Platform Engineer

Seneca Resources; Reston (VA); On-site; USD 203,000 - 248,000; Full time

Job summary

Seneca Resources in Reston, VA seeks a Platform Engineer specializing in Kubernetes security to design, build, secure, and maintain enterprise container platforms supporting federal government environments. The ideal candidate will have hands-on experience securing Kubernetes or OpenShift, implementing security controls, automating deployments, and integrating CI/CD with IaC.

Active TS/SCI clearance with CI Polygraph is required.

Qualifications

• Hands-on experience designing, building, deploying, and maintaining container orchestration platforms using Kubernetes.
• Experience implementing security controls aligned with STIGs, CIS Benchmarks, and NIST security frameworks.
• Strong knowledge of Kubernetes architecture, cluster administration, container networking, and workload management.
• Experience with security scanning and vulnerability management tools.
• Experience with automation and CI/CD pipelines using IaC and scripting.

Responsibilities

• Design, build, deploy, secure, and maintain Kubernetes clusters in enterprise environments.
• Implement Kubernetes security best practices including RBAC, network policies, and pod security standards.
• Secure containerized workloads by managing image vulnerabilities, secrets, and runtime policies.
• Develop and maintain secure CI/CD pipelines and IaC automation (Terraform, Ansible).
• Integrate security tooling into development and deployment processes to remediate vulnerabilities before production.

Skills

Kubernetes security

Platform engineering

DevSecOps

RBAC

Network policies

Container security

IaC automation

Python scripting

Education

Bachelor's degree

Tools

Terraform

Ansible

Jenkins

GitLab CI

Helm

ArgoCD

Trivy

Job description

Position Title

Platform Engineer, Kubernetes Security / DevSecOps

Position Title

Platform Engineer, Kubernetes Security / DevSecOps

Clearance Requirements

Active TS/SCI with CI Polygraph (Mandatory)

Location

Reston, VA

Pay

$225K

Position Description

We are seeking a skilled Platform Engineer specializing in Kubernetes security to design, build, secure, and maintain enterprise container orchestration platforms supporting mission-critical federal government environments. The ideal candidate will have demonstrated hands‑on experience engineering and securing Kubernetes or Red Hat OpenShift clusters, implementing security controls, automating infrastructure deployments, and maintaining reliable containerized environments. This position combines Platform Engineering, DevSecOps, and cybersecurity responsibilities, with an emphasis on securing container orchestration infrastructure. While experience with Information Systems Security Engineering (ISSE) principles is desirable, we are open to strong Platform Engineers who are willing to learn and grow into broader ISSE responsibilities. The primary focus is finding an engineer who understands Kubernetes architecture, has built and maintained container platforms, and can implement security measures to protect those environments.

Key Responsibilities

Kubernetes Platform Engineering & Security

• Design, build, deploy, secure, and maintain Kubernetes clusters in enterprise environments.
• Implement Kubernetes security best practices, including cluster hardening, workload isolation, role-based access control (RBAC), network policies, and pod security standards.
• Secure containerized workloads by managing container image vulnerabilities, access controls, secrets, and runtime security policies.
• Implement security controls aligned with applicable DoD Security Technical Implementation Guides (STIGs), CIS Kubernetes Benchmarks, and NIST security frameworks.
• Identify, troubleshoot, and remediate security vulnerabilities and configuration issues across container orchestration environments.
• Support Kubernetes cluster upgrades, patching, configuration management, monitoring, and ongoing platform maintenance.

DevSecOps & Infrastructure Automation

• Develop and maintain secure CI/CD pipelines to automate application and infrastructure deployments.
• Utilize Infrastructure as Code (IaC) tools such as Terraform and Ansible to automate provisioning, configuration, and security enforcement.
• Implement automated security scanning, vulnerability assessments, and compliance checks within deployment pipelines.
• Support container orchestration and application deployment using tools such as Docker, Podman, Helm, and ArgoCD.
• Integrate security tools into development and deployment processes to identify and remediate vulnerabilities before production releases.
• Develop automation scripts using Python, Bash, or similar languages to improve platform security and operational efficiency.

Security Engineering & Compliance

• Collaborate with cybersecurity teams and Information Systems Security Engineers (ISSEs) to implement and maintain security controls across Kubernetes environments.
• Support security assessments, vulnerability remediation, system hardening, and continuous monitoring.
• Assist with implementing security requirements aligned with NIST SP 800-53, DoD STIGs, and other applicable federal security standards.
• Support documentation of system configurations, security procedures, architecture diagrams, and remediation activities.
• Develop knowledge of federal security engineering practices, including Risk Management Framework (RMF) processes and Authorization to Operate (ATO) requirements.

Required Skills/Education

Experience Level: Mid-Level to Senior

Education: Bachelor’s degree preferred, not required

Experience: 7+ years preferred; candidates with fewer years and strong relevant technical experience will be considered.

Required Qualifications

• Active TS/SCI clearance with CI Polygraph, mandatory, no exceptions.
• Demonstrated hands‑on experience designing, building, deploying, and maintaining container orchestration platforms using Kubernetes.
• Strong understanding of Kubernetes architecture, cluster administration, container networking, and workload management.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field.
• 7+ years of relevant platform engineering, DevOps, infrastructure engineering, or cybersecurity experience.
• Experience supporting DoD, Intelligence Community, or other federal government environments.
• Experience securing Kubernetes clusters using CIS Benchmarks, Pod Security Standards, network policies, RBAC, and container runtime security controls.
• Experience with Helm, ArgoCD, Terraform, Ansible, Jenkins, or GitLab CI.
• Experience with security scanning and vulnerability management tools such as Trivy, SonarQube, Fortify, or similar technologies.
• Familiarity with identity and access management technologies such as Keycloak, OIDC, and SSO.
• Experience with monitoring and logging technologies such as Fluent Bit, OpenSearch, or similar observability platforms.
• Experience with AWS, AWS GovCloud, hybrid cloud, or air-gapped infrastructure.
• Knowledge of NIST SP 800-53, STIGs, RMF, and ATO processes.
• Security+ or other relevant security/cloud certifications.
• Experience supporting secure, mission-critical infrastructure in classified environments.

Ideal Candidate Profile

The ideal candidate is a hands‑on Platform Engineer, Kubernetes Engineer, OpenShift Engineer, or DevSecOps Engineer who has successfully built and secured enterprise Kubernetes environments.

We are not necessarily looking for a traditional ISSE or cybersecurity compliance specialist. We are looking for an engineer with strong Kubernetes platform experience who understands how to secure the infrastructure and is interested in expanding into security engineering responsibilities.

A candidate who has built, administered, and hardened Kubernetes clusters but has limited formal ISSE experience should be strongly considered.

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.

When you work with Seneca, you’re choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path. Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.

Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.