> Markdown version of [/jobs/ext/485731-senior-platform-engineer-kubernetes-sme](https://www.wearedevelopers.com/jobs/ext/485731-senior-platform-engineer-kubernetes-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Platform Engineer/Kubernetes SME

- **Company:** KBR Inc
- **Location:** Beavercreek, OH, United States
- **Experience:** Expert
- **Salary:** $187,700.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Computer Networks, Domain Name System (DNS), Key Management, Octopus Deploy, OpenID, Performance Tuning, Role-Based Access Control, Prometheus, Zero Trust Network Access, Simulation Software, Software Engineering, TypeScript, Management of Software Versions, Istio, SAPBasis, Kubernetes, Api Design
- **Published:** June 6, 2026
- **Apply:** https://www.juju.com/job/00000000g5v5s7

## About the Role

+ 12+ years of Software Engineering experience with 5-8+ years in platform/SRE roles operating production Kubernetes at scale; strong multi-cluster and GitOps (Argo CD/Flux) experience

 + Hands-on with Istio/Envoy, Cilium (NetworkPolicy, eBPF), Ingress/Gateway API, and cluster networking (DNS, L7/L4)

 + Controller/operator development using Go (Kubebuilder/Operator SDK) or TypeScript-based frameworks; CRD design/versioning

 + Observability: Prometheus, OpenTelemetry, Fluent Bit/OpenSearch; incident response and performance tuning

 + Security: mTLS, OIDC, JWT, OPA/Gatekeeper/Kyverno (or equivalent), image signing, SBOM, CVE remediations

Desired:

 + Experience in air-gapped or classified environments; package and deploy with tools that support disconnected sites

 + Exposure to Kubernetes Gateway/Envoy Gateway, egress control, and sidecar injection strategies

 + Prior VV\&A support for modeling & simulation platforms

 + Ability to work across Unclassified * Secret * TS/SCI/SAP environments

## Description

+ Own the design, build, and operations of a modular, API-first platform that abstracts infrastructure from simulation software

 + Lead multi-cluster Kubernetes, service mesh, security hardening, and observability to support hundreds of users and tens of thousands of entities across connected and air-gapped environments

 + Design and operate multi-cluster Kubernetes environments (control/data/CI/observability planes) with strong isolation and zero-trust defaults

 + Implement service mesh (e.g., Istio) for mTLS, traffic control, and fine-grained AuthorizationPolicy; manage ingress (Gateway/VirtualService) and east-west policies

 + Author and maintain platform CRDs and controllers/operators to reconcile developer intent into runtime objects (namespaces/cells, Deployments/Jobs, Services, policies, gateways)

 + Integrate network policy (eBPF/Cilium), secrets management, RBAC/ABAC, and policy-driven automation across environments

 + Stand up observability (metrics/logs/traces) and SLO monitoring; drive reliability (HA, backup/restore, DR)

 + Support air-gap packaging/delivery and secure software supply chain (images, SBOMs, provenance)


## Related Videos

- [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [One Platform Could Not Fit Them All](https://www.wearedevelopers.com/videos/1919-one-platform-could-not-fit-them-all)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Building a Cloud Platform Where Everything is Just Another Kubernetes Resource](https://www.wearedevelopers.com/videos/100137-building-a-cloud-platform-where-everything-is-just-another-kubernetes-resource)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)

## Related Articles

- [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)