Platform Engineer

At S5, we offer a leading-edge compensation package that includes top-tier salaries, up to 25% profit sharing into a qualified retirement account, flexible PTO, and company paid medical, vision and dental premiums for you and your family. You'll join a team of innovative engineers committed to innovation and excellence. We prioritize professional growth and team cohesion through technical trainings, team dinners, retreats, and an annual fully sponsored off-site. Our culture is built to support your career development, personal well-being, and long-term success.

Position Description:

Own the reliability, security, and velocity of our AWS-based platforms. You'll design, build, and operate the cloud foundation (networking, IAM, CI/CD, observability, runtime) that lets product teams ship fast, safely, and cost-effectively.

• Platform Architecture: Design and evolve multi-account AWS Landing Zones (Control Tower/SCPs), VPC architectures, and secure networking (Transit Gateway, PrivateLink, VPC Endpoints, Route 53, ALB/NLB).
• Infrastructure as Code: Build everything as code using Terraform/OpenTofu or AWS CDK; enforce drift detection, reviews, and automated testing.
• Runtime & Containers: Operate EKS/ECS and Lambda platforms; define golden images, Helm charts, and deployment patterns (blue/green, canary).
• CI/CD: Own pipelines (GitLab CI/Jenkins/GitHub Actions/Argo CD) for infra and app delivery; implement reusable templates and policy checks.
• Observability: Implement metrics, logs, and traces (CloudWatch, OpenSearch, Prometheus/Grafana, OpenTelemetry); set SLOs, SLIs, alerts, and runbooks.
• Security & Compliance: Apply least-privilege IAM, key management (KMS), secrets (SM/SSM), GuardDuty/Inspector controls; support ATO/IATT, FedRAMP/DoD SRG, STIG-aligned baselines.
• Data/Services Enablement: Provide managed patterns for S3, DynamoDB/RDS, API Gateway, Step Functions, SQS/SNS, OpenSearch, CloudFront.
• Reliability & Ops: Drive capacity planning, cost optimization, backup/DR, chaos/ game days, and incident response with postmortems that fix root causes.
• Developer Experience: Build self-service portals, templates, and docs; streamline onboarding and reduce time-to-first-deploy.

Required Skills:

• 4+ years in platform/SRE/devops roles building on AWS at scale.
• Strong IaC (Terraform/OpenTofu or CDK) and cloud networking fundamentals.
• Solid CI/CD design and pipeline automation; artifact/versioning best practices.
• Hands-on with observability stacks and on-call operations (SLOs, alerting, runbooks).
• Security-first mindset: IAM policy design, network isolation, secrets, patching.
• Proficient in one or more languages: Python

In addition to the above skills, the successful candidate will possess some subset of the following:

• DoD/IC program experience; familiarity with ATO/IATT, RMF, and DoD SRG.
• Experience with Control Tower, Organizations, SCPs, SSO, multi-region designs.
• Data platform patterns (eventing with SNS/SQS/Kinesis; ETL with Step Functions/Lambda).
• Cost governance (budgets, anomaly detection, tagging/FinOps).
• Tools: Packer, Helm, Argo CD, Vault, HashiCorp Suite, Grafana Loki/Tempo, Falco.
• Certifications (AWS SA/DevOps Pro) are a plus, not required.

Position Locations: Aurora, CO

Security Clearance: TS/SCI w/CI Poly

Position Class: Platform Engineer

Work Schedule: Onsite

Full-Time / Part-Time: Full-Time

This position offers a comprehensive benefits package that includes significant profit-sharing opportunities, retirement plan, company-paid health, vision, and dental care benefits, flexible PTO, and bonus opportunities.

The base salary range for this position is $158,300.00 - $208,420.00 annually, based on full-time employment in the Denver, Colorado area. The final compensation will be determined based on several factors, including but not limited to relevant experience, qualifications, education, and market conditions.

S5 Analytics considers several factors when extending job offers, including but not limited to candidates' key skills, relevant work and/or military experience, location, training, education, and certifications.

S5 is proud to be an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.