Secure Platform Engineer - Kubernetes, Edge & Air-Gapped

OpenKrill; United States; Hybrid; USD 150,000 - 210,000; Full time

Job summary

Onebrief is hiring Platform Engineers to own and operate the platform end-to-end, from Kubernetes clusters to edge appliances and air-gapped environments. You’ll work with Governance, Risk, and Compliance (GRC) and mission owners to implement STIGs, CVE remediation, and audit-readiness in IL5/IL6/JWICS contexts.

You will help ensure production systems stay resilient under real operating load, ship trusted artifacts to every environment, and pass audits without disruptions.

Qualifications

• 5+ years operating production infrastructure in DevOps/DevSecOps, Platform, SRE, Cloud, or Infrastructure roles.
• Experience designing, building, and operating services in Go, Python, Rust, or TypeScript.
• Deep production Kubernetes experience: operators, networking, storage, multi-cluster operations.
• Expertise with major cloud providers (AWS, Azure), with cross-provider design instincts.
• Strong security fundamentals: identity, secrets management, threat models, and risk-aware decisions.
• Ability to obtain a SECRET clearance; US work location is required.

Responsibilities

• Design, develop, test, iterate, and deploy secure production systems across cloud-native and edge appliance deployments.
• Embed with cross-functional teams and advise on infrastructure, security, and deployment best practices that hold up in production.
• Own end-to-end infrastructure outcomes for one or more critical programs or priority infrastructure initiatives.
• Harden the artifact pipeline so the same signed builds run in cloud, single-tenant high-side, and air-gapped appliance deployments.

Skills

DevOps/DevSecOps

Kubernetes

Go / Python / Rust / TypeScript

Cloud platforms (AWS/Azure)

Security fundamentals

SECRET clearance

Job description

Onebrief is hiring Platform Engineers to own and operate the platform end-to-end, from Kubernetes clusters to edge appliances and air-gapped environments. You’ll work with Governance, Risk, and Compliance (GRC) and mission owners to implement STIGs, CVE remediation, and audit-readiness in IL5/IL6/JWICS contexts.

You will help ensure production systems stay resilient under real operating load, ship trusted artifacts to every environment, and pass audits without disruptions.