OverviewLMI is seeking a Platform Engineer to design, deploy, operate, and sustain secure cloud-native platform capabilities for a Department of War mission partner. This remote role will focus on Amazon Web Services (AWS)-hosted Kubernetes environments that connect to and operate within the Department of Defense Information Network (DODIN). The Platform Engineer will support platform architecture, infrastructure automation, container orchestration, application onboarding, cybersecurity compliance, observability, troubleshooting, and continuous service improvement. The ideal candidate is a hands-on engineer who can translate mission and application requirements into reliable, repeatable, secure, and supportable platform services.
This is a remote position within the continental United States and requires an active Secret security clearance. The employee must be available during core working hours aligned to the mission partner and may be required to travel periodically to government or LMI locations for integration, testing, maintenance, or mission support.Responsibilities- Design, deploy, configure, operate, and sustain AWS-based platform services supporting mission-critical Department of War applications and workloads.
- Administer Kubernetes clusters and supporting services, including cluster configuration, node groups, namespaces, role-based access control, ingress, service discovery, storage, secrets management, network policies, autoscaling, upgrades, and lifecycle maintenance.
- Build and maintain repeatable infrastructure and platform configurations using infrastructure-as-code tools such as Terraform, AWS CloudFormation, or equivalent customer-approved technologies.
- Develop, maintain, and improve continuous integration and continuous delivery pipelines, GitOps workflows, container registries, artifact repositories, automated testing, and deployment controls.
- Onboard, configure, deploy, and sustain containerized applications across development, test, staging, and production environments.
- Integrate platform services with DODIN network services, identity and access management, public key infrastructure, logging, monitoring, vulnerability management, endpoint security, and other government enterprise services.
- Implement and maintain secure platform configurations aligned with approved security baselines, Defense Information Systems Agency Security Technical Implementation Guides, Risk Management Framework requirements, and Authority to Operate conditions.
- Monitor platform availability, performance, capacity, security posture, and application health using AWS-native and customer-approved observability tools.
- Troubleshoot complex issues involving Linux, containers, Kubernetes, AWS services, networking, Domain Name System, certificates, encryption, load balancing, storage, compute, identity, and application dependencies.
- Perform platform patching, vulnerability remediation, configuration management, backup, recovery, and controlled upgrade activities while minimizing mission disruption.
- Collaborate with cybersecurity, network, software, data, systems engineering, and mission teams to resolve dependencies and deliver integrated capabilities.
- Develop and maintain platform architecture documentation, configuration standards, operating procedures, runbooks, troubleshooting guides, deployment instructions, and knowledge articles.
- Support technical interchange meetings, architecture reviews, release planning, change control, incident response, root-cause analysis, and after-action reviews.
- Provide clear status reporting on platform health, technical risk, security findings, maintenance activities, dependencies, and recommended actions.
- Participate in scheduled maintenance and time-sensitive incident response outside normal working hours when required by mission needs.
QualificationsRequired Qualifications:- Active Secret security clearance.
- Minimum of five years of directly relevant professional experience in platform engineering, cloud engineering, DevSecOps, systems engineering, Linux systems administration, or a closely related technical field.
- Demonstrated hands-on experience operating, integrating, or sustaining systems connected to the DODIN, including familiarity with Department of Defense network access, security, configuration, and operational requirements.
- Current Department of Defense 8570-compliant certification appropriate to the assigned information assurance or cybersecurity workforce functions.
- Demonstrated hands-on experience deploying, administering, troubleshooting, and upgrading Kubernetes environments.
- Demonstrated hands-on experience with AWS infrastructure and services, including compute, networking, storage, identity, security, monitoring, and automation capabilities.
- Experience administering Linux-based systems and troubleshooting operating system, process, package, file system, permissions, networking, and performance issues.
- Experience building, securing, deploying, and operating containers using Docker, Open Container Initiative-compatible technologies, or equivalent container tooling.
- Experience with infrastructure as code, configuration automation, source control, continuous integration and continuous delivery pipelines, and repeatable deployment practices.
- Working knowledge of enterprise networking concepts, including TCP/IP, routing, firewalls, Domain Name System, load balancing, virtual private networks, Transport Layer Security, certificates, and network segmentation.
- Working knowledge of Department of Defense cybersecurity and authorization practices, including Risk Management Framework activities, Security Technical Implementation Guides, vulnerability management, continuous monitoring, and Authority to Operate requirements.
- Ability to independently diagnose complex technical problems, coordinate across multiple technical teams, document findings, and drive issues through resolution.
- Strong written and verbal communication skills, including the ability to explain technical issues, risks, and recommendations to engineering, cybersecurity, program, and mission stakeholders.
- Ability to work effectively in a remote environment, protect government information, maintain reliable connectivity, and travel periodically as required.
Desired Qualifications:- Experience operating Kubernetes on Amazon Elastic Kubernetes Service within AWS GovCloud or another Department of Defense-authorized cloud environment.
- Experience supporting systems at Department of Defense Impact Level 4, Impact Level 5, or Impact Level 6.
- Experience with Terraform, AWS CloudFormation, GitLab, GitHub Actions, Jenkins, Argo CD, Helm, Kustomize, or comparable platform engineering and GitOps tools.
- Experience with observability technologies such as Amazon CloudWatch, Prometheus, Grafana, OpenSearch, Elastic, Fluent Bit, or comparable logging and monitoring platforms.
- Experience with container security, software supply-chain controls, image scanning, software bills of materials, Iron Bank images, or hardened container baselines.
- Experience integrating platform services with Common Access Card authentication, Department of Defense public key infrastructure, identity providers, role-based access control, attribute-based access control, or Zero Trust architectures.
- Experience with service mesh, secrets management, policy as code, automated compliance, high availability, disaster recovery, or multi-account AWS architectures.
- AWS, Certified Kubernetes Administrator, Certified Kubernetes Application Developer, Linux, cybersecurity, or related professional certification.
- Prior experience directly supporting a Department of War mission partner, combatant command, military service component, Special Operations Forces organization, or other national security customer.
Target salary range: $135,000 - $230,000
Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.
#LI-SH1
Job LocationsUS-Remote
