Security Platform Engineer - AWS/Kubernetes

The engineer focuses primarily on the application-specific infrastructure supporting SIEM/SOAR platforms, ensuring availability, reliability, performance, security, and operational continuity. The position requires strong hands-on AWS and Kubernetes experience, along with a working understanding of SIEM/SOAR applications, their architecture, and supporting infrastructure dependencies., * AWS Platform Support: Configure, maintain, monitor, and troubleshoot AWS resources and services supporting SIEM/SOAR applications.

• Kubernetes Administration: Support Kubernetes application environments, including deployments, pods, services, configurations, persistent storage, resource utilization, and workload troubleshooting.
• Application Infrastructure Sustainment: Maintain the infrastructure components and services required for reliable operation of Elastic SIEM and Cortex XSOAR environments.
• Platform Troubleshooting: Diagnose and resolve infrastructure-related issues affecting application availability, performance, connectivity, and data processing.
• Application Integration Support: Troubleshoot infrastructure dependencies and connectivity between SIEM/SOAR platforms, AWS services, and external systems.
• System Monitoring: Monitor platform health, resource utilization, logs, and infrastructure performance; proactively identify and remediate issues.
• Lifecycle Management: Support infrastructure updates, configuration changes, patching, vulnerability remediation, and application infrastructure deployments.
• Security & Compliance: Maintain secure configurations and support applicable DoD cybersecurity requirements, including STIG compliance, vulnerability management, and RMF/ATO activities.
• Technical Collaboration: Coordinate with Cloud Engineering, application vendors, cybersecurity analysts, and government stakeholders to resolve platform issues and support operational requirements.
• Documentation: Develop and maintain platform configurations, architecture diagrams, troubleshooting procedures, and operational documentation., The Platform Engineer works closely with the Cloud Engineering team responsible for deploying and maintaining general AWS/Kubernetes infrastructure.

• Hands-on experience administering and troubleshooting AWS cloud infrastructure and services.
• Hands-on experience supporting Kubernetes environments, including workloads, deployments, pods, services, and application connectivity.
• Working knowledge of Linux operating systems and system administration.
• Understanding of SIEM/SOAR platforms, their operational functions, and supporting infrastructure dependencies.
• Experience troubleshooting distributed applications, network connectivity, system performance, and resource utilization.
• Understanding of cloud networking, IAM permissions, storage, and infrastructure security concepts.
• Experience supporting production enterprise applications and coordinating with infrastructure and application support teams.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience supporting Elastic SIEM, Palo Alto Cortex XSOAR, or comparable security platforms.
• Experience with Amazon Elastic Kubernetes Service (EKS).
• Experience with Palo Alto Networks firewalls.
• Familiarity with AWS SQS, SNS, Lambda, and Python scripting.
• Experience with Docker, Helm, Kubernetes troubleshooting, and containerized application deployments.
• Familiarity with AWS CloudWatch, CloudTrail, and other infrastructure monitoring services.
• Experience with infrastructure automation, configuration management, or infrastructure as code.
• Experience supporting DoD cybersecurity environments, DISA STIG requirements, and RMF processes.

Specialized Integration Engineering Capability

At least one engineer may require additional proficiency with AWS SQS, SNS, Lambda, and Python to support application-specific integrations, message processing, and automation.

This specialization supplements the core AWS/Kubernetes platform engineering responsibilities and is not necessarily required for every position.