We are seeking a Senior Platform Services Engineer to join our Platform Services team within Customer Success. This role is central to deploying, operating, and supporting the Istari platform across customer environments, from pre-sales technical scoping through production operations and ongoing support.
This engineer will work directly with customers and cross-functionally with sales, product engineering, and infrastructure teams to deliver reliable, secure platform deployments. Our customers include defense, aerospace, and commercial organizations operating in regulated, security-sensitive environments; this engineer should be comfortable operating within established security and compliance baselines across AWS GovCloud, Azure IL5, on-premises, and air-gapped networks.
The ideal candidate combines strong hands-on infrastructure expertise with customer-facing communication skills, a consulting mindset, and a bias toward automation.
Core Responsibilities
Deploy and maintain the Istari platform in customer environments using Terraform and Helm across multiple deployment variants (EKS, AKS, OpenShift, on-premises Kubernetes)
Support customer networking requirements including firewall rule scoping, VPN/IPSec configuration, DNS coordination, and connectivity troubleshooting
Configure and troubleshoot identity provider integrations (Zitadel, SAML, OIDC, SSO with KeyCloak, PingFederate, Okta, Azure AD)
Enable and operate services for cross-organization data sharing, including Secure Sync deployment, KMS policy exchange, IAM roles, and S3 access configuration
Build and maintain infrastructure-as-code packages and reference architectures for customer-managed deployments
Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely customer communication
Qualifications
Minimum of 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering
Solid understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management
Experience with identity providers and federation protocols (SAML, OIDC, SSO, Active Directory)
Database knowledge including transaction write-ahead logging, backup/restore operations, and monitoring
Experience with graph query languages (SPARQL, Cypher, DQL, or similar)
Proven experience operating Kubernetes in production
Experience with Helm charts and Kubernetes application packaging
Scripting proficiency in Python, Bash, or Ansible
Experience working directly with external customers in a technical delivery or consulting capacity
Excellent troubleshooting and problem-solving skills in complex production environments
Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders
U.S. Citizen
Preferred QualificationsExperience with AWS GovCloud, Azure Government (IL4/IL5), or other regulated cloud environments
Experience with OpenShift, ROSA, or non-standard Kubernetes distributions
Familiarity with compliance or security frameworks such as FedRAMP, NIST, SOC 2, CMMC, or similar
Industry certifications such as CompTIA (Network+, Security+, Linux+), AWS Solutions Architect Associate, AWS SysOps Administrator Associate, Azure Administrator Associate, or similar
Experience with network analysis tools (Wireshark, tcpdump)
Experience with PostgreSQL, cloud storage platforms, and production networking patterns
Experience with service mesh or advanced Kubernetes networking (Istio, Envoy)
Active security clearance (Secret or Top Secret)
About Istari Digital
Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels -- whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.
Focus is rewarded. Finish is remembered.
Facts are friendly. Even when they are not fun.
Fellowship is fundamental. Make others successful.
Skills Required
- At least 5 years of experience in DevOps, Infrastructure Engineering, Network Engineering, Platform Engineering, or Site Reliability Engineering
- Understanding of cloud networking, VPN/IPSec, firewalls, IAM, and secrets management
- Experience with identity providers and federation protocols including SAML, OIDC, SSO, and Active Directory
- Database knowledge including transaction write-ahead logging, backup and restore operations, and monitoring
- Experience with graph query languages such as SPARQL, Cypher, or DQL
- Production Kubernetes operations experience
- Experience with Helm charts and Kubernetes application packaging
- Scripting proficiency in Python, Bash, or Ansible
- Experience working directly with external customers in a technical delivery or consulting capacity
- Excellent troubleshooting and problem-solving skills in complex production environments
- Strong communication skills with technical and non-technical stakeholders
- U.S. citizenship
- Experience with AWS GovCloud, Azure Government IL4/IL5, or other regulated cloud environments
- Experience with OpenShift, ROSA, or non-standard Kubernetes distributions
- Familiarity with FedRAMP, NIST, SOC 2, CMMC, or similar compliance frameworks
- Industry certifications such as CompTIA Network+, Security+, Linux+, AWS Solutions Architect Associate, AWS SysOps Administrator Associate, or Azure Administrator Associate
- Experience with Wireshark or tcpdump
- Experience with PostgreSQL, cloud storage platforms, and production networking patterns
- Experience with service mesh or advanced Kubernetes networking, including Istio or Envoy
- Active Secret or Top Secret security clearance
What We Do
Digital twins are revolutionizing industries from aerospace to agriculture. Istari Digital makes them simple and more secure, unlocking models and simulations for better products - better everything. A faster, cheaper, greener digital future awaits. With Istari Digital, simple and secure collaboration finally comes to software-enabled physical systems, empowering your team with internet-like possibilities.
