Job description

body> What We Do Who We Serve Resources About Get Started Staff Platform Engineer, Platform Development Denver, CO Posted May 22, 2026 District Partners is deeply engaged with a growing technology company on a search for a Staff-level engineer to anchor the architecture of the cloud platform behind one of their government programs. The cloud footprint has matured faster than the architecture standards behind it, and the platform team has reached the point where they need a senior technical owner to bring the discipline and scale required for the next phase of growth. This role partners directly with engineering leadership on architecture and execution. A growing technology company operating in a regulated, mission-critical infrastructure space. Engineering operates as a distributed team with a focused capability model. The platform function within this program owns the cloud infrastructure, cloud networking, hosted services, security tooling infrastructure, and the directory services environment that support delivery. Why You'll Actually Care: This is the platform that the program's product surface runs on. The team has matured into a focused capability function, and the next phase is not greenfield product building. It is hardening, scaling, and getting the architecture into a state that can support a meaningful expansion of the customer footprint over the next 24 months. You would own the cloud network design across a sizeable AWS environment, the IaC patterns that govern how the platform evolves, and the security controls that have to hold up under regulated scrutiny. This is a role for a senior IC who can own architecture and execution and represent the function credibly in any cross-functional forum. What You'll Be Owning: • Technical strategy and architecture for the platform end-to-end, from initial concept through delivery and ongoing maintenance • Cloud network architecture across a multi-account AWS estate (VPCs, subnets, Route53, Transit Gateways, network firewalls, multi-account traffic routing). This is the single biggest current focus area • The IaC backbone (CloudFormation or Terraform), Python or Node.js automation, and pipeline-driven infrastructure changes that govern how the platform evolves • Replatforming and rehosting work as services are modernized and consolidated within AWS • Identity and access architecture across the AWS estate, inclu ding IAM at scale, AWS Organizations, SCPs, and federated access patterns • The Windows domain environment, hybrid identity, and the security tooling infrastructure that supports the security function • Observability, reliability, and disaster recovery design including monitoring, alerting, SLOs, and runbook automation • CI/CD pipeline standards and testing rigor for platform components • Cross-functional representation of the platform function in technical and leadership forums across engineering, product, and operations • Mentorship and technical leadership across the team through design reviews, code reviews, and standards-setting The Environment: A small dev plus ops team within the program's engineering organization. The hiring leader is looking for a senior technical partner who can own architecture and execution and step into any meeting and represent the function credibly. The split is roughly 60% deep technical contribution on the hardest implementations and 40% planning, cross-team representation, scope definition with product owners, work breakdown, and process improvement. Expect a meaningful share of time in technical and leadership meetings; this is not a heads-down IC role. The current emphasis is expanding the production footprint, not greenfield product development. Expect a small-company environment with real technology constraints. Additional mid-level and senior engineers are planned to grow the team beneath this hire over the coming year. What You Bring To The Table: • 7 to 15 years of professional engineering experience building, delivering, and operating scalable, secure, reliable cloud systems • Deep AWS expertise across compute, systems management, databases, scaling strategies, and resilient multi-AZ architecture (EC2, SSM, RDS or equivalent, Auto Scaling, Load Balancers) • Strong AWS cloud networking depth: VPCs, subnets, Route53, Transit Gateways, network firewalls, PrivateLink, peering, multi-account traffic routing • Production-grade IaC in CloudFormation or Terraform, and proficiency in Python or Node.js • Demonstrated experience replatforming or rehosting services and applications within AWS • Working knowledge of security controls and compliance for regulated and federal workloads, including IAM at scale, KMS, secrets management, audit logging, and least-privilege patterns • A track record at Staff or Principal level navigating significant technical ambiguity and leading large-scale cross-functional technical efforts • Strong written and verbal communication. This role represents the platform function in meetings constantly • Ability to use AI tooling as an accelerator without depending on it for core technical thinking. Internal AI tool availability is constrained by contracting policy Must-Haves: • Deep AWS expertise, including cloud networking at scale (VPCs, Route53, Transit Gateways, network firewalls, multi-account traffic routing) • Production-grade Automation and IaC (CloudFormation or Terraform; Python or Node.js) • Working knowledge of security controls and compliance for regulated workloads Nice To Have: • Professional AWS Certifications (Solutions Architect Professional, DevOps Engineer Professional) • Windows domain and Active Directory at depth (hybrid identity, GPO, DC operations) • Observability and monitoring at scale: Splunk, Datadog, CloudWatch, Prometheus or Grafana • Operational intelligence, industrial technology, or federal mission environments • Container orchestration at production scale (Kubernetes or ECS) • Formal SRE practice exposure, chaos engineering, or service mesh patterns • Prior experience in a sub-100 person company, or comfort adapting from a larger org into one Compensation: $155,000 to $200,000 base, depending on experience Location: Denver Metro Work model: Hybrid with regular in-office presence. US citizenship required: Must be able to obtain a federal network account, CAC, and Secret Clearance. Candidates may start without active clearance. Security-relevant certification (Security+, Cloud+, AWS Solutions Architect, or AWS DevOps Engineer) required for production access within 90 days of hire. Apply Here T h e D P D i f f e r e n c e Our approach blends deep relationships with proprietary technology to uncover the best leaders and connect with them through the most direct, trusted path. What makes us different T h e D P D i f f e r e n c e Our approach blends deep relationships with proprietary technology to uncover the best leaders and connect with them through the most direct, trusted path. What makes us different T h e D P D i f f e r e n c e Our approach blends deep relationships with proprietary technology to uncover the best leaders and connect with them through the most direct, trusted path. What makes us different T h e D P D i f f e r e n c e Our approach blends deep relationships with proprietary technology to uncover the best leaders and connect with them through the most direct, trusted path. What makes us different <link rel="modulepreload" fetchpriority="low" href="frameru

Requirements

Must-haves

Who We Serve
Technical strategy and architecture for the platform end-to-end, from initial concept through delivery and ongoing maintenance
Cloud network architecture across a multi-account AWS estate (VPCs, subnets, Route53, Transit Gateways, network firewalls, multi-account traffic routing). This is the single biggest current focus area
The IaC backbone (CloudFormation or Terraform), Python or Node.js automation, and pipeline-driven infrastructure changes that govern how the platform evolves
Replatforming and rehosting work as services are modernized and consolidated within AWS
Identity and access architecture across the AWS estate, inclu ding IAM at scale, AWS Organizations, SCPs, and federated access patterns
The Windows domain environment, hybrid identity, and the security tooling infrastructure that supports the security function
Observability, reliability, and disaster recovery design including monitoring, alerting, SLOs, and runbook automation
CI/CD pipeline standards and testing rigor for platform components
Cross-functional representation of the platform function in technical and leadership forums across engineering, product, and operations
Mentorship and technical leadership across the team through design reviews, code reviews, and standards-setting
7 to 15 years of professional engineering experience building, delivering, and operating scalable, secure, reliable cloud systems

Nice-to-haves

Professional AWS Certifications (Solutions Architect Professional, DevOps Engineer Professional)
Windows domain and Active Directory at depth (hybrid identity, GPO, DC operations)
Observability and monitoring at scale: Splunk, Datadog, CloudWatch, Prometheus or Grafana
Operational intelligence, industrial technology, or federal mission environments
Container orchestration at production scale (Kubernetes or ECS)
Formal SRE practice exposure, chaos engineering, or service mesh patterns
Prior experience in a sub-100 person company, or comfort adapting from a larger org into one
Compensation: $155,000 to $200,000 base, depending on experience
Location: Denver Metro
Work model: Hybrid with regular in-office presence.
T h e D P D i f f e r e n c e
Our approach blends deep relationships with proprietary technology to uncover the best leaders and connect with them through the most direct, trusted path.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awspythonnode.jsci/cdaikubernetes

Platform: careers-html
Effort: medium