Lead Cloud Platform Engineer

Modern Technology Solutions, Inc. (MTSI); Springfield (VA); On-site; USD 170,000 - 230,000; Full time

Job summary

Modern Technology Solutions, Inc. (MTSI) is seeking a Lead Cloud Platform Engineer to lead the design and delivery of a secure, multi-cloud Cloud Native Platform for NGA and related programs.

The role demands strategic technical leadership and hands-on expertise across Kubernetes, IaC, CI/CD, and Zero Trust in a high-security environment. The successful candidate will manage a small team of cloud engineers, collaborate with MBSE, data, and cyber teams, and ensure platform governance,

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field.
• Minimum 8+ years in cloud/platform engineering.
• DoD compliance considerations for TS/SCI eligibility.

Responsibilities

• Lead the architecture, deployment, and sustainment of a secure, multi-cloud Cloud Native Platform powering MBSE, data integration, Digital Threads and Digital Twin operations.
• Oversee Kubernetes environments, service mesh, GitOps, and OTEL for governed platform execution.
• Own identity federation, Zero Trust enforcement, secrets management, and PaC in a DoD environment.
• Drive CI/CD, IaC/CaC pipelines, platform automation, and lifecycle management across enclaves.
• Collaborate with MBSE, data, cyber, and enterprise architecture teams to enable enterprise interoperability.

Skills

Cloud platform leadership

Strategic technical leadership

Scrum/Agile collaboration

Cross-agency coordination

Education

Bachelor’s degree in CS or engineering

Tools

Kubernetes

Terraform

GitLab CI/CD

IaC/CaC

GitOps

OpenTelemetry

IronBank

Job description

Modern Technology Solutions, Inc. (MTSI) is hiring a Lead Cloud Platform Engineer to work in Springfield, VA or St. Louis, MO. Qualified candidates must be U.S. citizens with an active TS/SCI clearance and be eligible to obtain a CI Poly.

Responsibilities

• You will be instrumental in building NGA’s EA Digital Twin capability, modeling the future-state enterprise and delivering the unified Digital Engineering environment the IC and DoW have sought for years.
• You will operate at the strategic level while remaining deeply technical, becoming a critical force multiplier for the Chief Architect and for NGA’s Digital Transformation journey.
• Leads the architecture, deployment, and sustainment of the Cloud Native Platform (CNP) powering Model-Based Systems Engineering (MBSE), enterprise data integration, Digital Threads, and future Digital Twin operations.
• Build and mature a secure, federated, multi-cloud platform that enables enterprise-scale Digital Engineering workflows, authoritative data synchronization and Zero Trust enforcement across multiple enclaves.
• Serves as the technical authority for NGA’s CNP, responsible for designing, hardening, deploying and operating the hybrid, multi-cloud platform foundational to the DEE.
• This role integrates cloud native infrastructure, Kubernetes orchestration, identity and access services, telemetry pipelines, DevSecOps automation and platform governance to support enterprise modeling, data fabric and Digital Thread execution.
• Lead a small but highly skilled team of cloud/platform engineers and collaborate tightly with MBSE leads, data engineers, cyber, enterprise architects and mission area stakeholders to deliver a secure, scalable and resilient DEE platform.
• Platform Architecture Leadership: Own the design, implementation, and evolution of the Cloud Native Platform (CNP), enabling secure, scalable, multi-cloud operations across AWS, Azure, on-prem, and classified enclaves.
• Kubernetes & Multi-Cloud Engineering: Deploy, harden, and operate Kubernetes environments, service mesh, GitOps and OTEL stacks to ensure reliable, governed platform execution.
• Identity, Access & Zero Trust Enforcement: Implement and manage identity federation, enforce Zero Trust policies, manage secrets, certificates, hardened containers (IronBank) and Policy as Code (PaC).
• DevSecOps & Automation: Lead CI/CD, Infrastructure as Code (IaC) and Configuration as Code (CaC) pipelines, platform automation, onboarding workflows and environment lifecycle management
• Platform Operations & Resilience: Deliver high availability, scalability, monitoring/observability, cost optimization, license management and environment reliability across multiple enclaves and mission threads
• Integration with Enterprise Architecture, Data & MBSE: Work closely with MBSE, data fabric and EA teams to ensure platform services support Digital Threads, automated data pipelines, authoritative data stores and model-driven execution
• Security & Accreditation: Partner with ISSO/cyber engineers to enforce JSIG PL3/PL4 compliance, CSfC guidance, enclave boundary controls, OTEL, security, patching and ongoing accreditation workflows.
• Stakeholder & Vendor Coordination: Collaborate with cross-agency stakeholders, provide technical direction to vendors, resolve integration issues and drive platform capabilities toward enterprise-level interoperability.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field; and 8+ years in cloud/platform engineering.
• DoD Compliance:Desired to meet DoD 8140/8570 requirements for anIAM Level IIIposition (ISC2 CISSP or equivalent).
• 5+ years’ experience leading cloud native platform development and operations.
• Deep experience with Kubernetes orchestration and associated tech stack including service mesh, GitOps, and multi-cloud operations.
• Hands-on experience with IaC/CaC (Terraform, Helm, Dockerfiles), CI/CD (GitLab) and automation pipelines.
• Strong understanding of Zero Trust architectures, identity federation, secrets management, certificate services and policy-as-code.
• Experience operating secure cloud-native environments in classified or high-compliance settings.
• Experience working on Scrum or Agile development team.

Desired Qualifications

• Experience with Azure Gov, AWS GovCloud, on-prem Kubernetes (Ex: RKE2, NKP) and air-gap management.
• Familiarity with observability stacks (Grafana, Prometheus, OpenTelemetry), hardened container repositories and license servers (FlexLM).
• Experience integrating platform capabilities with enterprise data fabrics, Digital Threads or MBSE environments.
• Experience collaborating with data engineers, MBSE teams, and enterprise architects and Agile/Scrum experience.
• Background supporting DevSecOps in DoD, IC or large-scale engineering ecosystems.
• Strong ability to guide roadmap development, platform governance and enterprise onboarding processes.

Clearance Requirements

• Must be U.S. citizen with an active TS/SCI clearance and be eligible to obtain a CI Poly.