> Markdown version of [/jobs/ext/2473337-platform-architect-kubernetes-ci-cd-ts-sci](https://www.wearedevelopers.com/jobs/ext/2473337-platform-architect-kubernetes-ci-cd-ts-sci). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Architect (Kubernetes / CI/CD) | TS/SCI - **Company:** MomentumAI LLC - **Location:** Denver, United States - **Experience:** Experienced - **Salary:** $150,000.0 - $275,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Automation of Tests, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Foundry, Databases, Continuous Integration, Data Migration, DevOps, Domain Name System (DNS), Github, Python (Programming Language), Key Management, Linux System Administration, Nginx, Octopus Deploy, OpenShift, Performance Tuning, Prometheus, Zero Trust Network Access, Azure Machine Learning, Software Engineering, Data Streaming, Tripwire, VMware VSphere, YAML, Data Logging, Pulumi, Scripting, Load Balancing, Autoscaling, Istio, Grafana, Amazon Virtual Private Cloud (VPC), Gitlab, Cloudformation, Containerization, Gitlab-ci, Tanzu, Kubernetes, Rancher, Hashicorp, Linkerd (Service Mesh), Data Management, CIS Benchmarks, Api Gateway, Terraform, Oracle Cloud Infrastructure, Code Restructuring, Docker, Jenkins, Vulnerability Analysis, Vmware - **Published:** August 24, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9113646/platform-architect-kubernetes-cicd-tssci ## About the Role Strong candidates will meet most (not necessarily all) of the technical requirements below. - Active TS/SCI or TS/SCI eligibility (must be able to obtain and maintain). U.S. citizenship required. - 7+ years in Solutions Architecture, Platform Engineering, DevOps, or related roles. - 3+ years hands-on Kubernetes in production (cluster design, operations, troubleshooting). - CI/CD pipeline experience (e.g., GitHub Actions, GitLab CI, Jenkins) including environment promotion and approvals in regulated contexts. - Containerization fundamentals (Docker/OCI), image lifecycle management, and container hardening practices. - Infrastructure as Code (e.g., Terraform, CloudFormation, Crossplane) for cloud or on-prem deployments. - Solid Linux administration, networking (VPC/VNet, DNS, TLS, ingress/egress, load balancing), and security fundamentals. - Observability & logging (e.g., Prometheus, Grafana, ELK/EFK, OpenTelemetry); root-cause analysis and performance tuning. - Scripting proficiency (Bash) and YAML fluency. - Software engineering proficiency in at least one of Go or Python. - Demonstrated ability to lead cross-functional initiatives, influence without authority, and present to technical and executive audiences. PREFERRED QUALIFICATIONS These are nice-to-haves that strengthen your candidacy. You don't need all of them. - CI or FS Poly. - Experience delivering in DoD/IC environments, including air-gapped clusters and high-side/low-side data flows. - Managed Kubernetes distributions (EKS, AKS, GKE, VKS, Rancher, OpenShift). - VMware ecosystem: VCF architecture/operations (vSphere, NSX-T, vSAN, SDDC Manager), VKS, Tanzu, or Cloud Foundry. - GitOps (Argo CD, Flux) and Kubernetes packaging (Helm, Kustomize). - Container registries (Harbor, ECR, ACR, GCR) and vulnerability scanning (Trivy, Anchore, Clair). - Kubernetes policy & runtime security: OPA/Gatekeeper/Kyverno, Pod Security Standards, Cilium/Calico, Falco, Sigstore/Cosign, SBOM tooling. - Secrets management (HashiCorp Vault, cloud KMS/HSM). - Government cloud platforms: AWS GovCloud, Azure Government, or Google Assured Workloads. - AI/ML platforms: AWS Bedrock/SageMaker, Azure OpenAI/ML, or Google Vertex AI/Gemini. - Stateful workloads on Kubernetes: database refactoring/replication, Operators, StatefulSets, StorageClasses. - Service mesh (Istio, Linkerd), API gateways (Kong, NGINX), Zero Trust tooling (Teleport). - Relevant certifications: CKA/CKAD/CKS; VMware VCP tracks; cloud certs (AWS/Azure/GCP); DoD 8570/8140 (Security+, CISSP). ## Description At MomentumAI, you'll architect, harden, and deliver secure Kubernetes platforms and CI/CD pipelines that power mission-critical systems across the Federal Civilian, DoD, and IC communities. You'll partner with platform, app, and security teams to design resilient architectures, drive application migrations, and implement repeatable, compliance-ready delivery patterns aligned to MomentumAI's Platform-as-a-Product approach. We are seeking a Platform Architect with deep, hands-on platform engineering, Kubernetes, CI/CD, and container security experience. You will partner with mission stakeholders, developers, security, and operations in secure environments to design resilient architectures, build app and data platforms, and migrate workloads to the platforms while meeting stringent compliance requirements. WHAT YOU'LL DO - Architecture & delivery: Own architecture and delivery of containerized applications on Kubernetes across commercial, government, and air-gapped environments. - CI/CD design & implementation: Design and implement CI/CD (GitOps-first using Argo CD/Flux, or classic pipelines via GitHub Actions/GitLab/Jenkins) with policy gates, automated testing, artifact signing, and environment promotion. - Container & cluster hardening: Apply CIS Benchmarks/DoD STIGs, admission control (OPA/Gatekeeper/Kyverno), image scanning (Trivy/Anchore/Clair), SBOM/SLSA supply-chain controls, and secrets management (Vault/KMS). - Application migration & modernization: Lead discovery, assessment, and execution (rehost/replatform/refactor), data migration strategies, blue/green and canary releases, and service mesh patterns (Istio/Linkerd). - Infrastructure as Code: Implement Terraform/Pulumi/Helm/Kustomize; codify platform baselines and repeatable environment builds. - Observability & reliability: Establish Prometheus/Grafana/ELK/OpenTelemetry, performance tuning, autoscaling, and SLOs. - Security & compliance partnership: Support NIST 800-53, FedRAMP, RMF/ATO documentation, continuous monitoring, and evidence collection. - Team coaching & communication: Create architecture diagrams, decision records, runbooks, and deliver executive/mission briefings. - Pre-sales & delivery support: Contribute to LOE estimates, SOWs/ROMs, roadmaps, and technical demos/workshops. ## Related Videos - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [The Private AI Platform: Why Agentic Apps Need a Private Application Platform](https://www.wearedevelopers.com/videos/100162-the-private-ai-platform-why-agentic-apps-need-a-private-application-platform) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) ## Related Articles - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)