Network Platform Engineer

Apex Systems; Radford (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Apex Systems is hiring a Platform Network Engineer to support a Kubernetes-based hosting environment for a large federal client. The role focuses on designing, automating, securing, and maintaining the platform networking for containerized workloads across distributed environments.

The candidate will work with Calico, Cilium, OVN-Kubernetes, and other networking technologies, with emphasis on security, reliability, and high availability in a government context.

Qualifications

• Senior-level network engineering experience with 5+ years in enterprise environments.
• Strong experience with Kubernetes networking and cloud-native architectures.
• Proficient in IaC tooling (Ansible, Terraform) and scripting (Python).
• Knowledge of network security and DoD requirements is a plus.

Responsibilities

• Collaborate to develop a Kubernetes-based network architecture.
• Develop and maintain IaC for Kubernetes networking deployment.
• Provision networking foundations for namespaces and workloads.
• Administer Kubernetes networking components (Calico, Cilium, OVN).
• Monitor health, performance, and security across environments.
• Provide on-call support for production incidents.

Skills

Senior network engineer

Kubernetes networking

IaC (Ansible Terraform)

Python scripting

Packet capture

mTLS / service mesh

CNI Calico/Cilium/OVN

Networking security

Tools

Cisco NX-OS

Palo Alto NGFW

Terraform

Ansible

Job description

Job#: 3055254

Job Description

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Apex Systems is currently hiring a Platform Network Engineer with a large federal client. As a Platform Network Engineer, you will support a modern, Kubernetes-based hosting environment designed to provide secure, scalable, cloud-native infrastructure for enterprise and mission-critical applications. This position will focus on designing, automating, securing, and maintaining the platform networking architecture that enables containerized workloads across distributed environments.

Project Details / Mission Supported

• Collaborate with engineering teams to develop, maintain, and enhance a Kubernetes-based network architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions supporting Kubernetes networking deployment and sustainment.
• Provision networking foundations for customer namespaces, enclaves, and containerized workloads using automated IaC methodologies.
• Perform day-to-day administration of Kubernetes networking infrastructure, including patching, upgrades, and lifecycle management of networking components such as Calico, Cilium, and OVN-Kubernetes.
• Monitor network health, utilization, capacity, and performance while proactively identifying resource constraints and operational risks.
• Implement cloud-native network security best practices and government cybersecurity requirements.
• Troubleshoot and perform root cause analysis across Kubernetes networking, containerized workloads, routing, switching, and security components.
• Develop and maintain network documentation, architecture diagrams, topology diagrams, Kubernetes network configurations, and operational procedures.
• Provide on-call support for triage and resolution of production incidents.
• Recommend improvements to security, scalability, reliability, performance, and manageability across Kubernetes network environments.
• Support the implementation and maintenance of enterprise networking, firewalling, and secure connectivity solutions.
• Assist in designing resilient network architectures supporting highly available Kubernetes-hosted applications.

Qualified candidates will have the following experience and skills

• Senior-level network engineering experience with at least five years of experience implementing, supporting, and troubleshooting enterprise infrastructure environments.
• Strong experience supporting Kubernetes networking, containerized workloads, and cloud-native networking architectures.
• Experience with overlay and underlay networking technologies such as VXLAN, GENEVE, SD-WAN, and related networking concepts.
• Experience with data center networking and security technologies including Cisco NX-OS, Palo Alto NGFW, or similar enterprise networking platforms.
• Experience with network automation and Infrastructure as Code (IaC) utilizing tools such as Ansible, Terraform, or similar technologies.
• Experience with scripting and automation using Python, Bash, or comparable scripting languages.
• Experience performing packet capture analysis and network troubleshooting.
• Knowledge of mTLS, service mesh architectures, routing protocols, and secure communications concepts.
• Strong knowledge of Kubernetes networking concepts, including:
  • Container Network Interface (CNI) technologies such as Calico, Cilium, and OVN-Kubernetes
  • Service discovery
  • Ingress controllers
  • Network policies
  • DNS management
  • Container networking and traffic flow troubleshooting
• Experience designing, deploying, administering, and supporting enterprise network infrastructures.

Desired Skills

• Familiarity with Kubernetes platforms such as Red Hat OpenShift, Rancher, or upstream Kubernetes.
• Experience implementing network automation and Infrastructure as Code methodologies in large-scale environments.
• Working knowledge of DoD STIGs, IAVM processes, RMF requirements, and/or industry-standard security hardening practices.
• Experience supporting cloud-native networking and container orchestration environments.
• Experience supporting highly available, secure environments within government or regulated industries.

Required Certifications

• Security+ or equivalent DoD 8570 IAT Level II certification.
• Must possess, or obtain within six months of hire, one of the following:
  • Cisco Data Center certification (DCNX or equivalent)
  • Palo Alto certification (PCNSE, PCCSE, NGFW