Senior Platform Engineer, Security

Simplesense builds deploys and sustains the Installation Resilience Platform that enables mission operators to rapidly adapt and respond. The Platform protects critical infrastructure from cyber attack while unlocking previously siloed information to monitor diagnose and improve response times to incidents. Our adversaries rapidly adopt the latest technology: we help defense users respond in kind.

Simplesense is a non-traditional defense contractor and prime on the Air Forces Installation Resilience Operations Command and Control (IROC) program which is now expanding to five additional Air Force Space Force and Army installations from the one prototype installation Tyndall Air Force Base.

Our team combines over 100 years of direct mission experience solving hard problems with 50 years technical expertise deploying DevSecOps cybersecurity and cloud infrastructure giving us a deep appreciation for our customers mission and end users priorities. We build for scale architecting and prioritizing technical work for long term sustainability.

Location: We prioritize candidates who reside in the Denver CO metro area (hybrid as needed) but we are open to exceptional remote talent.

Department: Engineering

Simplesense keeps military installations mission-ready. The infrastructure their operations depend on power water fuel facilities security and communications runs continuously often under strain. When it fails without warning mission readiness is at risk and the people who run these installations need to see whats happening in time to act. Thats the foundation of Continuous Mission Assurance.

We securely integrate Operational Technology and Control Systems (OT/CS) from the building edge to the cloud applying Zero Trust principles to protect critical infrastructure from cyber and physical threats. By unlocking previously siloed data we put timely awareness in front of the decision-makers who need it. As prime on the Air Forces Installation Resilience Operations Command and Control (IROC) program we hold a continuous Authority to Operate (ATO) and have proven the capability at scale at Tyndall Air Force Base. That work is now expanding across the Air Force Space Force and Army.

Our team pairs over a century of boots-on-the-ground mission experience with deep technical expertise across DevSecOps cybersecurity and cloud infrastructure. We engineer resilient infrastructure the software integration and operational backbone behind it for the operators who depend on it in the field. Persistent resilience built for the mission.

As our Senior Platform Engineer Security you will play a critical role in automating hardening and deploying our security tooling and architecture across complex hybrid IT and OT environments. You will oversee the technical implementation configuration automation foundational security reviews and remediation processes for our core security capabilities and partner closely with the broader Platform and Security teams to ensure our platform remains resilient secure and ready for the mission.

Work Model: We prioritize candidates who reside in the Denver CO (hybrid as needed) but we are open to exceptional remote talent.

• Locals: Onsite as needed for collaborative workspace time.
• Remote: Quarterly travel to hub locations for team syncs and alignment.

We measure performance across two key dimensions: How you perform your role (Our Core Values) and What your role entails (Your Execution).

At Simplesense we value high-trust autonomy. We look for builders who can comfortably navigate ambiguity and are deeply driven by our shared national security mission.

• People Always Win as One Team: We foster a culture of psychological safety and mutual support. We operate as an integrated team where we assume noble intent as our default setting ensuring that even the toughest feedback is rooted in trust. We trade our silos for a shared mission because collective impact always outweighs individual achievement.
• Empathize Obsess Over the Customer: We dont just solve technical problems; we empathize and advocate for the operators using our products. We look beyond the surface to build what our customersboth internal and externalactually need to succeed not just what they asked for.
• Focus Ruthlessly Prioritize with Urgency: We focus on the highest-impact work and ruthlessly say no to distractions. We build resilient systems so that our solutions can repeat and scale under pressure.
• Lets Go Catalyze the Change You Seek: We dont wait for the industry to change; we drive it. We seek to understand why things are the way they are but we never use the way its always been as an excuse. We arent afraid to change course when the data or our mission demands it.

• Translate defined compliance baselines into automated configuration management playbooks to standardize and secure enterprise tooling.
• Build maintain and scale automated IaC deployments to ensure operational environments and security tools are consistently managed as code.
• Automate user provisioning and access using application features APIs and IaC methodologies to streamline secure identity management.
• Embed security concepts and tooling directly into the development and deployment pipeline to facilitate early vulnerability identification and remediation.
• Implement and harden automated security groups network policies and cloud infrastructure to securely segment dataflows following Zero Trust principles.
• Deploy and maintain secure package management proxies and local repositories to safeguard infrastructure pipelines and the software supply chain.
• Write clean reusable infrastructure code configuration scripts and API integrations to establish the technical pattern for a secure-by-default platform architecture.
• Collaborate with cross-functional engineering and security teams to embed security tools into core pipelines and resolve deployment bottlenecks.

• Experience: 5-10 years of professional experience in platform engineering system administration cloud engineering or DevSecOps with an emphasis on security and automation.
• Technical Proficiency: Deep expertise with deploying enterprise security tooling managing infrastructure-as-code across hybrid environments (CloudFormation Terraform OpenTofu Ansible) application APIs for configuration and AWS native security services (SecurityHub GuardDuty Inspector).
• Domain Knowledge: Demonstrated understanding of secure software supply chain mechanics (package repositories artifact management proxies) and familiarity with NIST 800-53 and NIST 800-82 compliance.
• Compliance: Must be a U.S. Citizen and capable of obtaining a DoD NIPR network account and Common Access Card (CAC). Must hold or be able to obtain within 90 days of hire a current DoD 8140 Intermediate or Advanced Foundational Qualification.
• Security Clearance: Must have or be able to obtain a DoD Secret Clearance.

• Strongly prefer candidates residing in the Denver CO metro area.
• Prior experience working within DoD Air Force Space Force or fast-paced Federal contractor/dual-use startup environments.
• Relevant technical certifications such as AWS Certified Security - Specialty GIAC GICSP/GRID or CISSP.
• Experience with Operational Technology (OT) ICS/SCADA environments OT/CS security tooling (e.g. Nozomi) automating DISA STIG/NIST 800-53 frameworks and familiarity with DoD Zero Trust strategy.

• 30 Days: Complete onboarding tasking evaluate the architecture of existing security tool deployments and support the remediation of active security concerns.
• 60 Days: Architect validate and deploy significant platform and security infrastructure updates designed to strengthen resilience and security.
• 90 Days: Assume technical responsibility of one or more specific sub-systems and collaborate on strategic roadmap execution for a highly secure scalable platform environment.

Pay Range: $180k-$235k per year. Compensation is determined based on experience skill level and location. We review ranges regularly to ensure market competitiveness.

• Equity
• Medical Life Short-Term Disability and AD&D insurance
• Medical travel coverage
• Dental coverage
• Vision coverage
• 401k matching

1. Find Your Fit: Your journey starts here. Explore and apply to our open positions to find the right role for your skills.
2. Initial Chat: A brief call with our recruiting team to learn about your background and answer your initial questions about Simplesense.
3. Values & Vision: A conversation with a hiring manager to discuss how your aspirations align with our mission and goals of the team.
4. Show Your Skills: Complete a technical assessment that reflects the work youd be doing.
5. Team Interview: Interview with the team to discuss your experience and see if were a great match.
6. Final Handshake: A final conversation to ensure weve answered all your questions before making a decision.
7. Welcome to Simplesense!

Simplesense is an equal opportunity employer committed to a policy of merit-based employment. All employment decisionsincluding recruitment hiring promotion compensation benefits training and terminationare made based on individual qualifications performance and business needs. We strictly prohibit discrimination or harassment of any kind on the basis of protected characteristics as recognized by federal state or local law. As a U.S. government contractor Simplesense complies with all applicable equal employment opportunity laws Section 503 of the Rehabilitation Act and the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA). If you need a reasonable accommodation to complete the application or take part in the interview process please contact People Operations at .