Staff Platform Engineer

About the Role

Arch Systems is seeking a talented Staff Platform Engineer to join our rapidly scaling team and help build, secure, and operate the infrastructure that powers our products and customer deployments. This is a hands-on technical individual contributor role embedded within the Platform team, focused on secure cloud infrastructure, regulated deployments, and production operations.

You will help design, deploy, operate, and improve Arch's infrastructure across commercial AWS and AWS GovCloud environments, with an immediate focus on defense-related deployments and FedRAMP High-aligned environments. The role includes working with compliance platforms to support secure deployment workflows, operational controls, and compliance readiness.

Beyond FedRAMP-related work, you will contribute broadly to infrastructure automation, platform reliability, security controls, release operations, incident response, and future compliance-driven customer requirements.

This is a senior individual contributor role requiring strong technical judgment, autonomy, and hands-on execution across infrastructure, operations, and security.

Location Preference

This role is open to candidates based in the United States. Due to the nature of the work and the environments supported by this position, candidates must be U.S. citizens.

What You Will Own & Drive

Compliance Engineering and Regulated Environments

- Support deployment and operation of services in FedRAMP High-aligned environments.

- Work with compliance platforms and partners to support secure deployment workflows, controls, evidence collection, and operational readiness.

- Assist with security and compliance requirements for defense, government, and regulated customers.

- Translate compliance obligations into practical engineering work, including infrastructure changes, access controls, logging, monitoring, vulnerability management, change management, incident response, and documentation.

- Support future customer-driven compliance initiatives, including additional regulated SaaS or industry-specific security requirements.

Secure Infrastructure & Cloud Operations

- Design, deploy, operate, and support cloud infrastructure across AWS and AWS GovCloud.

- Build and maintain infrastructure using Infrastructure-as-Code, primarily Terraform.

- Operate Kubernetes-based services and Helm-based deployment workflows across multiple environments.

- Support production and customer-facing deployments, including regulated and isolated environments.

- Improve reliability, observability, access controls, operational runbooks, and supportability of platform systems.

Platform Reliability & Release Operations

- Support regular release operations across multiple environments.

- Maintain and improve Helm charts, deployment pipelines, CI/CD workflows, and operational automation.

- Participate in incident triage and operational support for platform-owned systems.

- Create and maintain runbooks, operational documentation, and escalation paths for regulated deployments.

- Improve monitoring, alerting, deployment safety, and operational readiness.

Cross-Functional Collaboration

- Work across teams on Security and Compliance.

- Help customer-facing teams understand technical constraints and operational requirements for regulated deployments.

- Provide clear written documentation and status updates for compliance-sensitive infrastructure work.

- Mentor and support other engineers on secure infrastructure and compliance-aware operations.

What You Bring To The Table

Required Experience and Qualifications

- 7+ years of experience in Platform Engineering, DevOps, SRE, Infrastructure Engineering, Security Engineering, or related roles.

- Demonstrated ability to independently own complex infrastructure or operations projects from design through production support.

- Hands-on experience operating production infrastructure in AWS.

- Hands-on experience owning Infrastructu