Platform Engineer

Platform Engineer, Kubernetes Security / Dev Sec Ops

Platform Engineer, Kubernetes Security / Dev Sec Ops

Active TS/SCI with CI Polygraph (Mandatory)

Reston, VA

$225K

We are seeking a skilled Platform Engineer specializing in Kubernetes security to design, build, secure, and maintain enterprise container orchestration platforms supporting mission-critical federal government environments. The ideal candidate will have demonstrated hands‑on experience engineering and securing Kubernetes or Red Hat Open Shift clusters, implementing security controls, automating infrastructure deployments, and maintaining reliable containerized environments. This position combines Platform Engineering, Dev Sec Ops , and cybersecurity responsibilities, with an emphasis on securing container orchestration infrastructure.

While experience with Information Systems Security Engineering (ISSE) principles is desirable, we are open to strong Platform Engineers who are willing to learn and grow into broader ISSE responsibilities. The primary focus is finding an engineer who understands Kubernetes architecture, has built and maintained container platforms, and can implement security measures to protect those environments.

• Design, build, deploy, secure, and maintain Kubernetes clusters in enterprise environments.
• Implement Kubernetes security best practices, including cluster hardening, workload isolation, role-based access control (RBAC), network policies, and pod security standards.
• Secure containerized workloads by managing container image vulnerabilities, access controls, secrets, and runtime security policies.
• Implement security controls aligned with applicable DoD Security Technical Implementation Guides (STIGs), CIS Kubernetes Benchmarks, and NIST security frameworks.
• Identify, troubleshoot, and remediate security vulnerabilities and configuration issues across container orchestration environments.
• Support Kubernetes cluster upgrades, patching, configuration management, monitoring, and ongoing platform maintenance.

• Develop and maintain secure CI/CD pipelines to automate application and infrastructure deployments.
• Utilize Infrastructure as Code (IaC) tools such as Terraform and Ansible to automate provisioning, configuration, and security enforcement.
• Implement automated security scanning, vulnerability assessments, and compliance checks within deployment pipelines.
• Support container orchestration and application deployment using tools such as Docker, Podman, Helm, and ArgoCD.
• Integrate security tools into development and deployment processes to identify and remediate vulnerabilities before production releases.
• Develop automation scripts using Python, Bash, or similar languages to improve platform security and operational efficiency.

• Collaborate with cybersecurity teams and Information Systems Security Engineers (ISSEs) to implement and maintain security controls across Kubernetes environments.
• Support security assessments, vulnerability remediation, system hardening, and continuous monitoring.
• Assist with implementing security requirements aligned with NIST SP 800-53, DoD STIGs, and other applicable federal security standards.
• Support documentation of system configurations, security procedures, architecture diagrams, and remediation activities.
• Develop knowledge of federal security engineering practices, including Risk Management Framework (RMF) processes and Authorization to Operate (ATO) requirements.

Experience Level: Mid-Level to Senior

Education:

Bachelor’s degree preferred, not…