Staff Platform Engineer (U.S.-based required)

Arch Systems•Palo Alto, CA

4d•$170,000 - $218,000•Remote

About The Position

Arch Systems is seeking a talented Staff Platform Engineer to join our rapidly scaling team and help build, secure, and operate the infrastructure that powers our products and customer deployments. This is a hands-on technical individual contributor role embedded within the Platform team, focused on secure cloud infrastructure, regulated deployments, and production operations. You will help design, deploy, operate, and improve Arch's infrastructure across commercial AWS and AWS GovCloud environments, with an immediate focus on defense-related deployments and FedRAMP High-aligned environments. The role includes working with compliance platforms to support secure deployment workflows, operational controls, and compliance readiness. Beyond FedRAMP-related work, you will contribute broadly to infrastructure automation, platform reliability, security controls, release operations, incident response, and future compliance-driven customer requirements. This is a senior individual contributor role requiring strong technical judgment, autonomy, and hands-on execution across infrastructure, operations, and security. This role is open to candidates based in the United States. Due to the nature of the work and the environments supported by this position, candidates must be U.S. citizens.

Requirements

7+ years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or related roles.
Demonstrated ability to independently own complex infrastructure or operations projects from design through production support.
Hands-on experience operating production infrastructure in AWS.
Hands-on experience owning Infrastructure-as-Code, preferably Terraform.
Hands-on experience operating Kubernetes-based workloads and Helm-based deployments.
Strong understanding of cloud security fundamentals, including IAM, networking, encryption, secrets management, audit logging, vulnerability remediation, and monitoring.
Experience supporting production systems, incident response, operational runbooks, release processes, and post-incident follow-up.
Ability to translate security or compliance requirements into concrete infrastructure, operational, and documentation changes.
Strong written and verbal communication skills, especially for technical documentation, operational procedures, risk explanations, and compliance evidence.
U.S. citizens.

Nice To Haves

Experience with AWS GovCloud.
Experience with FedRAMP, FedRAMP High, DoD, government, or public-sector cloud environments.
Experience with compliance automation platforms such as Vanta.
Experience with compliance frameworks such as SOC 2, NIST 800-53, NIST 800-171, ISO 27001, or similar.
Experience with FedRAMP accelerators like Knox Systems.
Experience with vulnerability management, container scanning, SBOMs, image hardening, and FIPS compliance.
Experience supporting regulated SaaS or enterprise B2B environments.
Experience with observability tooling like Prometheus, Grafana, CloudWatch, Loki, or similar.
Familiarity working remotely with globally distributed teams.

Responsibilities

Support deployment and operation of services in FedRAMP High-aligned environments.
Work with compliance platforms and partners to support secure deployment workflows, controls, evidence collection, and operational readiness.
Assist with security and compliance requirements for defense, government, and regulated customers.
Translate compliance obligations into practical engineering work, including infrastructure changes, access controls, logging, monitoring, vulnerability management, change management, incident response, and documentation.
Support future customer-driven compliance initiatives, including additional regulated SaaS or industry-specific security requirements.
Design, deploy, operate, and support cloud infrastructure across AWS and AWS GovCloud.
Build and maintain infrastructure using Infrastructure-as-Code, primarily Terraform.
Operate Kubernetes-based services and Helm-based deployment workflows across multiple environments.
Support production and customer-facing deployments, including regulated and isolated environments.
Improve reliability, observability, access controls, operational runbooks, and supportability of platform systems.
Support regular release operations across multiple environments.
Maintain and improve Helm charts, deployment pipelines, CI/CD workflows, and operational automation.
Participate in incident triage and operational support for platform-owned systems.
Create and maintain runbooks, operational documentation, and escalation paths for regulated deployments.
Improve monitoring, alerting, deployment safety, and operational readiness.
Work across teams on Security and Compliance.
Help customer-facing teams understand technical constraints and operational requirements for regulated deployments.
Provide clear written documentation and status updates for compliance-sensitive infrastructure work.
Mentor and support other engineers on secure infrastructure and compliance-aware operations.