Staff Platform Engineer (U.S.-based required)

Arch Systems is seeking a talented Staff Platform Engineer to join our rapidly scaling team and help build, secure, and operate the infrastructure that powers our products and customer deployments. This is a hands-on technical individual contributor role embedded within the Platform team, focused on secure cloud infrastructure, regulated deployments, and production operations.

You will help design, deploy, operate, and improve Arch's infrastructure across commercial AWS and AWS GovCloud environments, with an immediate focus on defense-related deployments and FedRAMP High-aligned environments. The role includes working with compliance platforms to support secure deployment workflows, operational controls, and compliance readiness.

Beyond FedRAMP-related work, you will contribute broadly to infrastructure automation, platform reliability, security controls, release operations, incident response, and future compliance-driven customer requirements.

This is a senior individual contributor role requiring strong technical judgment, autonomy, and hands-on execution across infrastructure, operations, and security.

This role is open to candidates based in the United States. Due to the nature of the work and the environments supported by this position, candidates must be U.S. citizens.

• Support deployment and operation of services in FedRAMP High-aligned environments.
• Work with compliance platforms and partners to support secure deployment workflows, controls, evidence collection, and operational readiness.
• Assist with security and compliance requirements for defense, government, and regulated customers.
• Translate compliance obligations into practical engineering work, including infrastructure changes, access controls, logging, monitoring, vulnerability management, change management, incident response, and documentation.
• Support future customer-driven compliance initiatives, including additional regulated SaaS or industry-specific security requirements.

• Design, deploy, operate, and support cloud infrastructure across AWS and AWS GovCloud.
• Build and maintain infrastructure using Infrastructure-as-Code, primarily Terraform.
• Operate Kubernetes-based services and Helm-based deployment workflows across multiple environments.
• Support production and customer-facing deployments, including regulated and isolated environments.
• Improve reliability, observability, access controls, operational runbooks, and supportability of platform systems.

• Support regular release operations across multiple environments.
• Maintain and improve Helm charts, deployment pipelines, CI/CD workflows, and operational automation.
• Participate in incident triage and operational support for platform-owned systems.
• Create and maintain runbooks, operational documentation, and escalation paths for regulated deployments.
• Improve monitoring, alerting, deployment safety, and operational readiness.

• Work across teams on Security and Compliance.
• Help customer-facing teams understand technical constraints and operational requirements for regulated deployments.
• Provide clear written documentation and status updates for compliance-sensitive infrastructure work.
• Mentor and support other engineers on secure infrastructure and compliance-aware operations.

• 7+ years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or related roles.
• Demonstrated ability to independently own complex infrastructure or operations projects from design through production support.
• Hands-on experience operating production infrastructure in AWS.
• Hands-on experience owning Infrastructure-as-Code, preferably Terraform.
• Hands-on experience operating Kubernetes-based workloads and Helm-based deployments.
• Strong understanding of cloud security fundamentals, including IAM, networking, encryption, secrets management, audit logging, vulnerability remediation, and monitoring.
• Experience supporting production systems, incident response, operational runbooks, release processes, and post-incident follow-up.
• Ability to translate security or compliance requirements into concrete infrastructure, operational, and documentation changes.
• Strong written and verbal communication skills, especially for technical documentation, operational procedures, risk explanations, and compliance evidence.

• Experience with AWS GovCloud.
• Experience with FedRAMP, FedRAMP High, DoD, government, or public-sector cloud environments.
• Experience with compliance automation platforms such as Vanta.
• Experience with compliance frameworks such as SOC 2, NIST 800-53, NIST 800-171, ISO 27001, or similar.
• Experience with FedRAMP accelerators like Knox Systems.
• Experience with vulnerability management, container scanning, SBOMs, image hardening, and FIPS compliance.
• Experience supporting regulated SaaS or enterprise B2B environments.
• Experience with observability tooling like Prometheus, Grafana, CloudWatch, Loki, or similar.
• Familiarity working remotely with globally distributed teams.

• Innovate with Impact: Be part of a team developing transformative data products that optimize and revolutionize manufacturing operations globally. Your work will directly impact efficiency, sustainability, and growth for some of the world’s leading industrial companies.
• Collaborative Environment: Join a passionate, multidisciplinary team that values innovation, open communication, and teamwork. We foster a culture of continuous learning, mutual respect, and cross-functional collaboration, empowering everyone to contribute meaningfully.
• Growth & Development Opportunities: Advance your career through hands-on experience in product leadership, data-driven decision-making, and technical innovation. Arch supports professional development with pathways for skill enhancement, leadership growth, and increasing product vision expertise.
• Equity & Ownership: Share in the company’s success through equity ownership, aligning your personal success with Arch’s mission and growth.
• Remote-First Flexibility: Embrace a remote-first work culture that provides flexibility and balance, supporting productivity and connection in a collaborative virtual environment.

Please submit resumes in English. We encourage passionate applicants to apply, even if they don’t meet every qualification. At Arch, we value authenticity and believe in hiring individuals as their full, unique selves. We’re committed to fostering an environment where team members can leverage their strengths while continuously learning and growing. Don’t let imposter syndrome hold you back—if you’re excited about this opportunity, we’d love to hear from you!

At Arch Systems, we empower discrete manufacturing facilities with deep data insights that enable optimal efficiency, precise KPIs, and proactive decision-making. We work with leading manufacturers to integrate and optimize their data for actionable intelligence, fueling productivity and operational excellence.

Arch champions a remote-first work environment since its inception, promoting flexibility and inclusivity across all teams. While we welcome talent from diverse locations, we currently do not offer visa sponsorship.

Arch is committed to full compliance with regulations from the Office of Foreign Assets Control (OFAC) to ensure alignment with all applicable sanctions programs. This means we do not engage in transactions or employment practices that conflict with OFAC regulations, including the hiring of individuals residing in regions subject to US sanctions.