Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

Clear Creek Federal is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs.  We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Clear Creek Federal is seeking a Cloud Services Engineer in Washington, D.C. or Denver, CO.  We are seeking a dynamic and experienced Cloud Services Engineer to lead cloud transformation projects and design secure, scalable cloud infrastructure for critical government missions. You will leverage your expertise in Azure, AWS, and Google Cloud to develop cloud strategies, drive DevSecOps best practices, and enable delivery of mission-critical services through CI/CD principles. This role is customer-facing and requires the ability to translate business needs and requirements and translate them into technical requirements and guidance, while mentoring a team of engineers to deliver impactful cloud solutions, ensuring high availability, security, and performance. 

Roles and Responsibilities include, but are not limited to:

• Lead the design, development, and deployment of secure cloud infrastructures leveraging Azure, AWS, and Google Cloud.
• Collaborate with stakeholders to define cloud architecture, establish migration strategies, and optimize cloud environments.
• Architect and contribute to implementation of cloud-native solutions via DevSecOps methodologies, focusing on automation, monitoring, and continuous improvement.
• Architect Kubernetes environments, leveraging both self-hosted clusters and cloud-native solutions (AKS, EKS, GKE) to optimize scalability, security, and cost-efficiency.
• Guide decisions on whether to deploy Kubernetes independently (for full control and customization) or use managed services offered by cloud providers, depending on project requirements and constraints.
• Provide technical guidance on cloud security, compliance (FedRAMP, FISMA, NIST), and best practices for microservices, containers, and infrastructure as code (IaC).
• Drive cloud migration initiatives, including assessment, planning, and execution of IaaS, PaaS, and SaaS solutions.
• Develop and document cloud architecture, technical roadmaps, and security protocols to support strategic IT goals.
• Lead efforts in infrastructure automation using tools like Ansible, Terraform, ARM / Bicep templates, and PowerShell scripting.
• Design solutions for high availability, disaster recovery, and incident response, ensuring robust cybersecurity measures.
• Mentor and work closely with cloud engineering teams to integrate cloud services into the application lifecycle, enhancing security and performance
• Foster a collaborative culture of proactive problem solving, personal accountability, and continuous improvement through Agile/Scrum methodologies, ensuring alignment with project objectives.

Basic Qualifications:

• Active Top Secret clearance, willing to accept an interim Top Secret or a Secret clearance.
• Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent practical experience).
• 5+ years of experience in cloud architecture, including hands-on experience with Azure, AWS, or Google Cloud.
• Proven expertise in designing and implementing cloud solutions, including IaaS, PaaS, and SaaS platforms.
• Strong experience with DevOps practices, including CI/CD pipelines, Infrastructure as Code (Ansible, Terraform, ARM, Bicep, JSON, YAML), and containerization (Docker, Kubernetes, both self-managed and cloud-native implementations like AKS, EKS, GKE).
• Deep understanding of cloud security frameworks, network architectures (firewalls, VPNs, load balancers), and identity management (Azure AD, OAuth).
• Proficient in scripting and automation using PowerShell, Python, or similar languages.
• Demonstrated experience in customer-facing roles, with strong problem-solving skills and the ability to translate business requirements into technical solutions.
• Strong analytical and leadership skills, with experience managing cross-functional teams and complex project.
  
• Able to report onsite on a daily basis. 

Desired Skills:

• Master’s degree in Computer Science, Information Technology, or related field.
• Technical certifications (e.g., Google Cloud Architect, Microsoft Azure Solutions Architect, AWS Certified Solutions Architect).
• Experience with DevSecOps practices, microservices, and cloud-native development.
• Expertise in cloud cost optimization, monitoring tools (Azure Monitor, AWS CloudWatch, Google Stackdriver), and performance tuning.
• Prior experience working within government or federal environments, understanding compliance and regulatory requirements.
  

Soft Skills & Attributes

• Excellent communication skills, with the ability to engage and influence stakeholders at all levels.
• Proven leadership in cloud transformation projects, with a focus on delivering results and exceeding customer expectations.
• Strong collaborative mindset with the ability to work effectively in cross-functional teams.
• Self-motivated, proactive, and adaptable, with the ability to thrive in a fast-paced environment.

JOB SUMMARY:

The Jira Platform & Identity Automation Engineer is responsible for designing and implementing automation and structured data models across Jira Service Management and Jira Assets. This is a short-term project (6 months) contract with British Aerospace Engineering.  The role focuses on automating Active Directory (AD) access workflows and building scalable, maintainable systems that translate business processes into reliable, auditable automation. The engineer will support both the development of a structured asset/data model and the automation of high-volume AD group membership changes based on approved service requests.

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

AD Automation & Workflow Execution

• Design and implement automation that converts approved Jira tickets into AD group membership changes
• Integrate Jira workflows with execution platforms (e.g., PowerShell services or VMware Aria Orchestrator)
• Develop and maintain automation using ScriptRunner for Jira or equivalent tools
• Implement validation, idempotency, and error handling for automated actions
• Ensure all changes are logged, auditable, and attributable

Jira Assets (CMDB) Design & Implementation

• Design object schemas in Jira Assets for devices, infrastructure, applications, and services
• Define relationships between assets (e.g., system → owner → access groups)
• Establish data standards, governance, and lifecycle processes for Assets
• Integrate Assets with Jira forms to enforce structured input and reduce errors

Platform Integration & Architecture

• Define and implement separation between request intake (Jira), data/policy (Assets), and execution (automation/orchestration)
• Build integrations between Jira, Assets, and external systems via REST APIs
• Ensure scalability and maintainability of automation workflows

Identity & Access Management Alignment                                                   

• Support and improve AD group lifecycle and access request processes
• Apply IAM principles including least privilege, role-based access, and separation of duties
• Identify opportunities to reduce manual access provisioning and improve consistency

REQUIRED SKILLS AND EXPERIENCE:

• Hands-on experience with Active Directory, including security groups and group membership management
• Experience with PowerShell-based administration
• Experience with Jira Service Management, including workflows, request types, and automation
• Experience designing or working with structured data models (CMDB, asset systems, or similar)
• Experience with scripting and automation
• Experience integrating systems via APIs
• Strong understanding of RBAC, least privilege, and separation of duties

EDUCATION: Bachelors with  3+ or Master with  1+ Years of Experience

LENGTH: 6 months

LOCATION: Full Time/ On-Site in Broomfield, CO

CLEARANCE REQUIRMENT:  TS/SCI Eligible 

DOD 8570 REQUIREMENT: IAT - Level II

SALARY RANGE: $100 to $120 per hour

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

WORK ENVIRONMENT:

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

Senior Information Assurance Engineer

Location: Denver, CO (Hybrid), San Antonio, TX (Hybrid), Brooklyn, NY (Hybrid), or Remote (US Based)

About the Role

As the Senior Information Assurance Engineer, you will focus on the technical execution of our cybersecurity compliance and resilience efforts.  You are an independent, self-sufficient expert who drives the Risk Management Framework (RMF) process forward without needing constant oversight.  You will work closely with the team and the RMF Lead to align on team priorities, technical guidance, and the strategic roadmap for sustaining our Authority to Operate (ATO).

Work Model: We prioritize candidates in the Denver, CO, San Antonio, TX, and Brooklyn, NY area, but are open to remote talent.

• Locals: 2 days/week onsite.
• Remote: Quarterly travel for team meetings.

What Success Looks Like:

• 30 Days: Review security architecture and identify critical paths for the upcoming expansions.  Familiarize yourself with the hybrid cloud/on-prem infrastructure, documentation, current workflows and begin analyzing system logs to understand the current baseline.
• 60 Days: Begin gathering and analyzing artifacts for compliance activities such as vulnerability and compliance scans.  Review and update STIG Checklists to ensure technical alignment.
• 90 Days: Assume responsibility for recurring continuous monitoring activities and the submission of related artifacts.  Proactively initiate and support A&A activities in coordination with the RMF Lead.  Begin to review and update system plans and technical documentation. 

What You’ll Do

• Execute and automate technical activities to obtain and maintain multiple Authorities to Operate (ATOs) for systems securing critical infrastructure.
• Define and scale monitoring by refining alerting thresholds and enhancing SIEM dashboards to improve real-time detection capabilities.
• Manage and remediate vulnerabilities by maintaining POA&Ms and implementing automated security patches across hybrid environments.
• Collaborate with Engineering teams to gather system artifacts and ensure security controls are integrated into the development lifecycle.
• Act as a technical liaison during engagements with the AO/AODR, providing risk mitigation guidance and technical context to support the RMF Lead.
• Provide technical expertise to evolve the security roadmap in alignment with customer requirements, company priorities, and new DoD standards.

What You Bring

Required Qualifications:

• Experience: 8+ years in DoD Cybersecurity/Information Assurance roles, with a track record of executing and authoring complex RMF packages to successful ATOs.  Ability to operate autonomously in ambiguous environments while maintaining strict alignment with team priorities.
• Technical Leadership: Expert-level understanding of eMASS and its workflows, NIST 800-53, and the ability to interpret DISA STIGs into technical requirements for developers. Hands-on experience with vulnerability scanning tools (e.g., ACAS/Nessus) and SIEM environments.
• Domain Expertise: Strong understanding of DoD Zero Trust requirements and hands-on experience maintaining security standards within automated CI/CD workflows and DevSecOps environments.
• Clearance: Must be a U.S. Citizen with an active (or ability to obtain) Secret Clearance.
• Compliance: Must be able to obtain a DoD NIPR account/CAC and possess or achieve DoD 8140/8570 IAT Level III (e.g., CISSP, CASP+, or CISM) within 6 months of hire.

Preferred Qualifications:

• Based in the Denver, CO, San Antonio, TX, or Brooklyn, NY area (Hybrid/Remote availability).
• Experience in a "Senior" IA or ISSO capacity for a non-traditional defense contractor or high-growth technology startup.
• Advanced proficiency in scripting (Python, Bash, or PowerShell) or using automation tools to streamline RMF activities.
• Experience with cloud-native security services (e.g., AWS Security Hub, GuardDuty, or Azure Monitor) within GovCloud or IL-4/5 environments.

Our Culture

At Simplesense, we value high-trust autonomy. We look for people who can navigate ambiguity and are driven by the mission.

• Safety & Innovation: You embed security and reliability practices into daily work to drive continuous improvement and mitigate risk.
• People & Communication: You invite vigorous debate and offer "kindly blunt" feedback, always maintaining empathy and assuming noble intent.
• Integrity & Ethics: You build trust by honoring commitments, acting ethically, and resolving conflict through direct, honest communication.
• Strategic Problem Solving: You focus on high-priority issues to create documented, and scalable solutions—avoiding shortcuts.
• Agility: You move quickly to fix small problems, learn from the past, and pivot transparently when the mission requires it.

Compensation and Benefits

Pay Range: $125,000- $155,000 per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.

Overview

Responsibilities

• Participate in advanced Professional Services engagement types, including:
  • Enterprise migrations and architecture modernization efforts
  • System challenge resolution and advanced troubleshooting
  • System Recovery Confidence Exercises and disaster recovery protection
  • System proofs of concept for advanced ArcGIS Enterprise deployments
  • Advanced ArcGIS Enterprise and database upgrades and deployments
  • Windows, Linux, and Kubernetes‑based deployments
• Apply working knowledge of technologies that complement ArcGIS Enterprise, including relational databases (RDBMS), NoSQL stores, object storage systems, SAN, NAS, and related enterprise data tier components.
• Apply understanding of server‑side servicing stack models, enterprise authentication methods (native credentials, domain‑based authentication, SAML/OIDC, and related protocols), and foundational networking concepts such as TCP/IP, DNS, routing, and TLS.
• Lead customers and colleagues using well‑defined, repeatable system engineering methods that create shared understanding and successful outcomes at the intersection of ArcGIS Enterprise and enterprise IT systems.
• Collaborate closely with Professional Services staff to resolve complex technical challenges and support the technical growth and skill development of less‑experienced colleagues.

Requirements

• 5+ years of professional experience implementing and supporting enterprise GIS systems
• Experience administering ArcGIS Enterprise
• Familiarity with troubleshooting technical issues in server‑based systems
• Demonstrated ability to consistently apply a systematic, best‑practice‑driven approach to system engineering
• Ability to clearly communicate technical concepts to customers, executives, and technical and non‑technical audiences
• Ability to travel up to 25%
• Bachelor’s degree in Computer Science, Mathematics, Geographic Information Systems (GIS), or a related STEM field

Recommended Qualifications

• Knowledge of or interest in additional ArcGIS technologies
• Practical experience with one or more major cloud providers
• Experience with scripting and/or programming languages such as shell scripting, Python, PowerShell, or similar
• System administration experience with Windows, Linux, and/or Kubernetes platforms
• Knowledge of or interest in networking concepts including HTTP, TCP, TLS, DNS, firewalls, and proxy technologies

#LI-MN1

#LI-Onsite

Overview

Responsibilities

• Participate in advanced Professional Services engagement types, including:
  • Enterprise migrations and architecture modernization efforts
  • System challenge resolution and advanced troubleshooting
  • System Recovery Confidence Exercises and disaster recovery protection
  • System proofs of concept for advanced ArcGIS Enterprise deployments
  • Advanced ArcGIS Enterprise and database upgrades and deployments
  • Windows, Linux, and Kubernetes‑based deployments
• Apply working knowledge of technologies that complement ArcGIS Enterprise, including relational databases (RDBMS), NoSQL stores, object storage systems, SAN, NAS, and related enterprise data tier components.
• Apply understanding of server‑side servicing stack models, enterprise authentication methods (native credentials, domain‑based authentication, SAML/OIDC, and related protocols), and foundational networking concepts such as TCP/IP, DNS, routing, and TLS.
• Lead customers and colleagues using well‑defined, repeatable system engineering methods that create shared understanding and successful outcomes at the intersection of ArcGIS Enterprise and enterprise IT systems.
• Collaborate closely with Professional Services staff to resolve complex technical challenges and support the technical growth and skill development of less‑experienced colleagues.

Requirements

• 5+ years of professional experience implementing and supporting enterprise GIS systems
• Experience administering ArcGIS Enterprise
• Familiarity with troubleshooting technical issues in server‑based systems
• Demonstrated ability to consistently apply a systematic, best‑practice‑driven approach to system engineering
• Ability to clearly communicate technical concepts to customers, executives, and technical and non‑technical audiences
• Ability to travel up to 25%
• Bachelor’s degree in Computer Science, Mathematics, Geographic Information Systems (GIS), or a related STEM field

Recommended Qualifications

• Knowledge of or interest in additional ArcGIS technologies
• Practical experience with one or more major cloud providers
• Experience with scripting and/or programming languages such as shell scripting, Python, PowerShell, or similar
• System administration experience with Windows, Linux, and/or Kubernetes platforms
• Knowledge of or interest in networking concepts including HTTP, TCP, TLS, DNS, firewalls, and proxy technologies

#LI-MN1

#LI-Onsite

Overview

Responsibilities

• Participate in advanced Professional Services engagement types, including:
  • Enterprise migrations and architecture modernization efforts
  • System challenge resolution and advanced troubleshooting
  • System Recovery Confidence Exercises and disaster recovery protection
  • System proofs of concept for advanced ArcGIS Enterprise deployments
  • Advanced ArcGIS Enterprise and database upgrades and deployments
  • Windows, Linux, and Kubernetes‑based deployments
• Apply working knowledge of technologies that complement ArcGIS Enterprise, including relational databases (RDBMS), NoSQL stores, object storage systems, SAN, NAS, and related enterprise data tier components.
• Apply understanding of server‑side servicing stack models, enterprise authentication methods (native credentials, domain‑based authentication, SAML/OIDC, and related protocols), and foundational networking concepts such as TCP/IP, DNS, routing, and TLS.
• Lead customers and colleagues using well‑defined, repeatable system engineering methods that create shared understanding and successful outcomes at the intersection of ArcGIS Enterprise and enterprise IT systems.
• Collaborate closely with Professional Services staff to resolve complex technical challenges and support the technical growth and skill development of less‑experienced colleagues.

Requirements

• 5+ years of professional experience implementing and supporting enterprise GIS systems
• Experience administering ArcGIS Enterprise
• Familiarity with troubleshooting technical issues in server‑based systems
• Demonstrated ability to consistently apply a systematic, best‑practice‑driven approach to system engineering
• Ability to clearly communicate technical concepts to customers, executives, and technical and non‑technical audiences
• Ability to travel up to 25%
• Bachelor’s degree in Computer Science, Mathematics, Geographic Information Systems (GIS), or a related STEM field

Recommended Qualifications

• Knowledge of or interest in additional ArcGIS technologies
• Practical experience with one or more major cloud providers
• Experience with scripting and/or programming languages such as shell scripting, Python, PowerShell, or similar
• System administration experience with Windows, Linux, and/or Kubernetes platforms
• Knowledge of or interest in networking concepts including HTTP, TCP, TLS, DNS, firewalls, and proxy technologies

#LI-MN1

#LI-Onsite

Overview

Responsibilities

• Participate in advanced Professional Services engagement types, including:
  • Enterprise migrations and architecture modernization efforts
  • System challenge resolution and advanced troubleshooting
  • System Recovery Confidence Exercises and disaster recovery protection
  • System proofs of concept for advanced ArcGIS Enterprise deployments
  • Advanced ArcGIS Enterprise and database upgrades and deployments
  • Windows, Linux, and Kubernetes‑based deployments
• Apply working knowledge of technologies that complement ArcGIS Enterprise, including relational databases (RDBMS), NoSQL stores, object storage systems, SAN, NAS, and related enterprise data tier components.
• Apply understanding of server‑side servicing stack models, enterprise authentication methods (native credentials, domain‑based authentication, SAML/OIDC, and related protocols), and foundational networking concepts such as TCP/IP, DNS, routing, and TLS.
• Lead customers and colleagues using well‑defined, repeatable system engineering methods that create shared understanding and successful outcomes at the intersection of ArcGIS Enterprise and enterprise IT systems.
• Collaborate closely with Professional Services staff to resolve complex technical challenges and support the technical growth and skill development of less‑experienced colleagues.

Requirements

• 5+ years of professional experience implementing and supporting enterprise GIS systems
• Experience administering ArcGIS Enterprise
• Familiarity with troubleshooting technical issues in server‑based systems
• Demonstrated ability to consistently apply a systematic, best‑practice‑driven approach to system engineering
• Ability to clearly communicate technical concepts to customers, executives, and technical and non‑technical audiences
• Ability to travel up to 25%
• Bachelor’s degree in Computer Science, Mathematics, Geographic Information Systems (GIS), or a related STEM field

Recommended Qualifications

• Knowledge of or interest in additional ArcGIS technologies
• Practical experience with one or more major cloud providers
• Experience with scripting and/or programming languages such as shell scripting, Python, PowerShell, or similar
• System administration experience with Windows, Linux, and/or Kubernetes platforms
• Knowledge of or interest in networking concepts including HTTP, TCP, TLS, DNS, firewalls, and proxy technologies

#LI-MN1

#LI-Onsite

Overview

Responsibilities

• Participate in advanced Professional Services engagement types, including:
  • Enterprise migrations and architecture modernization efforts
  • System challenge resolution and advanced troubleshooting
  • System Recovery Confidence Exercises and disaster recovery protection
  • System proofs of concept for advanced ArcGIS Enterprise deployments
  • Advanced ArcGIS Enterprise and database upgrades and deployments
  • Windows, Linux, and Kubernetes‑based deployments
• Apply working knowledge of technologies that complement ArcGIS Enterprise, including relational databases (RDBMS), NoSQL stores, object storage systems, SAN, NAS, and related enterprise data tier components.
• Apply understanding of server‑side servicing stack models, enterprise authentication methods (native credentials, domain‑based authentication, SAML/OIDC, and related protocols), and foundational networking concepts such as TCP/IP, DNS, routing, and TLS.
• Lead customers and colleagues using well‑defined, repeatable system engineering methods that create shared understanding and successful outcomes at the intersection of ArcGIS Enterprise and enterprise IT systems.
• Collaborate closely with Professional Services staff to resolve complex technical challenges and support the technical growth and skill development of less‑experienced colleagues.

Requirements

• 5+ years of professional experience implementing and supporting enterprise GIS systems
• Experience administering ArcGIS Enterprise
• Familiarity with troubleshooting technical issues in server‑based systems
• Demonstrated ability to consistently apply a systematic, best‑practice‑driven approach to system engineering
• Ability to clearly communicate technical concepts to customers, executives, and technical and non‑technical audiences
• Ability to travel up to 25%
• Bachelor’s degree in Computer Science, Mathematics, Geographic Information Systems (GIS), or a related STEM field

Recommended Qualifications

• Knowledge of or interest in additional ArcGIS technologies
• Practical experience with one or more major cloud providers
• Experience with scripting and/or programming languages such as shell scripting, Python, PowerShell, or similar
• System administration experience with Windows, Linux, and/or Kubernetes platforms
• Knowledge of or interest in networking concepts including HTTP, TCP, TLS, DNS, firewalls, and proxy technologies

#LI-MN1

#LI-Onsite

Platform Engineer, Windows Infrastructure

Location: Denver, CO (Hybrid), San Antonio, TX (Hybrid), Brooklyn, NY  or Remote (US Based) 

About the Role:

As a Platform Engineer, Windows Infrastructure, you will play a critical role in building and maintaining the Windows-based infrastructure that underpins Simplesense’s operational platform helping to secure critical infrastructure. You will support the implementation, automation, and ongoing improvement of Windows domain infrastructure and partner closely with the Platform, Security, and Operations teams to ensure our systems remain resilient, secure, and mission-ready.

Work Model: We prioritize candidates in the Denver, CO, San Antonio, TX, and Brooklyn, NY area, but are open to remote talent.

• Locals: 2 days/week onsite.
• Remote: Quarterly travel for team meetings.

What Success Looks Like: 

• 30 Days: Onboard into the platform environment, gain familiarity with Windows infrastructure, IaC workflows, and internal tools.
• 60 Days: Develop and deploy Windows automation scripts and infrastructure updates and begin contributing to tasks following the development workflow.
• 90 Days: Take ownership of small- to medium-sized infrastructure tasks, contribute to system reliability and automation efforts, and collaborate cross-functionally to support operations and platform enhancements.

What You’ll Do

• Implement Infrastructure-as-Code solutions:
  Deploy features, fixes, and updates to Windows infrastructure using infrastructure-as-code (IaC) practices, ensuring reliability, performance, and security.
• Automate Windows environments and processes:
  Develop, test, and maintain automations for system configuration, deployments, and operational workflows, including CI/CD pipelines.
• Collaborate across teams to improve systems:
  Partner with Platform, Security, and Operations teams to troubleshoot issues, integrate new assets, and continuously improve system performance and resilience.
• Contribute to technical delivery and growth:
  Actively participate in code reviews, follow engineering best practices, and contribute to solving technical challenges while continuing to build your skillset.

What You Bring

Required Qualifications:

Experience:
3+ years of experience using software development and Infrastructure-as-Code practices to manage Windows infrastructure.

Technical Skills:

• Strong experience with self-hosted Windows Server environments, including Active Directory, Group Policy, and system performance tuning
• Proficiency in PowerShell scripting for automation (modules, system configuration, networking, services)
• Experience with CI/CD tools (e.g., GitHub Actions, Jenkins, GitLab CI, Azure DevOps)
• Familiarity with version control (Git) and infrastructure deployment workflows
• Experience with monitoring and logging tools, including analyzing Windows Event Logs and system metrics

Familiarity with AWS infrastructure tools (e.g., CloudFormation, Systems Manager)

• Domain Knowledge: Understanding of secure system configuration, automation best practices, and infrastructure reliability in mission-critical or regulated environments.
• Travel: Quarterly travel required for team planning and collaboration.

Clearance & Eligibility:

• Must be a U.S. Citizen
• Must be able to obtain a DoD NIPR network account and Common Access Card (CAC)
• Must have, or be able to obtain, a Secret Clearance
• Security relevant certification (e.g., CompTIA Security+, Cloud+) or willingness to obtain

Preferred Qualifications:

• Based in Denver, CO, San Antonio, TX, or Brooklyn, NY
• Experience working within DoD, Air Force, or Federal contractor environments
• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related field (or equivalent experience)
• AWS certification (e.g., AWS Certified Cloud Practitioner)
• Experience with PowerShell DSC
• Experience using Ansible for Windows configuration and automation
• Hands-on experience with Windows domain administration
  
  

Our Culture

At Simplesense, we value high-trust autonomy. We look for people who can navigate ambiguity and are driven by the mission.

• Safety & Innovation: You embed security and reliability practices into daily work to drive continuous improvement and mitigate risk.
• People & Communication: You invite vigorous debate and offer "kindly blunt" feedback, always maintaining empathy and assuming noble intent.
• Integrity & Ethics: You build trust by honoring commitments, acting ethically, and resolving conflict through direct, honest communication.
• Strategic Problem Solving: You focus on high-priority issues to create documented, and scalable solutions—avoiding shortcuts.
• Agility: You move quickly to fix small problems, learn from the past, and pivot transparently when the mission requires it.

Compensation and Benefits

Pay Range: $115k-$145k per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.

What You’ll Do 

The Sr. Cloud Engineer is primarily responsible for designing, implementing, and operating Strive Health’s cloud platforms and services with a focus on security, reliability, automation and user experience. The ideal candidate will have strong technical expertise in Azure and other cloud services, cloud networking (including always-on VPN and ZTNA), and automation/scripting to drive efficiency across the IT and Security department. 

You will evolve Strive’s cloud infrastructure, identity, and connectivity patterns; implement AI agents and automations that improve enterprise productivity; and partner closely with Security, IT, Engineering, and Product teams to ensure that our environments are secure, scalable, and aligned with business goals. This role will lead and contribute to cloud projects and initiatives by monitoring progress, addressing issues, and maintaining communication while ensuring best practices and security. 

This role will report to the VP Security and Enterprise Technology.

The Day to Day 

• Design, implement, and maintain secure, highly available cloud infrastructure in Azure (and related SaaS/PaaS platforms) to support Strive’s applications, data, and workforce. 
• Own and manage cloud networking including virtual networks, network security groups, application gateways, load balancers, private endpoints, and hybrid connectivity. 
• Architect, implement, and support always-on VPN, ZTNA, and enterprise VPN connections to provide secure, reliable access for a distributed workforce and third parties. 
• Maintain and enhance Azure Active Directory/Entra ID, conditional access, identity governance, and related policies, including DNS and directory integrations, to support a modern Zero Trust architecture. 
• Implement and support AI agents and automations (e.g., Glean, Claude, and other platforms) that streamline IT workflows, improve self-service, and drive measurable efficiency and quality improvements across the enterprise. 
• Develop and maintain automation, scripts, and tooling (e.g., PowerShell, Python, Cloud Formation, Azure/AWS CLI) to replace manual processes, improve consistency, and reduce operational toil for the IT department. 
• Collaborate with Security Engineering to ensure cloud environments are designed and operated according to security best practices, including secure configurations, monitoring, logging, and integration with security tooling (e.g., SIEM, EDR, CASB/SASE). 
• Partner with Infrastructure, End User Computing, and Application teams to ensure that cloud and networking solutions are integrated, resilient, and aligned to organizational goals and objectives. 
• Contribute to the architecture, implementation, and maintenance of CI/CD pipelines and infrastructure-as-code patterns to enable repeatable, secure deployments of infrastructure and configuration. 
• Monitor the performance, capacity, and cost of cloud environments; implement optimizations to improve stability, performance, and financial efficiency. 
• Create and maintain clear documentation for cloud architectures, standards, runbooks, and automations. 
• Participate in an on-call rotation and serve as an escalation point for complex cloud and infrastructure incidents. 
• Lead and/or contribute to IT and security projects related to cloud infrastructure, networking, and automation, ensuring timely and efficient delivery. 
• Provide guidance and informal mentorship to other engineers and administrators, helping to elevate cloud and automation capabilities across the team. 
• Report on time spent across projects, tickets, and meetings to inform planning and continuous improvement within IT. 

Minimum Qualifications 

• 6+ years in any combination of higher education/experience/certifications in IT infrastructure, systems administration, cloud engineering, or related roles of increasing complexity and scope. 
• 3+ years hands-on experience designing, implementing, and operating cloud infrastructure (AWS strongly preferred) including virtual networks, compute, storage, identity, and security controls. 
• Demonstrated experience with cloud networking (e.g., VNETs, VPN gateways, Global Secure Access, or equivalent, site-to-site and client VPN, ZTNA/Zero Trust, SASE). 
• Demonstrable experience with scripting and automation tools (e.g., PowerShell, Python, CloudFormation, AWS/Azure CLI) to manage and automate cloud and infrastructure services. 
• Experience implementing and supporting remote access technologies such as always-on VPN and enterprise VPN clients across a distributed workforce. 
• Strong understanding of identity and access management concepts and experience with Azure AD/Entra ID, conditional access, and modern authentication (SAML/OIDC/OAuth). 
• Internet Connectivity - Minimum speeds: 3.8 Mbps / 3.0 Mbps (up/down); latency < 60 ms. 
• Ability to travel and be onsite to meet business needs. 

Preferred Qualifications 

• Experience with Zero Trust architectures and implementing ZTNA, SASE, or similar technologies in an enterprise environment. 
• Experience writing and maintaining CI/CD pipelines and infrastructure-as-code for cloud resources (e.g., GitHub Actions, Azure DevOps, or similar). 
• Familiarity with emerging technologies such as AI and their implications for security, compliance, and enterprise productivity; experience implementing AI-driven agents or automations strongly preferred. 
• Experience integrating cloud platforms with security tooling (e.g., SIEM, security analytics, vulnerability management) and participating in incident response for cloud-related events. 
• Architectural experience designing and implementing secure, scalable cloud systems and networks. 
• Experience in regulated healthcare or similar environments and familiarity with security frameworks/standards (e.g., HITRUST, SOC 2, HIPAA). 
• Industry certifications such as Microsoft Azure Certifications, AWS Certifications, CISSP, CISM, or GIAC certifications are a plus. 

About You 

• Excellent problem-solving and analytical skills, with the ability to assess complex cloud and networking issues and provide effective, pragmatic solutions. 
• Strong written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical stakeholders. 
• Proven ability to collaborate effectively with cross-functional partners, including senior staff and executives, and to balance operational needs with strategic objectives. 
• High-level attention to detail, strong organizational and administrative skills, and the ability to manage multiple priorities in a fast-paced environment. 
• Demonstrated leadership and mentorship capabilities, with the ability to influence and elevate others even without direct reporting relationships. 
• Adaptable to rapidly expanding and changing operations; comfortable working independently with little or no direct supervision. 

Annual Salary Range: $108,500 - $136,000. This position is also eligible for a target annual bonus of 10% 

Who we are:

At Focused, we move quickly to deliver quality software that achieves client outcomes and meets their customer’s needs. We strategically partner with our clients to leverage our expertise in design and software, while our clients bring their own domain expertise. We work with a variety of clients from different industries, collaborating as we get new products to market, modernizing legacy systems, or helping teams learn the skills they need to be successful.   

Our values:

• Listen first • We are experts in product practices but life long learners in the domain of our customers. We research, collaborate, and understand. 
• Learn why • We ask questions and talk to users to understand problem spaces, objectives, and goals, which allows us to deeply invest and drive towards the outcomes of our clients. 
• Love your craft • We love diving into a variety of domains and solving problems.  We take pride in delivering value, in communicating progress, and guiding our clients to success.

We are seeking an experienced Staff Observability Consultant with deep expertise in OpenTelemetry and strong Platform Engineering capabilities to help organizations implement, optimize, and scale their observability infrastructure. This role requires a seasoned consultant who can design comprehensive telemetry strategies, implement distributed tracing solutions, establish robust monitoring practices, and interface closely with clients on the observability journey.

Key Responsibilities:

OpenTelemetry & Observability

• Design and implement end-to-end OpenTelemetry solutions across diverse technology stacks
• Configure and deploy OpenTelemetry Collectors for efficient data collection, processing, sampling, and routing
• Establish telemetry pipelines for metrics, traces, and logs across microservices architectures
• Optimize collector configurations for performance, reliability, and cost-effectiveness

Platform Engineering & Infrastructure

• Augment existing infrastructure with with integrated observability solutions
• Implement Infrastructure as Code (IaC) solutions using Terraform, Pulumi, CloudFormation, etc.
• Architect and manage Kubernetes clusters with comprehensive monitoring and logging
• Build CI/CD pipelines with embedded observability and automated testing

Site Reliability Engineering (SRE)

• Establish and maintain Service Level Indicators (SLIs), Objectives (SLOs), and Agreements (SLAs)
• Implement error budgets, toil reduction strategies, and capacity planning
• Support incident response procedures and post-mortem processes

Cloud & DevOps Engineering

• Deploy and manage observability infrastructure across AWS, GCP, and Azure
• Establish security, compliance, and governance frameworks for telemetry data
• Experience automating Agent Evaluations in CI/CD pipelines and observability backends.

Required Qualifications:

Core Observability & OpenTelemetry

• 3-7 years of experience in observability, monitoring, and distributed systems
• Deep hands-on experience with OpenTelemetry ecosystem, including SDKs, APIs, and specifications
• Proficiency with OpenTelemetry Collector configuration, processors, exporters, and receivers
• Strong understanding of telemetry data models, semantic conventions, and instrumentation best practices

Platform Engineering & DevOps

• 5+ years of Platform Engineering or DevOps experience with focus on site reliability, observability, and incident response
• Proficiency with Infrastructure as Code tools (Terraform, Pulumi, CloudFormation, CDK)
• Strong experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD)

Cloud & Infrastructure

• Hands-on experience with major cloud providers (AWS, GCP, Azure) and their observability services
• Experience with container technologies (Docker, Podman) and container registries
• Knowledge of networking, security, load balancing, and distributed systems concepts

Site Reliability Engineering

• Experience implementing SRE practices including error budgets and toil metrics
• Proficiency in incident management, on-call procedures, and post-mortem culture
• Experience with capacity planning, performance optimization, and scalability design

Programming & Automation

• Proficiency in multiple programming languages preferred (Go, Python, Java, Node.js, Rust)
• Strong scripting and automation skills (Bash, Python, PowerShell)
• Understanding of software engineering best practices and testing methodologies

Preferred Qualifications (Exceptional Candidates)

AI & Agentic Frameworks

• Understanding of Large Language Models (LLMs) and their application in DevOps
• Knowledge of vector databases, embeddings, and retrieval-augmented generation (RAG)
• Experience with AI/ML model deployment and monitoring in production environments

Leadership & Communication

• Strong technical writing and documentation skills
• Ability to present complex technical concepts to diverse stakeholders
• A passion for knowledge sharing

Key Competencies

• Systems thinking and ability to design holistic observability solutions
• Strong analytical and troubleshooting skills for complex distributed systems
• Curiosity about emerging technologies, particularly AI applications in operations
• Adaptability to rapidly evolving cloud-native and observability technologies
• Collaborative mindset with focus on enabling developer productivity and system reliability

What Sets Exceptional Candidates Apart:

• Experience with Honeycomb
• Contributions to open-source observability or AI framework projects
• Track record of implementing platform engineering solutions that significantly improved developer experience
• Experience scaling observability infrastructure to handle high event volume

What to know before you apply: 

• This role will require being in the Denver office three days per week and up to 20% travel within the United States.
• Focused is unable to sponsor or take over sponsorship of the employment Visa process at this time.
• The Denver base salary range for this role is $160,000 - $200,000.

Who we are:

At Focused, we move quickly to deliver quality software that achieves client outcomes and meets their customer’s needs. We strategically partner with our clients to leverage our expertise in design and software, while our clients bring their own domain expertise. We work with a variety of clients from different industries, collaborating as we get new products to market, modernizing legacy systems, or helping teams learn the skills they need to be successful.   

Our values:

• Listen first • We are experts in product practices but life long learners in the domain of our customers. We research, collaborate, and understand. 
• Learn why • We ask questions and talk to users to understand problem spaces, objectives, and goals, which allows us to deeply invest and drive towards the outcomes of our clients. 
• Love your craft • We love diving into a variety of domains and solving problems.  We take pride in delivering value, in communicating progress, and guiding our clients to success.

We are seeking an experienced Observability Consultant with deep expertise in OpenTelemetry and strong Platform Engineering capabilities to help organizations implement, optimize, and scale their observability infrastructure. This role requires a specialist who can design comprehensive telemetry strategies, implement distributed tracing solutions, establish robust monitoring practices, and interface closely with clients on the observability journey.

Key Responsibilities:

OpenTelemetry & Observability

• Design and implement end-to-end OpenTelemetry solutions across diverse technology stacks
• Configure and deploy OpenTelemetry Collectors for efficient data collection, processing, sampling, and routing
• Establish telemetry pipelines for metrics, traces, and logs across microservices architectures
• Optimize collector configurations for performance, reliability, and cost-effectiveness

Platform Engineering & Infrastructure

• Augment existing infrastructure with with integrated observability solutions
• Implement Infrastructure as Code (IaC) solutions using Terraform, Pulumi, CloudFormation, etc.
• Architect and manage Kubernetes clusters with comprehensive monitoring and logging
• Build CI/CD pipelines with embedded observability and automated testing

Site Reliability Engineering (SRE)

• Establish and maintain Service Level Indicators (SLIs), Objectives (SLOs), and Agreements (SLAs)
• Implement error budgets, toil reduction strategies, and capacity planning
• Support incident response procedures and post-mortem processes

Cloud & DevOps Engineering

• Deploy and manage observability infrastructure across AWS, GCP, and Azure
• Establish security, compliance, and governance frameworks for telemetry data
• Experience automating Agent Evaluations in CI/CD pipelines and observability backends.

Required Qualifications:

Core Observability & OpenTelemetry

• 3-5 years of experience in observability, monitoring, and distributed systems
• Deep hands-on experience with OpenTelemetry ecosystem, including SDKs, APIs, and specifications
• Proficiency with OpenTelemetry Collector configuration, processors, exporters, and receivers
• Strong understanding of telemetry data models, semantic conventions, and instrumentation best practices

Platform Engineering & DevOps

• 5+ years of Platform Engineering or DevOps experience with focus on site reliability, observability, and incident response
• Proficiency with Infrastructure as Code tools (Terraform, Pulumi, CloudFormation, CDK)
• Strong experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD)

Cloud & Infrastructure

• Hands-on experience with major cloud providers (AWS, GCP, Azure) and their observability services
• Experience with container technologies (Docker, Podman) and container registries
• Knowledge of networking, security, load balancing, and distributed systems concepts

Site Reliability Engineering

• Experience implementing SRE practices including error budgets and toil metrics
• Proficiency in incident management, on-call procedures, and post-mortem culture
• Experience with capacity planning, performance optimization, and scalability design

Programming & Automation

• Proficiency in multiple programming languages preferred (Go, Python, Java, Node.js, Rust)
• Strong scripting and automation skills (Bash, Python, PowerShell)
• Understanding of software engineering best practices and testing methodologies

Preferred Qualifications (Exceptional Candidates)

AI & Agentic Frameworks

• Understanding of Large Language Models (LLMs) and their application in DevOps
• Knowledge of vector databases, embeddings, and retrieval-augmented generation (RAG)
• Experience with AI/ML model deployment and monitoring in production environments

Leadership & Communication

• Strong technical writing and documentation skills
• Ability to present complex technical concepts to diverse stakeholders
• A passion for knowledge sharing

Key Competencies

• Systems thinking and ability to design holistic observability solutions
• Strong analytical and troubleshooting skills for complex distributed systems
• Curiosity about emerging technologies, particularly AI applications in operations
• Adaptability to rapidly evolving cloud-native and observability technologies
• Collaborative mindset with focus on enabling developer productivity and system reliability

What Sets Exceptional Candidates Apart:

• Experience with Honeycomb
• Contributions to open-source observability or AI framework projects
• Track record of implementing platform engineering solutions that significantly improved developer experience
• Experience scaling observability infrastructure to handle high event volume

What to know before you apply: 

• This role will require being in the Chicago office three days per week and up to 20% travel within the United States.
• Focused is unable to sponsor or take over sponsorship of the employment Visa process at this time.
• The Chicago base salary range for this role is $130,000 - $170,000.