Network Platform Engineer

Apex Systems; Radford (VA); Hybrid; USD 96,000 - 117,000; Full time

Job summary

Apex Systems is seeking a Platform Network Engineer to support a federal program in Radford, VA. You will design, automate, secure, and maintain a Kubernetes-based networking platform for containerized workloads across distributed environments.

The role requires five+ years of enterprise networking experience, strong Kubernetes networking skills, and IaC expertise (Ansible/Terraform). Candidates must be eligible for a DoD clearance; hybrid onsite work is expected.

Qualifications

• Senior-level network engineer with at least five years in enterprise environments.
• Strong experience with Kubernetes networking and cloud-native architectures.
• Experience with VXLAN, GENEVE, SD-WAN and related networking concepts.
• Experience with Cisco NX-OS, Palo Alto NGFW or similar.
• IaC experience with Ansible, Terraform or similar.
• Scripting experience with Python or Bash.

Responsibilities

• Collaborate with engineering teams to develop, maintain, and enhance a Kubernetes-based network architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions supporting Kubernetes networking deployment and sustainment.
• Provision networking foundations for customer namespaces, enclaves, and containerized workloads using automated IaC methodologies.
• Perform day-to-day administration of Kubernetes networking infrastructure, including patching, upgrades, and lifecycle management of networking components such as Calico, Cilium, and OVN-Kubernetes.
• Monitor network health, utilization, capacity, and performance while proactively identifying resource constraints and operational risks.
• Implement cloud-native network security best practices and government cybersecurity requirements.
• Troubleshoot and perform root cause analysis across Kubernetes networking, containerized workloads, routing, switching, and security components.
• Develop and maintain network documentation, architecture diagrams, topology diagrams, Kubernetes network configurations, and operational procedures.
• Provide on-call support for triage and resolution of production incidents.
• Recommend improvements to security, scalability, reliability, performance, and manageability across Kubernetes network environments.
• Support the implementation and maintenance of enterprise networking, firewalling, and secure connectivity solutions.
• Assist in designing resilient network architectures supporting highly available Kubernetes-hosted applications.

Skills

Kubernetes networking

Network engineering

Cloud-native networking

Python/Bash scripting

Education

Bachelor's degree or higher in IT/CS/Engineering/Network Engineering

Tools

Ansible

Terraform

Calico

Cilium

OVN-Kubernetes

Job description

Job Description:

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Apex Systems is currently hiring a Platform Network Engineer with a large federal client. As a Platform Network Engineer, you will support a modern, Kubernetes-based hosting environment designed to provide secure, scalable, cloud-native infrastructure for enterprise and mission-critical applications. This position will focus on designing, automating, securing, and maintaining the platform networking architecture that enables containerized workloads across distributed environments.

• Collaborate with engineering teams to develop, maintain, and enhance a Kubernetes-based network architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions supporting Kubernetes networking deployment and sustainment.
• Provision networking foundations for customer namespaces, enclaves, and containerized workloads using automated IaC methodologies.
• Perform day-to-day administration of Kubernetes networking infrastructure, including patching, upgrades, and lifecycle management of networking components such as Calico, Cilium, and OVN-Kubernetes.
• Monitor network health, utilization, capacity, and performance while proactively identifying resource constraints and operational risks.
• Implement cloud-native network security best practices and government cybersecurity requirements.
• Troubleshoot and perform root cause analysis across Kubernetes networking, containerized workloads, routing, switching, and security components.
• Develop and maintain network documentation, architecture diagrams, topology diagrams, Kubernetes network configurations, and operational procedures.
• Provide on-call support for triage and resolution of production incidents.
• Recommend improvements to security, scalability, reliability, performance, and manageability across Kubernetes network environments.
• Support the implementation and maintenance of enterprise networking, firewalling, and secure connectivity solutions.
• Assist in designing resilient network architectures supporting highly available Kubernetes-hosted applications.

Job#: 3055254

Project Details / Mission Supported:

• Collaborate with engineering teams to develop, maintain, and enhance a Kubernetes-based network architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions supporting Kubernetes networking deployment and sustainment.
• Provision networking foundations for customer namespaces, enclaves, and containerized workloads using automated IaC methodologies.
• Perform day-to-day administration of Kubernetes networking infrastructure, including patching, upgrades, and lifecycle management of networking components such as Calico, Cilium, and OVN-Kubernetes.
• Monitor network health, utilization, capacity, and performance while proactively identifying resource constraints and operational risks.
• Implement cloud-native network security best practices and government cybersecurity requirements.
• Troubleshoot and perform root cause analysis across Kubernetes networking, containerized workloads, routing, switching, and security components.
• Develop and maintain network documentation, architecture diagrams, topology diagrams, Kubernetes network configurations, and operational procedures.
• Provide on-call support for triage and resolution of production incidents.
• Recommend improvements to security, scalability, reliability, performance, and manageability across Kubernetes network environments.
• Support the implementation and maintenance of enterprise networking, firewalling, and secure connectivity solutions.
• Assist in designing resilient network architectures supporting highly available Kubernetes-hosted applications.

Qualified candidates will have the following experience and skills:

• Senior-level network engineering experience with at least five years of experience implementing, supporting, and troubleshooting enterprise infrastructure environments.
• Strong experience supporting Kubernetes networking, containerized workloads, and cloud-native networking architectures.
• Experience with overlay and underlay networking technologies such as VXLAN, GENEVE, SD-WAN, and related networking concepts.
• Experience with data center networking and security technologies including Cisco NX-OS, Palo Alto NGFW, or similar enterprise networking platforms.
• Experience with network automation and Infrastructure as Code (IaC) utilizing tools such as Ansible, Terraform, or similar technologies.
• Experience with scripting and automation using Python, Bash, or comparable scripting languages.
• Experience performing packet capture analysis and network troubleshooting.
• Knowledge of mTLS, service mesh architectures, routing protocols, and secure communications concepts.
• Strong knowledge of Kubernetes networking concepts, including:

• Container Network Interface (CNI) technologies such as Calico, Cilium, and OVN-Kubernetes
• Service discovery
• Ingress controllers
• Network policies
• DNS management
• Container networking and traffic flow troubleshooting

• Experience designing, deploying, administering, and supporting enterprise network infrastructures.

Desired Skills:

• Familiarity with Kubernetes platforms such as Red Hat OpenShift, Rancher, or upstream Kubernetes.
• Experience implementing network automation and Infrastructure as Code methodologies in large-scale environments.
• Working knowledge of DoD STIGs, IAVM processes, RMF requirements, and/or industry-standard security hardening practices.
• Experience supporting cloud-native networking and container orchestration environments.
• Experience supporting highly available, secure environments within government or regulated industries.

Required Certifications:

• Security+ or equivalent DoD 8570 IAT Level II certification.
• Must possess, or obtain within six months of hire, one of the following:

• Cisco Data Center certification (DCNX or equivalent)
• Palo Alto certification (PCNSE, PCCSE, NGFW, or equivalent)
• Certified Kubernetes Administrator (CKA)
• Certified Kubernetes Security Specialist (CKS)
• Red Hat Certified Specialist in OpenShift Administration
• Other equivalent Kubernetes, networking, or container platform certifications

Location: Radford, VA

Onsite Expectation: Hybrid telework with onsite support as needed.

Clearance Requirement: Active DoD Secret Clearance or the ability to obtain and maintain an active United States Secret security clearance as a condition and continuation of employment.

Pay Range: $70-$85/hr W2

Education:

• Bachelor's degree or higher in Information Technology, Computer Science, Engineering, Network Engineering, Cybersecurity, or a related field.

Compensation & Benefits

The anticipated pay range for this position is $70.00/hr to $85.00/hr. Please note that the final pay rate will be determined based on a variety of factors, including the candidate's experience, qualifications, and the specific requirements of the role.

We are an equal opportunity employer and welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.