> Markdown version of [/jobs/ext/2196500-platform-engineer-public-sector](https://www.wearedevelopers.com/jobs/ext/2196500-platform-engineer-public-sector). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer, Public Sector - **Company:** Exiger LLC - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon S3, Cloud Engineering, Computer Networks, Continuous Integration, DevOps, Github, Identity and Access Management, Role-Based Access Control, Reliability Engineering, Autoscaling, Amazon Virtual Private Cloud (VPC), Kubernetes, Bitbucket, Terraform, Devsecops - **Published:** August 23, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18042232?backUrl=%2Fcareer%2F18042232%2FPlatform-Engineer-Public-Sector-New-York-New-York ## About the Role * 5+ years of production cloud engineering experience on AWS, with deep familiarity across IAM, VPC, EKS, S3, KMS, and CloudTrail. * Hands-on experience operating inside a FedRAMP boundary (Moderate or High), not just compliance-flavored commercial AWS. * Strong Terraform skills, including module authorship that other engineers depend on without you in the room. * Production Kubernetes / EKS experience: cluster upgrades, RBAC design, network policy, autoscaling. * CI/CD pipeline ownership at production scale, including security gates (image scanning, dependency scanning, IaC policy). * Production observability ownership at meaningful scale. * Experience building for reuse: platforms, modules, or paved-road tooling consumed by teams beyond your own. * Familiarity with cloud cost management at scale (reserved instances, savings plans, chargeback / showback). * Strong customer-facing posture: comfortable in customer-context conversations about cloud and ATO posture. * Ability to obtain and maintain a U.S. Government security clearance. Nice to Have * AWS Solutions Architect Professional or DevOps Engineer Professional certification. * Direct GovCloud (US) production experience, particularly across the commercial-to-GovCloud boundary. * Experience contributing platform-side evidence to a FedRAMP authorization end-to-end. * Experience with internal developer platform (IDP) patterns (Backstage, paved-road tooling, golden-path templates). * Direct background in security engineering or DevSecOps (security-heavy reqs route through this role). * Familiarity with chaos engineering or fault injection tooling (AWS FIS, Gremlin). * FinOps Certified Practitioner or equivalent practical FinOps experience. * Experience operating in IL5, IL6, or JWICS environments. Clearance Requirements Active U.S. Government security clearance preferred (Secret minimum for most engagements; TS or TS/SCI required for a subset). Candidates without an active clearance must be able to obtain one. Clearance level will be confirmed at offer. ## Description We are hiring a Platform Engineer to build and operate the cloud substrate our federal programs run on: the AWS and GovCloud account patterns, Kubernetes platform, Terraform module library, CI/CD paved roads, observability stack, and cost posture that new programs adopt on day one instead of rebuilding. Your work ships to multiple programs, and the leverage of the role is exactly that: a boundary pattern or golden-path template you harden once removes weeks of work and audit risk from every program that follows. You will support the program teams that consume your platform and sit in customer-context conversations about cloud posture and ATO progress across engagements. This role is also the catalog destination for Security / DevSecOps-leaning reqs; when security on the platform-security seam is the primary signal, the loop adds a Domain Deep-Dive on ATO, threat modeling, and CI/CD security gates. What You'll Do * Design and maintain the reference cloud substrate: account structure, networking, and identity perimeter patterns that default to FedRAMP-aligned from day one and replicate across programs. * Build and own the shared Terraform module library as a product: versioned, documented, consumed confidently by program engineers you don't sit next to. * Operate the Kubernetes platform patterns programs adopt: cluster design, RBAC, network policies, autoscaling, upgrade strategy. * Build the CI/CD paved road (Bitbucket Pipelines, GitHub Actions, or AWS-native) with security gates built in, so program teams deploy self-service without reinventing the pipeline. * Build observability patterns that travel: the dashboards, alerting, and SLO scaffolding a new program inherits rather than assembles. * Own cloud cost across the portfolio: forecast it, govern it, and surface it to delivery leadership before it becomes a surprise. * Support program teams adopting the substrate, and harden the patterns based on what their deployments teach you. * Sit in customer-context conversations about cloud posture and ATO progress, representing the platform across programs. * Carry on-call for the shared platform surface you own. ## Related Videos - [Platform Engineering vs. DevOps Why not both?](https://www.wearedevelopers.com/videos/885-platform-engineering-vs-devops-why-not-both) - [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)