Senior Platform Engineer

PreVeil is a fast-growing tech company transforming secure communication and compliance for the modern enterprise. Our encrypted email and file sharing platform makes end-to-end encryption easy to use, and has been named PC Magazine's Best Encrypted Email and File Sharing Solution five years running.
Trusted by more than 3,000 defense contractors, PreVeil has become the gold standard for protecting sensitive information and achieving compliance efficiently. We're profitable, growing 100% year-over-year, and building for the long term.

The Opportunity
PreVeil is hiring a Platform Engineer to own a large AWS estate: hundreds to thousands of accounts, built and maintained from one shared set of infrastructure-as-code templates and automated pipelines. The job is three things on a loop: keep the fleet healthy, ship new platform features into it, and automate what people still do by hand so the account count can grow without the team growing with it.
The environment is regulated, so changes run through change control and the record becomes audit evidence. Moving fast here means automating the safe path, not skipping it. We want architecture as simple as the business allows, and ownership above all: you scope the work, break it up, and drive it to done.
What You'll Own
Fleet Maintenance: Maintain hundreds to thousands of AWS accounts. Own account creation and placement, org-wide guardrails and identity baselines, per-account configuration, patching, drift, and cost and log hygiene. Keep every account on the same known-good baseline, and know which ones aren't.
Platform Features: Develop, deploy, and maintain new platform features. Design them, write the code and the infrastructure definitions, ship them through the pipeline, and keep them running. You own what you ship.
Automation: Automate the infrastructure to reduce toil. Delete the manual steps that repeat across accounts: hand-run setup, console clicks, copy-paste onboarding, and manual drift checks. Treat “a human still has to do this” as a bug.
Infrastructure-as-Code and Pipelines: Extend the infrastructure-as-code library and the deployment pipelines that target one account or a whole class of accounts.
Platform Services: Run containerized workloads, along with the identity, networking, and virtual desktop services behind them.
AI-Assisted Engineering: Use AI coding tools such as Claude Code to build that automation.
Platform Health: Monitor platform health and respond to incidents.
What Success Looks Like at 6 Months

• You know the fleet: which accounts are on the known-good baseline, which aren't, and what it takes to bring them back.
• You have shipped at least one new platform feature through the pipeline and own it in production.
• You have automated away recurring manual steps, so onboarding and drift checks take less hands-on work than when you started.
• Your changes move cleanly through change control and produce audit-ready evidence.
• You are a reliable part of incident response for the platform.

Ideal Candidate Profile
Experience

• 3–5 years of professional experience in platform, DevOps, or infrastructure engineering
• Hands-on AWS at multi-account scale: Organizations, IAM and cross-account access, networking, and container services
• Infrastructure-as-code in production, reused across many environments
• A track record of owning projects from concept to production
• Python, Go, or Bash at the level of tooling other people depend on
• Proficiency in both Linux and Windows Server environments, including directory services and group policy
• CI/CD pipelines you have built or substantially improved

Nice to Have

• Restricted or government cloud regions
• Regulated environments: CMMC, NIST SP 800-171, FedRAMP, SOC 2
• Multi-account governance: landing zones, guardrails, automated account vending
• Identity and single sign-on integration at scale

Skills and Mindset

• Ownership above all. This matters most to us. You take a project and drive it to done, whatever its size.
• Simple-yet-robust architecture. You build systems that look simple on the surface and hold up under real complexity.
• Fleet thinking. A fix that works on one account and can't roll out to thousands isn't finished.
• A drive to automate. You would rather spend two days deleting a recurring hour than keep paying it.
• Clear communication. You communicate clearly in a fast-moving, compliance-bound environment.

Eligibility
This role works inside a regulated environment that handles sensitive government data. Applicants must be a U.S. citizen or a lawful permanent resident. We cannot sponsor or transfer visas for this position.
Why This Role Is Exceptional

• Category authority in a high-urgency market. CMMC compliance is non-negotiable for 100,000 defense contractors, and PreVeil is the leading solution for SMBs
• Real ownership at scale. You will own a fleet of hundreds to thousands of AWS accounts and the automation that keeps it running
• Profitable company, strong growth. We are investing in building a world-class platform and engineering organization

PreVeil offers competitive compensation, excellent benefits, and the opportunity to make a real impact on cybersecurity and defense compliance.
We are proud to foster a workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product for our users.