Senior Platform Engineer, Security

Location: We prioritize candidates who reside in the Denver, CO metro area (hybrid as needed) but we are open to exceptional remote talent.

Department: Engineering

Simplesense keeps military installations mission-ready. The infrastructure their operations depend on — power, water, fuel, facilities, security, and communications — runs continuously, often under strain. When it fails without warning, mission readiness is at risk, and the people who run these installations need to see what’s happening in time to act. That’s the foundation of Continuous Mission Assurance.

We securely integrate Operational Technology and Control Systems (OT/CS) from the building edge to the cloud, applying Zero Trust principles to protect critical infrastructure from cyber and physical threats. By unlocking previously siloed data, we put timely awareness in front of the decision-makers who need it. As prime on the Air Force’s Installation Resilience Operations Command and Control (IROC) program, we hold a continuous Authority to Operate (ATO) and have proven the capability at scale at Tyndall Air Force Base. That work is now expanding across the Air Force, Space Force, and Army.

Our team pairs over a century of boots-on-the-ground mission experience with deep technical expertise across DevSecOps, cybersecurity, and cloud infrastructure. We engineer resilient infrastructure — the software, integration, and operational backbone behind it — for the operators who depend on it in the field. Persistent resilience, built for the mission.

As our Senior Platform Engineer, Security, you will play a critical role in automating, hardening, and deploying our security tooling and architecture across complex hybrid IT and OT environments. You will oversee the technical implementation, configuration automation, foundational security reviews, and remediation processes for our core security capabilities, and partner closely with the broader Platform and Security teams to ensure our platform remains resilient, secure, and ready for the mission.

Work Model: We prioritize candidates who reside in the Denver, CO (hybrid as needed) but we are open to exceptional remote talent.

• Locals: Onsite as needed for collaborative workspace time.
• Remote: Quarterly travel to hub locations for team syncs and alignment.

We measure performance across two key dimensions: How you perform your role (Our Core Values) and What your role entails (Your Execution).

At Simplesense, we value high-trust autonomy. We look for builders who can comfortably navigate ambiguity and are deeply driven by our shared national security mission.

• People Always – Win as One Team: We foster a culture of psychological safety and mutual support. We operate as an integrated team where we assume noble intent as our default setting, ensuring that even the toughest feedback is rooted in trust. We trade our silos for a shared mission because collective impact always outweighs individual achievement.
• Empathize – Obsess Over the Customer: We don't just solve technical problems; we empathize and advocate for the operators using our products. We look beyond the surface to build what our customers—both internal and external—actually need to succeed, not just what they asked for.
• Focus – Ruthlessly Prioritize with Urgency: We focus on the highest-impact work and ruthlessly say no to distractions. We build resilient systems so that our solutions can repeat and scale under pressure.
• Let’s Go – Catalyze the Change You Seek: We don't wait for the industry to change; we drive it. We seek to understand why things are the way they are, but we never use “the way it’s always been” as an excuse. We aren't afraid to change course when the data or our mission demands it.

• Translate defined compliance baselines into automated configuration management playbooks to standardize and secure enterprise tooling.
• Build, maintain, and scale automated IaC deployments to ensure operational environments and security tools are consistently managed as code.
• Automate user provisioning and access using application features, APIs, and IaC methodologies to streamline secure identity management.
• Embed security concepts and tooling directly into the development and deployment pipeline to facilitate early vulnerability identification and remediation.
• Implement and harden automated security groups, network policies, and cloud infrastructure to securely segment dataflows following Zero Trust principles.
• Deploy and maintain secure package management proxies and local repositories to safeguard infrastructure pipelines and the software supply chain.
• Write clean, reusable infrastructure code, configuration scripts, and API integrations to establish the technical pattern for a secure-by-default platform architecture.
• Collaborate with cross-functional engineering and security teams to embed security tools into core pipelines and resolve deployment bottlenecks.

• Experience: 5-10 years of professional experience in platform engineering, system administration, cloud engineering, or DevSecOps, with an emphasis on security and automation.
• Technical Proficiency: Deep expertise with deploying enterprise security tooling, managing infrastructure-as-code across hybrid environments (CloudFormation, Terraform, OpenTofu, Ansible), application APIs for configuration, and AWS native security services (SecurityHub, GuardDuty, Inspector).
• Domain Knowledge: Demonstrated understanding of secure software supply chain mechanics (package repositories, artifact management, proxies) and familiarity with NIST 800-53 and NIST 800-82 compliance.
• Compliance: Must be a U.S. Citizen and capable of obtaining a DoD NIPR network account and Common Access Card (CAC). Must hold, or be able to obtain within 90 days of hire, a current DoD 8140 Intermediate or Advanced Foundational Qualification.
• Security Clearance: Must have, or be able to obtain, a DoD Secret Clearance.

• Strongly prefer candidates residing in the Denver, CO metro area.
• Prior experience working within DoD, Air Force, Space Force, or fast-paced Federal contractor/dual-use startup environments.
• Relevant technical certifications such as AWS Certified Security - Specialty, GIAC GICSP/GRID, or CISSP.
• Experience with Operational Technology (OT), ICS/SCADA environments, OT/CS security tooling (e.g., Nozomi), automating DISA STIG/NIST 800-53 frameworks, and familiarity with DoD Zero Trust strategy.

• 30 Days: Complete onboarding tasking, evaluate the architecture of existing security tool deployments, and support the remediation of active security concerns.
• 60 Days: Architect, validate, and deploy significant platform and security infrastructure updates designed to strengthen resilience and security.
• 90 Days: Assume technical responsibility of one or more specific sub-systems and collaborate on strategic roadmap execution for a highly secure, scalable platform environment.

Pay Range: $180k-$235k per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.