Platform Engineer

Second Front Systems•Washington, DC

15d•€120,000 - €140,000•Remote

About The Position

Second Front Systems is seeking an infrastructure-focused, compliance-minded Platform Engineer to strengthen its Platform Engineering function across European regulated environments. The role deploys, operates, and maintains Game Warden across EMEA cloud environments and establishes secure, repeatable platform patterns that meet sovereignty and assurance requirements. The engineer builds landing zones and reference architectures with infrastructure-as-code and cloud-native tooling, aligns European deployments with global platform patterns, and preserves accreditation inheritance across target environments. The work includes operating production-scale cloud-native infrastructure; maintaining secure CI/CD pipelines, monitoring, and observability for regulated and potentially air-gapped environments; and producing technical evidence and documentation supporting European security, accreditation, and regulatory requirements. The engineer partners with implementation and delivery teams to prepare production environments and hand them off with complete runbooks and technical evidence. This is a full-time remote position based anywhere in the EU. Candidates must be citizens of an EU member state and have the right to work in the EU. The role supports systems subject to security clearance and accreditation requirements. Base salary is €120,000–€140,000, with eligibility for equity awards and discretionary bonuses. Compensation depends on professional background, technical proficiency, seniority, and regional cost factors.

Requirements

At least 5 years of hands-on platform engineering, DevSecOps, cloud infrastructure, SRE, or systems engineering experience in production environments.
Deep fluency with AWS, Azure, GCP, or equivalent cloud platforms operating at scale.
Production-grade Kubernetes and container orchestration experience in live systems.
Hands-on experience writing and maintaining infrastructure-as-code with Terraform, CloudFormation, or Pulumi.
A track record building, securing, and operating CI/CD pipelines under regulatory or high-assurance compliance requirements.
Working knowledge of networking, IAM, SAML/OAuth, APIs, and distributed-systems troubleshooting in production.
Fluent English and ability to collaborate asynchronously across distributed global engineering teams.
Citizenship in one of the 27 EU member states and the right to work in the EU.

Nice To Haves

Existing government or NATO security clearance, or eligibility to obtain one.
Experience operating in air-gapped, classified, or other high-assurance environments.
Familiarity with EAL/Common Criteria, FedRAMP, GovRAMP, NATO, or UK MOD accreditation processes, and/or frameworks such as NIS-2 or CRA.
Proficiency in a systems or scripting language such as Go, Python, or Rust for building internal tooling.

Responsibilities

Deploy Game Warden and other Second Front products across AWS, Azure, GCP, and sovereign-cloud infrastructure in European regions, to specification.
Architect landing zones that satisfy sovereignty, customer-control, and GDPR requirements without single-vendor lock-in.
Govern Kubernetes, container runtimes, and infrastructure-as-code tooling to enforce repeatability across deployments.
Drive CI/CD, networking, identity, observability, and security controls against target-environment constraints and threat models.
Implement technical controls and documentation required for EAL, FedRAMP, GovRAMP, NATO, UK MOD, or equivalent customer accreditation regimes.
Translate engineering tooling requirements into platform specifications, ensuring CI/CD, containerization, and accreditation workflows meet time-sensitive delivery windows.
Work with platform and engineering leads to resolve conflicts between automation, hardening, and operational constraints.
Sequence platform rollouts and upgrades to minimize disruption to active development while maintaining compliance posture and system hardening.
Prepare production environments and hand them off to implementation and delivery teams with complete runbooks and technical evidence.
Operate and maintain Game Warden across EMEA cloud environments and produce technical evidence and documentation for applicable European security, accreditation, and regulatory requirements.