production operations and ongoing support.

This engineer will work directly with customers and cross-functionally with sales, product engineering, and infrastructure teams to deliver reliable, secure platform deployments. Our customers include defense, aerospace, and commercial organizations operating in regulated, security-sensitive environments; this engineer should be comfortable operating within established security and compliance baselines across AWS GovCloud, Azure IL5, on-premises, and air-gapped networks.

The ideal candidate combines strong hands-on infrastructure expertise with customer-facing communication skills, a consulting mindset, and a bias toward automation.

• Deploy and maintain the Istari platform in customer environments using Terraform and Helm across multiple deployment variants (EKS, AKS, OpenShift, on-premises Kubernetes)

• Support customer networking requirements including firewall rule scoping, VPN/IPSec configuration, DNS coordination, and connectivity troubleshooting

• Configure and troubleshoot identity provider integrations (Zitadel, SAML, OIDC, SSO with KeyCloak, PingFederate, Okta, Azure AD)

• Enable and operate services for cross-organization data sharing, including Secure Sync deployment, KMS policy exchange, IAM roles, and S3 access configuration

• Build and maintain infrastructure-as-code packages and reference architectures for customer-managed deployments

• Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely customer communication

• Minimum of 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering

• Solid understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management

• Experience with identity providers and federation protocols (SAML, OIDC, SSO, Active Directory)

• Database knowledge including transaction write-ahead logging, backup/restore operations, and monitoring

• Experience with graph query languages (SPARQL, Cypher, DQL, or similar)

• Proven experience operating Kubernetes in production

• Experience with Helm charts and Kubernetes application packaging

• Scripting proficiency in Python, Bash, or Ansible

• Experience working directly with external customers in a technical delivery or consulting capacity

• Excellent troubleshooting and problem-solving skills in complex production environments

• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders

• U.S. Citizen

Preferred Qualifications

• Experience with AWS GovCloud, Azure Government (IL4/IL5), or other regulated cloud environments

• Experience with OpenShift, ROSA, or non-standard Kubernetes distributions

• Familiarity with compliance or security frameworks such as FedRAMP, NIST, SOC 2, CMMC, or similar

• Industry certifications such as CompTIA (Network+, Security+, Linux+), AWS Solutions Architect Associate, AWS SysOps Administrator Associate, Azure Administrator Associate, or similar

• Experience with network analysis tools (Wireshark, tcpdump)

• Experience with PostgreSQL, cloud storage platforms, and production networking patterns

• Experience with service mesh or advanced Kubernetes networking (Istio, Envoy)

• Active security clearance (Secret or Top Secret)