About the role
We are seeking a Senior Platform Services Engineer to join our Platform Services team within Customer Success. This role is central to deploying, operating, and supporting the Istari platform across customer environments, from pre-sales technical scoping through production operations and ongoing support.
This engineer will work directly with customers and cross-functionally with sales, product engineering, and infrastructure teams to deliver reliable, secure platform deployments. Our customers include defense, aerospace, and commercial organizations operating in regulated, security-sensitive environments; this engineer should be comfortable operating within established security and compliance baselines across AWS GovCloud, Azure IL5, on-premises, and air-gapped networks.
The ideal candidate combines strong hands-on infrastructure expertise with customer-facing communication skills, a consulting mindset, and a bias toward automation.
Core Responsibilities
- Deploy and maintain the Istari platform in customer environments using Terraform and Helm across multiple deployment variants (EKS, AKS, OpenShift, on-premises Kubernetes)
- Support customer networking requirements including firewall rule scoping, VPN/IPSec configuration, DNS coordination, and connectivity troubleshooting
- Configure and troubleshoot identity provider integrations (Zitadel, SAML, OIDC, SSO with KeyCloak, PingFederate, Okta, Azure AD)
- Enable and operate services for cross-organization data sharing, including Secure Sync deployment, KMS policy exchange, IAM roles, and S3 access configuration
- Build and maintain infrastructure-as-code packages and reference architectures for customer-managed deployments
- Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely customer communication
Qualifications
- Minimum of 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering
- Solid understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management
- Experience with identity providers and federation protocols (SAML, OIDC, SSO, Active Directory)
- Database knowledge including transaction write-ahead logging, backup/restore operations, and monitoring
- Experience with graph query languages (SPARQL, Cypher, DQL, or similar)
- Proven experience operating Kubernetes in production
- Experience with Helm charts and Kubernetes application packaging
- Scripting proficiency in Python, Bash, or Ansible
- Experience working directly with external customers in a technical delivery or consulting capacity
- Excellent troubleshooting and problem-solving skills in complex production environments
- Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
- U.S. Citizen
Preferred Qualifications
- Experience with AWS GovCloud, Azure Government (IL4/IL5), or other regulated cloud environments
- Experience with OpenShift, ROSA, or non-standard Kubernetes distributions
- Familiarity with compliance or security frameworks such as FedRAMP, NIST, SOC 2, CMMC, or similar
- Industry certifications such as CompTIA (Network+, Security+, Linux+), AWS Solutions Architect Associate, AWS SysOps Administrator Associate, Azure Administrator Associate, or similar
- Experience with network analysis tools (Wireshark, tcpdump)
- Experience with PostgreSQL, cloud storage platforms, and production networking patterns
- Experience with service mesh or advanced Kubernetes networking (Istio, Envoy)
- Active security clearance (Secret or Top Secret)
About Istari Digital
Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels -- whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.
Focus is rewarded. Finish is remembered.
Facts are friendly. Even when they are not fun.
Fellowship is fundamental. Make others successful.
The anticipated compensation range for this position may vary based on experience, skills, qualifications, location, and business needs. In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.