Platform Engineer

Position Overview:

This position is for a Platform Network Engineer supporting the Army. The solution is a containerized, Kubernetes-based, multi-tenant hosting environment for hosting Army enterprise and tactical applications. Client is utilizing Kubernetes and potentially Red Hat OpenShift to implement a cloud-native, software-defined infrastructure across multiple global sites. Client provides value-added common and managed services built on top of the Kubernetes foundation, which hosted Army applications will require.

Position Duties:

• Work with Government engineers to develop and maintain the Kubernetes-based architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) for the deployment and sustainment of the Kubernetes networking architecture.
• As applications are hosted on the solution, utilize IaC for the provisioning of the network foundation for customer namespaces and enclaves.
• Provide daily administration of the network, including patching and upgrading of all Kubernetes networking components (e.g., CNI plugins like Calico, Cilium, or OpenShift SDN) in coordination with the full Kubernetes ecosystem.
• Monitor the health and utilization of the network resources and notify the Lead when critical issues arise, and additional resources will be required.
• Harden the network per cloud-native best practices and the required government cybersecurity controls.
• Troubleshoot and perform root cause analysis of any hosting platform network issues, including Kubernetes networking and containerized workloads.
• Develop and maintain system, infrastructure, and process documentation (e.g., system diagrams, network topology, Kubernetes configurations, device configurations, standard operating procedures).
• Provide on-call support for triage and resolution of after-hours production incidents.
• Make recommendations for improvements to security, scalability, manageability, and performance across the Kubernetes network enclaves.

Required Skills:

• Senior-level network engineering experience with at least five years of experience in implementing and troubleshooting IT infrastructure systems, specifically focusing on Kubernetes networking, containerized workloads, and configurations in enterprise environments.
• Experience in underly/overlay technologies such as VXLAN, GENEVE, and SD-WAN. Experience in out-of-cluster switching and firewalling platforms such as Cisco NXOS or Palo Alto NGFW.
• Experience with network automation tools (e.g., Ansible, Terraform), scripting languages (Python, Bash, etc.), packet captures, mTLS, service mesh, and routing protocols.
• Strong knowledge of Kubernetes network design, deployment and management concepts, including Container Network Interface (CNI) plugins (e.g., Calico, Cilium, OpenShift SDN), service discovery, ingress controllers, network policies, and DNS management within Kubernetes environments.

Desired Skills:

• Working knowledge of DoD Security Technical Implementation Guides (STIG) and the Information Assurance Vulnerability Management (IAVM) process, and/or industry hardening best practices and processes.
• Familiarity with Kubernetes-based platforms, such as Red Hat OpenShift, Rancher, or vanilla Kubernetes.
• Demonstrated expertise with automation and Infrastructure as code (IAC) concepts

Required Certifications:

• Security+ or equivalent DoD 8570.01-M IA Tech Level II certification.
• Must have (or obtain within 6 months of hire) a Computing Environment certification in a related field:
• Network relevant certification in Cisco(DCNX) or Palo Alto(PCNSE/PCCSE/NGFW)
• Certified Kubernetes Administrator (CKA).
• Red Hat Certified Specialist in OpenShift Administration.
• Certified Kubernetes Security Specialist (CKS).
• Other equivalent Kubernetes or container networking certifications.

Clearance Required:

• DoD Secret

Position Location:

• Radford, VA(Hybrid telework/onsite as needed)

Education:

• Bachelor's degree or higher in IT related field

Pay: $90,000.00 - $150,000.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Referral program
• Vision insurance

Education:

• Bachelor's (Required)

Experience:

• Kubernetes: 5 years (Required)

License/Certification:

• CompTIA Security+ (Required)

Security clearance:

• Secret (Required)

Ability to Commute:

• Radford, VA 24141 (Required)

Work Location: Hybrid remote in Radford, VA 24141