Platform Engineer

• Second Front Systems is looking for an infrastructure-focused, compliance-minded, operationally disciplined Platform Engineer to strengthen our Platform Engineering function across European regulated environments
• This role sits at the intersection of systems, tooling, and engineering — translating infrastructure reliability and deployment velocity into warfighter-ready software delivery. You’ll be responsible for deploying, operating, and maintaining Game Warden across EMEA cloud environments while establishing secure, repeatable platform patterns that satisfy sovereignty and assurance requirements
• You’ll build landing zones and reference architectures using infrastructure-as-code and cloud-native tooling, keeping European deployments aligned with our global platform patterns while preserving accreditation inheritance across target environments
• We need someone who can operate cloud-native infrastructure at production scale; build and maintain secure CI/CD pipelines, monitoring, and observability for regulated and potentially air-gapped environments; and produce the technical evidence and documentation needed to support applicable European security, accreditation, and regulatory requirements
• As a key partner to our implementation and delivery teams, you’ll prepare production environments and hand them off with complete runbooks and technical evidence — serving as the operational bridge between platform architecture and customer deployment
• Deploy Game Warden and other Second Front products across AWS, Azure, GCP, and sovereign-cloud infrastructure in European regions, to specification
• Architect landing zones that satisfy sovereignty, customer-control, and GDPR requirements without single-vendor lock-in
• Govern Kubernetes, container runtimes, and infrastructure-as-code tooling to enforce repeatability across deployments
• Drive CI/CD, networking, identity, observability, and security controls against target-environment constraints and threat models
• Implement the technical controls and documentation required for EAL, FedRAMP, GovRAMP, NATO, UK MOD, or equivalent customer accreditation regimes
• Translate engineering tooling requirements into platform specifications, ensuring CI/CD, containerization, and accreditation workflows meet time-sensitive delivery windows
• Work with platform and engineering leads to resolve conflicts between automation, hardening, and operational constraints
• Sequence platform rollouts and upgrades to minimize disruption to active development while maintaining compliance posture and system hardening

Benefits

• Health & Wellness: Receive 100% medical, dental, and vision coverage for you and your family.
• PTO & Remote First: We provide flexible time off, recognize 11 federal holidays, and offer paid parental leave.
• 401(k) & Equity: Invest in your future. Our 401(k) and equity incentives help you build wealth as we grow together.
• Professional Development: We value your drive to grow and provide an annual stipend for self-directed professional development.

• EU citizenship (any of the 27 EU member states) and the right to work in the EU
• Hands-on experience writing and maintaining infrastructure-as-code with Terraform, CloudFormation, or Pulumi
• Working knowledge of networking, IAM, SAML/OAuth, APIs, and distributed-systems troubleshooting in production
• Production-grade Kubernetes and container orchestration experience in live systems
• 5+ years of hands-on platform engineering, DevSecOps, cloud infrastructure, SRE, or systems engineering experience in production environments
• A track record building, securing, and operating CI/CD pipelines under regulatory or high-assurance compliance requirements
• Fluent English and a proven ability to collaborate asynchronously across distributed global engineering teams
• Deep fluency with AWS, Azure, GCP, or equivalent cloud platforms operating at scale
• Existing government or NATO security clearance, or eligibility to obtain one
• Experience operating in air-gapped, classified, or other high-assurance environments
• Familiarity with EAL/Common Criteria, FedRAMP, GovRAMP, NATO, or UK MOD accreditation processes; and/or familiarity with other frameworks such as NIS-2, CRA, etc
• Proficiency in a systems or scripting language (e.g., Go, Python, or Rust) for building internal tooling