Senior Platform Engineer, Security
Simplesense · Denver, CO
$180,000–$235,000from the description
Jul 7, 2026
Denver, CO
Jul 21, 2026
What this job asks for AI summary
A senior engineering role focused on deploying, automating, and hardening security tooling across a hybrid IT/OT environment using infrastructure-as-code. Day-to-day work involves building configuration automation, embedding security into deployment pipelines, managing cloud network security on AWS, and maintaining secure package management. Suited to an experienced platform or DevSecOps engineer comfortable in regulated, compliance-driven settings who can obtain a Secret clearance.
Senior level · 5+ years · Denver-Aurora-Lakewood, CO · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $140,636 (middle half $126,359–$175,118). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
This role sits at the intersection of platform/infrastructure engineering and security; the 70% hands-on engineering emphasis (IaC, automation, API integrations) drove the primary classification as Software Developers (15-1252) over Information Security Analysts (15-1212), though the security focus is substantial.
The JD states 5–10 years of experience; 5 is used as the minimum per the range floor.
A Secret clearance is a hard gate: candidates must hold one or be able to obtain one. Additionally, candidates must be US Citizens capable of obtaining a DoD NIPR account/CAC, and must hold or obtain a DoD 8140 Intermediate or Advanced Foundational Qualification within 90 days of hire.
The role is hybrid, requiring in-office presence in the Denver metro area at least two to three times per week — it is not fully remote.
Terraform is listed as the primary IaC tool with CloudFormation, OpenTofu, and Ansible named as explicit alternatives in the same requirement.
AWS native security services (SecurityHub, GuardDuty, Inspector) are listed individually under the required AWS cloud security background; they are emitted as separate skills to preserve specificity.
NIST 800-53 and NIST 800-82 familiarity is listed under Requirements; automating NIST 800-53 frameworks or DISA STIG compliance appears only under 'Preferred but Not Necessary'.
Nozomi and the listed certifications appear only under 'Preferred but Not Necessary'.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.