Platform Engineer

• Deploying and maintaining common Kubernetes platform services on cloud-native architecture
• Integrating a Kubernetes platform with common enterprise services to satisfy organizational security requirements
• Implementing secure automation, effective monitoring, and Infrastructure as Code
• Deploying and maintaining Continuous Integration/Continuous Delivery (CI/CD) pipelines across multiple environments
• Supporting and working alongside a cross-functional engineering team on the latest technologies
• Developing and iterating best practices to increase the quality and velocity of deployments
• Implementing industry best practices for system hardening and configuration management

• 0-4+ years of experience working with commercial cloud service providers such as AWS, GCP, or Azure
• Experience designing and deploying self-managed Kubernetes to commercial cloud platforms
• Experience integrating and providing cloud platform services within a Kubernetes cluster
• Experience designing Infrastructure as Code solutions using Terraform
• Experience with DevSecOps tools and processes such as GitLab CI, Artifactory, ArgoCD, FluxCD, Helm, Kustomize
• Demonstrated knowledge in Agile, Scrum, DevSecOps processes, and DoD cybersecurity requirements
• Solid problem-solving skills, attention to detail, and critical thinking abilities
• B.A. or B.S. in Computer Science, Information Systems, Computer Engineering, or related discipline (or relevant experience in lieu of a degree)
• DoD Approved 8570 Baseline Certifications (e.g. CompTia Security+ CE Certification)
• US Citizenship and an active DoD Secret security clearance or higher

Desired Qualifications:

• Experience with Oracle and PostgreSQL DBMS
• Experience deploying and maintaining Platform One’s Big Bang suite of tools
• Experience working with the DHA
• Experience with DoD FedRAMP authorized cloud platforms such as AWS GovCloud and/or Cloud One
• Experience standing up and maintaining AWS services including RDS, EMR, ECR, EKS and S3
• Experience deploying Kubernetes using Rancher RKE2
• Knowledge of the Risk Management Framework (RMF) accreditation process and security requirements
• Experience using DISA enterprise security products including HBSS and ACAS and performing security hardening to satisfy STIG requirements
• Experience installing and configuring a service mesh for cluster ingress/egress, mTLS, and authorization and authentication of services
• Experience providing Identity Management services within a cloud or Kubernetes environment such Open ID Connect (OIDC) or SAML SSO, In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

This position is local to the Falls Church, VA area and attendance on site is required about 50% of the time. The compensation for this role is estimated to be approximately $125,000.00-$150,000.00 commensurate on experience.