Job description
We are seeking a Senior Platform Services Engineer to join our Platform Services team within Customer Success. This role is central to deploying, operating, and supporting the Istari platform across customer environments, from pre-sales technical scoping through production operations and ongoing support.
This engineer will work directly with customers and cross-functionally with sales, product engineering, and infrastructure teams to deliver reliable, secure platform deployments. Our customers include defense, aerospace, and commercial organizations operating in regulated, security-sensitive environments; this engineer should be comfortable operating within established security and compliance baselines across AWS GovCloud, Azure IL5, on-premises, and air-gapped networks.
The ideal candidate combines strong hands-on infrastructure expertise with customer-facing communication skills, a consulting mindset, and a bias toward automation.
Core Responsibilities
Deploy and maintain the Istari platform in customer environments using Terraform and Helm across multiple deployment variants (EKS, AKS, OpenShift, on-premises Kubernetes)
Support customer networking requirements including firewall rule scoping, VPN/IPSec configuration, DNS coordination, and connectivity troubleshooting
Configure and troubleshoot identity provider integrations (Zitadel, SAML, OIDC, SSO with KeyCloak, PingFederate, Okta, Azure AD)
Enable and operate services for cross-organization data sharing, including Secure Sync deployment, KMS policy exchange, IAM roles, and S3 access configuration
Build and maintain infrastructure-as-code packages and reference architectures for customer-managed deployments
Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely customer communication
Qualifications
Minimum of 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering
Solid understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management
Experience with identity providers and federation protocols (SAML, OIDC, SSO, Active Directory)
Database knowledge including transaction write-ahead logging, backup/restore operations, and monitoring
Experience with graph query languages (SPARQL, Cypher, DQL, or similar)
Proven experience operating Kubernetes in production
Experience with Helm charts and Kubernetes application packaging
Scripting proficiency in Python, Bash, or Ansible
Experience working directly with external customers in a technical delivery or consulting capacity
Excellent troubleshooting and problem-solving skills in complex production environments
Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
U.S. Citizen
Preferred Qualifications
Experience with AWS GovCloud, Azure Government (IL4/IL5), or other regulated cloud environments
Experience with OpenShift, ROSA, or non-standard Kubernetes distributions
Familiarity with compliance or security frameworks such as FedRAMP, NIST, SOC 2, CMMC, or similar
Industry certifications such as CompTIA (Network+, Security+, Linux+), AWS Solutions Architect Associate, AWS SysOps Administrator Associate, Azure Administrator Associate, or similar
Experience with network analysis tools (Wireshark, tcpdump)
Experience with PostgreSQL, cloud storage platforms, and production networking patterns
Experience with service mesh or advanced Kubernetes networking (Istio, Envoy)
Active security clearance (Secret or Top Secret)
About Istari Digital
Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels -- whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.
Focus is rewarded. Finish is remembered.
Facts are friendly. Even when they are not fun.
Fellowship is fundamental. Make others successful.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.