Senior Platform Engineer, Security New Denver, CO

Simplesense builds, deploys, and sustains the Installation Resilience Platform that enables mission operators to rapidly adapt and respond. The Platform protects critical infrastructure from cyber attack while unlocking previously siloed information to monitor, diagnose, and improve response times to incidents. Our adversaries rapidly adopt the latest technology: we help defense users respond in kind. Simplesense is a non-traditional defense contractor and prime on the Air Force's Installation Resilience Operations Command and Control (IROC) program, which is now expanding to five additional Air Force, Space Force, and Army installations from the one prototype installation, Tyndall Air Force Base. Our team combines over 100 years of direct mission experience solving hard problems with 50 years technical expertise deploying DevSecOps, cybersecurity, and cloud infrastructure, giving us a deep appreciation for our customers’ mission and end users’ priorities. We build for scale, architecting and prioritizing technical work for long term sustainability. Simplesense is looking for a Senior Platform Engineer, Security to join our hybrid, US-based team. The Senior Platform Engineer, Security owns the automation, hardening, and deployment of our security tooling and architecture across hybrid environments, with a specific focus on protecting a hybrid Information Technology (IT) and Operational Technology (OT) environment. You will bridge the gap between modern infrastructure-as-code (IaC) and the rigorous demands of enterprise cloud and platform security. This position will drive the technical implementation, configuration automation, foundational security reviews, and remediation process for our core security capabilities. The ideal candidate is an automation-first security professional who values infrastructure as code, possesses a deep understanding of modern identity, remote access, discovery, observability and vulnerability tooling, and thrives in navigating complex, highly regulated environments. You can complete work skillfully, independently, and are excellent at giving and receiving constructive technical feedback. Responsibilities Security Tooling & Compliance Codification: Partner with the Security Team to intake defined compliance baselines and translate them into automated configuration management playbooks for enterprise tools. IaC Deployment & Configuration Automation: Build, maintain, and scale automated IaC deployments to ensure operational environments and tools are managed as code. Access & Identity Automation: Collaborate with Security and Platform team members to automate user provisioning and access through existing application features, APIs and IaC methodologies. DevSecOps: Embed security concepts and tooling into the development and deployment pipeline to facilitate early identification and remediation opportunities. Cloud Network Security: Implement and harden automated security groups, network policies, and cloud infrastructure to securely segment dataflows across environments following Zero Trust principals. Secure Package Management: Deploy, configure, and maintain secure package management proxies and local repos to safeguard infrastructure pipelines and the software supply chain. Hands-on Engineering (70%): Write clean, reusable infrastructure code, configuration scripts, and API integrations, setting the technical pattern for secure-by-default platform architecture. Cross-Functional Alignment (30%): Collaborate with engineering and security teams to embed security tools directly into core infrastructure pipelines, breaking down work and resolving deployment bottlenecks. Requirements Extensive professional experience (5-10 years) in platform engineering, system administration, cloud engineering, or DevSecOps, with an emphasis on security and automation. Deep, hands-on experience deploying, configuring, and tuning enterprise security tooling Proven track record of managing infrastructure-as-code (IaC) via tools like Cloudformation, Terraform, OpenTofu, or Ansible, across hybrid environments. Strong experience working with application APIs for configuration automation and management. Solid understanding of secure software supply chain mechanics, including package repositories, artifact management, and proxy configurations. Strong AWS cloud engineering and security background, with demonstrated experience in network topology automation, firewalls, autoscaling groups, and native security services (SecurityHub, GuardDuty, Inspector). Familiarity with NIST 800-53 and NIST 800-82 compliance Ability to work a hybrid schedule, primarily based in the Denver metro area , with an expectation of being in the office at least two or three times weekly. Must be a U.S. Citizen and able to obtain a DoD NIPR network account and Common Access Card (CAC). Current DoD 8140 Intermediate or Advanced Foundational Qualification or ability to obtain within 90 days of hire Must have, or be able to obtain, a Secret Clearance. Preferred but Not Necessary Experience in the Operational Technology (OT), ICS/SCADA, or industrial technology sectors and OT/CS security tooling (ex: Nozomi). Familiarity with the DoD Zero Trust strategy and target level objectives Relevant certifications (e.g., AWS Certified Security - Specialty, GIAC GICSP/GRID, CISSP). Experience automating NIST 800-53 frameworks or DISA STIG compliance. Compensation and Benefits Pay Range: $180k-$235k per year Compensation is determined based on experience, skill level, and location. Equity Medical, Life, Short-Term Disability, and AD&D insurance Medical travel coverage Vision coverage 401k matching Simplesense is an equal opportunity employer committed to a policy of merit-based employment. All employment decisions—including recruitment, hiring, promotion, compensation, benefits, training, and termination—are made based on individual qualifications, performance, and business needs. We strictly prohibit discrimination or harassment of any kind on the basis of protected characteristics as recognized by federal, state, or local law. As a U.S. government contractor, Simplesense complies with all applicable equal employment opportunity laws, Section 503 of the Rehabilitation Act, and the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA). If you need a reasonable accommodation to complete the application or take part in the interview process, please contact People Operations at View email address on click.appcast.io . #J-18808-Ljbffr SimpleSense Inc.