Platform Engineer

Come Forge the Future of Machine Identity Security for Operational Systems Where:
Tysons, VA (Hybrid) Supporting:
Our Head of Infrastructure About Corsha:

At Corsha we're not just selling software; we're fundamentally reshaping how the most critical industrial and operational technology (OT) systems are secured. We're a cyber startup in the DC area, driven by a mission to bring trust, resilience, and identity to the operational systems that power our world – from factories to power grids. We're building the future of machine identity security, and we need a dynamic technical evangelist to join our front lines.

If you're an engineer who thrives on solving hard problems, isn't afraid to get your hands dirty with bare-metal and sees the immense potential of cloud-native tech like Kubernetes and Docker in unconventional environments, then read on. We move fast, we build for impact, and we need a network visionary to help us secure the machines that matter most.

We’re looking for a Platform Engineer to be a foundational engineer for our Machine Identity Platform (mIdP), specifically tailored for the unique and challenging landscape of OT systems. Your mission: design, implement, and defend the network infrastructure that underpins our cutting‑edge solutions, with a heavy emphasis on robust Kubernetes and Docker deployments on bare‑metal hardware.

This isn't just about keeping the lights on. It's about building networks that are inherently secure, highly available, and resilient against the most sophisticated threats, often in environments where traditional IT paradigms simply don't apply. You'll be bridging the gap between cutting‑edge cloud‑native technologies and the operational realities of factories, power plants, and critical infrastructure.

• Architect and Implement OT Network Solutions: Design, deploy, and manage secure and performant network architectures for our machine IdP, specifically tailored for OT environments. This includes network segmentation, routing, switching, and firewall configurations.
• Kubernetes & Docker Networking on Bare‑Metal: Be the subject matter expert for networking within our Kubernetes and Docker bare‑metal deployments. This involves configuring CNI plugins (e.g., Calico, Flannel), managing network policies, load balancing, and ensuring optimal connectivity and performance for containerized applications.
• Machine Identity Integration: Collaborate closely with our product and engineering teams to integrate network configurations with our mIdP, ensuring seamless and secure authentication and authorization for OT devices and applications.
• Network Security Hardening: Implement and enforce robust network security best practices, including intrusion detection/prevention, vulnerability management, and access control for OT networks.
• Troubleshooting and Optimization: Proactively monitor, troubleshoot, and resolve complex network issues across bare‑metal, Kubernetes, and OT environments. Identify and implement optimizations to enhance network performance, reliability, and security.
• Automation and Tooling: Develop and implement automation scripts and tools (e.g., Python, Ansible, Terraform) to streamline network provisioning, configuration management, and operational tasks.
• Documentation and Knowledge Sharing: Create comprehensive network documentation, runbooks, and contribute to internal knowledge sharing to ensure maintainability and scalability of our infrastructure.
• Stay Ahead of the Curve: Continuously research and evaluate new networking technologies, security trends, and best practices, particularly as they relate to Kubernetes, bare‑metal, and OT cybersecurity.
• Collaborate and Mentor: Work closely with cross‑functional teams (software engineers, security analysts, product managers) and provide mentorship to junior team members.

• 5+ years of intense experience in network engineering roles, with a proven track record in complex, high‑performance, and high‑stakes environments.
• Deep, demonstrable expertise in Kubernetes networking:
  You'…