Platform Engineer

Position Overview: This position is for a Platform Network Engineer supporting the Army Edge Computing Capability (AECC)project that ALTESS is fielding for the US Army. The AECC solution is a containerized, Kubernetes-based, multitenant hosting environment for hosting Army enterprise and tactical applications. AECC is utilizing Kubernetes and potentially Red Hat OpenShift to implement a cloud-native, software-defined infrastructure across multiple global sites. ALTESS provides value-added common and managed services built on top of the Kubernetes foundation, which hosted Army applications will require. ALTESS is a managed service provider (MSP) and hosting services provider for Army applications. ALTESS is a Product Lead office under Capability Program Executive (CPE) Enterprise Software and Services (CPE ES2). Position Duties: •                     Work with Government engineers to develop and maintain the AECC Kubernetes-based architecture. •                     Develop, deploy, and maintain Infrastructure as Code (IaC) for the deployment and sustainment of the Kubernetes networking architecture in the AECC. •                     As applications are hosted on the AECC solution, utilize IaC for the provisioning of the network foundation for customer namespaces and enclaves. •                     Provide daily administration of the network, including patching and upgrading of all Kubernetes networking components (e.g., CNI plugins like Calico, Cilium, or OpenShift SDN) in coordination with the full Kubernetes ecosystem. •                     Monitor the health and utilization of the network resources and notify the AECC Lead when critical issues arise, and additional resources will be required. •                     Harden the network per cloud-native best practices and the required government cybersecurity controls. •                     Troubleshoot and perform root cause analysis of any hosting platform network issues, including Kubernetes networking and containerized workloads. •                     Develop and maintain system, infrastructure, and process documentation (e.g., system diagrams, network topology, Kubernetes configurations, device configurations, standard operating procedures). •                     Provide on-call support for triage and resolution of after-hours production incidents. •                     Make recommendations for improvements to security, scalability, manageability, and performance across the AECC Kubernetes network enclaves. Required Skills: •                     Senior-level network engineering experience with at least five years of experience in implementing and troubleshooting IT infrastructure systems, specifically focusing on Kubernetes networking, containerized workloads, and configurations in enterprise environments. •                     Experience in underly/overlay technologies such as VXLAN, GENEVE, and SD-WAN. Experience in out-of-cluster switching and firewalling platforms such as Cisco NXOS or Palo Alto NGFW. •                     Experience with network automation tools (e.g., Ansible, Terraform), scripting languages (Python, Bash, etc.), packet captures, mTLS, service mesh, and routing protocols. •                     Strong knowledge of Kubernetes network design, deployment and management concepts, including Container Network Interface (CNI) plugins (e.g., Calico, Cilium, OpenShift SDN), service discovery, ingress controllers, network policies, and DNS management within Kubernetes environments. Required Certifications: •                     Security+ or equivalent DoD 8570.01-M IA Tech Level II certification. •                     Must have (or obtain within 6 months of hire) a Computing Environment certification in a related field: ·                Network relevant certification in Cisco(DCNX) or Palo Alto(PCNSE/PCCSE/NGFW) ·                Certified Kubernetes Administrator (CKA). ·                Red Hat Certified Specialist in OpenShift Administration. ·                Certified Kubernetes Security Specialist (CKS). ·                Other equivalent Kubernetes or container networking certifications. Secret Clearance Required  Desired Skills: •                     Working knowledge of DoD Security Technical Implementation Guides (STIG) and the Information Assurance Vulnerability Management (IAVM) process, and/or industry hardening best practices and processes. •                     Familiarity with Kubernetes-based platforms, such as Red Hat OpenShift, Rancher, or vanilla Kubernetes. •                     Demonstrated expertise with automation and Infrastructure as code (IAC) concepts United States Infrastructure & Technology Professional Herndon, US (0147) International Business Machines Corporation