Senior Platform Engineer - Kubernetes Focus - Colorado

Senior Platform Engineer – Kubernetes Focus – Fully Cleared

Location: Aurora, CO or Meridian, CO (Location is at program discretion)

Job : 669

# of Openings: 1

Applications for this job posting will be accepted on an ongoing basis.

ICR has opportunities available for fully cleared, experienced, and motivated Senior Platform/Dev Ops Engineers. Successful candidates will be strong engineers who can prioritize well, communicate clearly, and have a consistent track record of delivering secure, resilient, and automated infrastructure in classified environments. You will serve as the technical authority for our Kubernetes platforms, bridging the gap between development velocity and rigorous security compliance.

• Architect, administer, and harden production‑grade Kubernetes clusters, ensuring high availability, security compliance (CIS/STIG), and operational resilience in classified environments.
• Design and implement secure CI/CD pipelines that integrate automated security scanning (SAST/DAST/Image Scanning), policy enforcement, and seamless deployment strategies.
• Manage Container Network Interfaces (CNI) and cluster networking, troubleshooting complex connectivity issues, configuring Network Policies, and optimizing traffic flow for distributed systems.
• Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, Ansible, and Helm to ensure consistent, auditable, and repeatable infrastructure deployments.
• Lead incident response and troubleshooting for control plane and worker node issues, utilizing deep diagnostic skills to resolve root causes without service disruption.
• Implement Dev Sec Ops  best practices, including secrets management, pod security admission controls, runtime security monitoring, and continuous compliance auditing.
• Collaborate with software development teams to optimize application performance, resource utilization, and deployment patterns within the Kubernetes ecosystem.
• Document and communicate highly technical architectural decisions, operational procedures, and security postures effectively to both technical teams and non‑technical stakeholders.
• Mentor junior engineers and drive continuous improvement in platform reliability, automation coverage, and security posture.

• Active Top Secret Security Clearance with SSBI and SCI eligibility – US Citizenship Required
• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related field with a minimum of seven (7) years of relevant experience.
• Expert‑level proficiency in Kubernetes administration, including control plane components (etcd, API server, scheduler), worker node management, and upgrade strategies.
• Deep understanding of Container Networking (CNI) plugins, including troubleshooting, BGP peering, and Network Policy enforcement.
• Proven experience designing and maintaining CI/CD pipelines (Jenkins, Git Lab CI, or similar) with integrated security gates and automated testing.
• Strong proficiency in Infrastructure as Code (IaC) tools such as Terraform, Ansible, and Helm.
• Demonstrated experience implementing security hardening measures (CIS Benchmarks, Pod Security Standards, RBAC, OPA/Gatekeeper, etc.) in production environments.
• Proficiency in scripting languages for automation and tooling development.
• Exceptional analytical and problem‑solving skills with a methodical approach to troubleshooting complex distributed system failures.
• High level of self‑initiative and self‑motivation with the ability to work under minimal supervision in a fast‑paced, high‑stakes environment.

• Experience operating in air‑gapped or disconnected environments and managing offline package repositories/registries.
• Proficiency with Rancher, Nexus, Harbor, or similar enterprise container management and registry tools.
• Experience with eBPF‑based technologies for advanced networking and security observability.
• Familiarity with Chaos Engineering principles and tools to validate system resilience.
• Experience with Secrets Management solutions.
• Knowledge of monitoring and observability stacks (Prometheus, Grafana, etc.) tailored for…