Platform Engineer

Description

This position is for a Platform Engineer supporting the Army Edge Computing Capability (AECC) project that ALTESS is fielding for the US Army. The AECC solution is a containerized, Kubernetes-based, multitenant hosting environment for hosting Army enterprise and tactical applications. AECC is utilizing Kubernetes and potentially Red Hat Open Shift to implement a cloud-native, software-defined infrastructure across multiple global sites. ALTESS provides value-added common and managed services built on top of the Kubernetes foundation, which hosted Army applications will require.

ALTESS is a managed service provider (MSP) and hosting services provider for Army applications. ALTESS is a Product Lead office under Capability Program Executive (CPE) Enterprise Software and Services (CPE ES2). Position Duties:

- Work with Government engineers to develop and maintain the AECC Kubernetes-based architecture.

- Develop, deploy, and maintain Infrastructure as Code (IaC) for the deployment and sustainment of the Kubernetes platform in the AECC.

- As applications are hosted on the AECC solution, utilize IaC for the provisioning of customer name spaces and containerized workloads.

- Provide daily administration of the Kubernetes platform, including patching and upgrading of all Kubernetes components (e.g., control plane, worker nodes, CNI plugins, CSI drivers, and CRI runtimes).

- Configure and manage Container Network Interface (CNI) plugins (e.g., Calico, Cilium, Open Shift SDN) to ensure secure and efficient networking for Kubernetes workloads.

- Deploy and manage Container Storage Interface (CSI) drivers to enable dynamic provisioning of persistent storage for containerized workloads (e.g., Open Shift Data Foundation, Ceph).

- Monitor utilization of all container orchestration resources and notify the AECC Lead when additional resources will be required.

- Harden the Kubernetes platform per cloud-native best practices and the required government cybersecurity controls.

- Troubleshoot and perform root cause analysis of any hosting platform issues, including Kubernetes networking, containerized workloads, persistent storage, and runtime issues.

- Develop and maintain system, infrastructure, and process documentation (e.g., system diagrams, network topology, Kubernetes configurations, CSI driver configurations, CRI runtime configurations, standard operating procedures).

- Provide on-call support for triage and resolution of after-hours production incidents.

- Make recommendations for improvements to security, scalability, manageability, and performance across a wide variety of containerized network, storage, and compute services.

- Build, configure, and administer Kubernetes clusters.

- Implement and manage container registries (e.g., Docker Hub, Harbor, Red Hat Quay) for secure image storage and distribution.

- Deploy and manage persistent storage solutions for containerized workloads (e.g., Open Shift Data Foundation, Ceph, NFS).

Skills

Devops, Cloud

Top Skills Details

Devops

Additional

Skills & Qualifications

- Strong knowledge of Kubernetes networking concepts, including Container Network Interface (CNI) plugins (e.g., Calico, Cilium, Open Shift SDN), service discovery, ingress controllers, network policies, and DNS management.

- Proficiency in building, configuring, and administering Kubernetes clusters in enterprise environments.

- Experience with container orchestration tools and technologies (e.g., Docker, Podman, Kubernetes).

- Experience with container registries and image management (e.g., Docker Hub, Harbor, Red Hat Quay).

- Strong automation and Infrastructure as Code (IaC) skills using tools like Ansible, Terraform, Python, Pulumi.

- Working knowledge of DoD Security Technical Implementation Guides (STIG) and the Information Assurance Vulnerability Management (IAVM) process, and/or industry hardening best practices and processes.

- Familiarity with Dev Sec Ops  practices, including CI/CD pipeline integration for containerized workloads. Required

Certifications:

- Security+ or equivalent DoD 8570.01-M IA Tech Level II certification.

- Must have (or obtain within 6 months of hire) a Computing Environment…