Senior Data and Platform Engineer

Remote, United States | Full-time employee

Reports to: Technical Lead and Solution Architect

Engagement type: Full-time salaried employee, W-2, with benefits

Term: Permanent, with an initial twelve-month program assignment

Location: Fully remote within the United States. No travel required

Status: United States citizenship required. Offer contingent on program start

ABOUT KRYPTEK

Kryptek LLC builds governed AI systems for clients operating under regulatory obligation. The work this role supports is agentic compliance monitoring at scale: pipelines that ingest public and client-furnished data, validate it against regulatory requirements using deterministic rules, detect drift over time, and assemble evidence packages a reviewer can defend months after the fact. The agentic layer drafts narratives, clusters findings to root cause, and reconciles conflicting sources. It never renders a determination. Every finding passes a recorded human review gate before it can leave the system. The platform runs on Amazon Bedrock inside AWS GovCloud (US) and is engineered to carry a federal Authority to Operate.

Kryptek also delivers managed detection and response, cloud security, and Zero Trust engineering on Microsoft Sentinel and Palo Alto Cortex XSIAM. We are a small, senior team, and the people we hire own their scope end to end rather than executing someone else's ticket queue.

YOUR CAREER

You own the data layer. Every conclusion the platform reaches traces back to bytes you collected, hashed, and normalized, and if that lineage does not hold, nothing downstream is defensible. You will build the ingestion connectors, the immutable evidence store, the normalized data model, and the infrastructure-as-code that stands the whole environment up inside AWS GovCloud. The first hard milestone lands thirty days in, when a deployed environment has to exist and run unattended on a recurring schedule.

YOUR IMPACT

• Build and operate versioned ingestion connectors against public and client-furnished data sources, each declaring its rate posture and reporting health telemetry

• Implement a write-once raw artifact store on Amazon S3 with object lock and versioning, capturing on every fetch the request URL and method, request and response headers, HTTP status, the complete redirect chain, the response body verbatim, the timestamp, the connector version, and a SHA-256 hash

• Build a normalized common data model in Aurora PostgreSQL or equivalent database so any downstream finding resolves to its full traceability chain without a join the analyst has to assemble by hand

• Implement stable internal entity identity with a history of observed external identifiers, so an organization that renames or an endpoint that moves is tracked as the same entity rather than a deletion and a creation

• Author a source-of-truth precedence engine as versioned registry configuration rather than logic buried in code, recording every conflicting value, its source, and the rule applied whenever two sources disagree

• Own the infrastructure-as-code for an AWS GovCloud environment: Step Functions, EventBridge, Lambda, Fargate, KMS customer-managed keys, Secrets Manager, CloudWatch, and CloudTrail, with no long-lived instance fleet inside the boundary

• Implement least-privilege role separation aligned to the data flow, so the ingestion role can write to the raw store but cannot read the case store, and no stage writes upstream of itself

• Instrument a per-cycle coverage manifest recording every record in the monitored population, whether an attempt was made, the outcome, and the documented source condition behind any exclusion, so the denominator cannot be quietly reduced to improve the ratio

• Deliver a deployed recurring environment plus a full data source inventory and data dictionary inside the first thirty days, then hold the pipeline stable as coverage scales

YOUR EXPERIENCE

• 7 or more years building production data pipelines, with deep hands-on AWS experience

• Production depth in S3 including object lock and versioning, Aurora or RDS PostgreSQL, Step Functions, EventBridge, Lambda, Fargate, KMS, and Secrets Manager

• Infrastructure-as-code at production scale using Terraform, OpenTofu, or CloudFormation, managed through Git rather than by hand

• AWS GovCloud (US), FedRAMP, or DoD Impact Level environment experience strongly preferred

• Entity resolution and record linkage across inconsistent third-party sources, where the same organization appears under different names with different completeness

• Strong Python. Comfort building against undocumented, inconsistent, and occasionally hostile public endpoints

• A working respect for reproducibility. You should be able to explain why hashing the raw response before parsing it matters six months later

• Relevant bachelor's degree, equivalent military experience, or equivalent professional experience

• United States citizenship is required. No security clearance is required for this role at present

COMPENSATION AND ENGAGEMENT TERMS

Compensation. $145,000 to $170,000 annually plus benefits, depending on depth of AWS GovCloud and infrastructure-as-code experience. This is a salaried W-2 position, not a contract engagement.

Benefits. Kryptek provides an employee benefits package with this position, including paid time off and federal holidays. Plan details are reviewed during the interview process.

This position is contingent on program start. Kryptek has committed to seating every open role within 30 days of go-ahead.

This is a permanent salaried position rather than a fixed-term contract. The initial assignment is the program described above; beyond it you would carry Kryptek platform and delivery work.

Your resume will be submitted to the client for approval before you begin work, so the client sees the individual performing rather than a labor category.

Fully remote within the United States. No travel is required for this role.

United States citizenship is required. No security clearance is required at present.

Kryptek delivers services and does not operate as a staffing agency. You will own a defined scope on our side of the work, not fill a seat on someone else's team.

TO APPLY

Send a resume to [email protected] with "Senior Data and Platform Engineer" in the subject line. Include a short note on the one item in Your Experience above that you consider your strongest claim, and how you would evidence it.