Platform Engineer

Second Front Systems•Washington, DC

4d•Remote

About The Position

Second Front Systems is seeking an infrastructure-focused, compliance-minded Platform Engineer to support its Platform Engineering function across European regulated environments. The role deploys, operates, and maintains Game Warden and other Second Front products across EMEA cloud environments, while establishing secure, repeatable platform patterns that meet sovereignty and assurance requirements. It includes building landing zones and reference architectures with infrastructure-as-code and cloud-native tooling, aligning European deployments with global platform patterns, and preserving accreditation inheritance across target environments. The Platform Engineer will operate production-scale cloud-native infrastructure; build and maintain secure CI/CD pipelines, monitoring, and observability for regulated and potentially air-gapped environments; and produce technical evidence and documentation supporting applicable European security, accreditation, and regulatory requirements. The role partners with implementation and delivery teams to prepare production environments and hand them off with complete runbooks and technical evidence, bridging platform architecture and customer deployment. This is a full-time, remote position based anywhere in the EU. Applicants must be citizens of an EU member state and have the right to work in the European Union. Compensation is stated in EUR.

Requirements

At least 5 years of hands-on platform engineering, DevSecOps, cloud infrastructure, SRE, or systems engineering experience in production environments.
Deep fluency with AWS, Azure, GCP, or equivalent cloud platforms operating at scale.
Production-grade Kubernetes and container orchestration experience in live systems.
Hands-on experience writing and maintaining infrastructure-as-code with Terraform, CloudFormation, or Pulumi.
A track record of building, securing, and operating CI/CD pipelines under regulatory or high-assurance compliance requirements.
Working knowledge of networking, IAM, SAML/OAuth, APIs, and distributed-systems troubleshooting in production.
Fluent English and the ability to collaborate asynchronously across distributed global engineering teams.
Citizenship in one of the 27 EU member states and the right to work in the EU.

Nice To Haves

Existing government or NATO security clearance, or eligibility to obtain one.
Experience operating in air-gapped, classified, or other high-assurance environments.
Familiarity with EAL/Common Criteria, FedRAMP, GovRAMP, NATO, or UK MOD accreditation processes, and/or frameworks such as NIS-2 and CRA.
Proficiency in a systems or scripting language such as Go, Python, or Rust for building internal tooling.

Responsibilities

Deploy Game Warden and other Second Front products across AWS, Azure, GCP, and sovereign-cloud infrastructure in European regions, to specification.
Architect landing zones that meet sovereignty, customer-control, and GDPR requirements without single-vendor lock-in.
Govern Kubernetes, container runtimes, and infrastructure-as-code tooling to enforce repeatability across deployments.
Drive CI/CD, networking, identity, observability, and security controls in accordance with target-environment constraints and threat models.
Implement technical controls and documentation required for EAL, FedRAMP, GovRAMP, NATO, UK MOD, or equivalent customer accreditation regimes.
Translate engineering tooling requirements into platform specifications, ensuring CI/CD, containerization, and accreditation workflows meet delivery windows.
Work with platform and engineering leads to resolve conflicts between automation, hardening, and operational constraints.
Sequence platform rollouts and upgrades to minimize disruption to active development while maintaining compliance posture and system hardening.
Prepare production environments for handoff to implementation and delivery teams, providing complete runbooks and technical evidence.