Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, configure, operate, and maintain AWS-based platform services for critical applications and workloads of the Department of War.

• Manage Kubernetes clusters and associated services, including configuration, node groups, namespaces, RBAC, ingress, service discovery, storage, secrets, network policies, autoscaling, updates, and lifecycle maintenance.

• Create and uphold repeatable infrastructure and platform configurations utilizing infrastructure-as-code tools.

• Enhance and develop CI/CD pipelines, GitOps workflows, container registries, artifact repositories, automated testing, and deployment controls.

• Onboard, configure, deploy, and sustain containerized applications across development, testing, staging, and production environments.

• Integrate platform services with DODIN network services, IAM, PKI, logging, monitoring, vulnerability management, endpoint security, and government enterprise services.

• Ensure secure platform configurations that align with security baselines, DISA STIGs, RMF requirements, and ATO conditions.

• Monitor platform availability, performance, capacity, security posture, and application health.

• Diagnose complex issues related to Linux, containers, Kubernetes, AWS, networking, DNS, certificates, encryption, load balancing, storage, compute, identity, and application dependencies.

• Conduct patching, vulnerability remediation, configuration management, backup, recovery, and controlled upgrades.

• Collaborate with cybersecurity, network, software, data, systems engineering, and mission teams.

• Create documentation for platform architecture, configuration standards, operating procedures, runbooks, troubleshooting guides, deployment instructions, and knowledge articles.

• Support technical interchange meetings, architecture reviews, release planning, change control, incident response, root-cause analysis, and after-action reviews.

• Report on platform health, technical risks, security findings, maintenance activities, dependencies, and recommended actions.

• Participate in scheduled maintenance and urgent incident response outside regular working hours when mission requirements dictate.

⛳️ Requirements

• Active Secret security clearance is required.

• Only U.S. Citizens are eligible for a security clearance; candidates must satisfy U.S. Government security-clearance eligibility criteria.

• A minimum of five years of directly relevant professional experience is necessary.

• Practical experience in operating, integrating, or sustaining systems connected to the DODIN is essential.

• Current Department of Defense 8570-compliant certification appropriate for assigned information assurance or cybersecurity workforce functions.

• Hands-on experience in deploying, administering, troubleshooting, and upgrading Kubernetes environments.

• Proficient in AWS infrastructure and services.

• Experience managing Linux-based systems.

• Familiarity with building, securing, deploying, and operating containers using Docker, OCI-compatible technologies, or equivalent tools.

• Knowledge of infrastructure as code, configuration automation, source control, CI/CD pipelines, and repeatable deployment practices.

• Working knowledge of enterprise networking concepts such as TCP/IP, routing, firewalls, DNS, load balancing, VPNs, TLS, certificates, and network segmentation.

• Understanding of Department of Defense cybersecurity and authorization practices, including RMF, STIGs, vulnerability management, continuous monitoring, and ATO requirements.

• Ability to independently diagnose complex technical issues and coordinate across technical teams.

• Excellent written and verbal communication skills.

• Capability to work effectively in a remote environment, safeguard government information, maintain reliable connectivity, and travel occasionally.

• Desired: experience with Kubernetes on Amazon EKS in AWS GovCloud or another DoD-authorized cloud environment.

• Desired: experience supporting DoD Impact Level 4, 5, or 6 systems.

• Desired: experience with Terraform, AWS CloudFormation, GitLab, GitHub Actions, Jenkins, Argo CD, Helm, Kustomize, or comparable tools.

• Desired: experience with observability technologies such as CloudWatch, Prometheus, Grafana, OpenSearch, Elastic, or Fluent Bit.

• Desired: experience with container security, supply-chain controls, image scanning, SBOMs, Iron Bank images, or hardened container baselines.

• Desired: experience integrating platform services with CAC authentication, DoD PKI, identity providers, RBAC, ABAC, or Zero Trust architectures.

• Desired: experience with service mesh, secrets management, policy as code, automated compliance, high availability, disaster recovery, or multi-account AWS architectures.

• Desired: AWS, Certified Kubernetes Administrator, Certified Kubernetes Application Developer, Linux, cybersecurity, or related professional certifications.

• Desired: prior experience directly supporting a Department of War mission partner or another national security customer.

🏝️ Benefits

• Remote work opportunities within the continental United States.

• Occasional travel to government or LMI locations as necessary.

• Commitment to equal employment opportunity.

• Application process accommodations available for individuals with disabilities.