Senior Platform Engineer

BAM Technologies, LLC; Richmond (VA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote position

Job summary

BAM Technologies, LLC is seeking a hands-on Senior Platform Engineer to own and administer critical infrastructure and keep it compliant with federal requirements. This role focuses on Kubernetes/EKS, Terraform, and AWS GovCloud, with emphasis on security-by-design and policy-as-code guardrails.

You will manage GitHub Enterprise at scale, drive automation, and address audit findings while maintaining supporting evidence for compliance across IL4+ baselines.

Qualifications

• 7+ years in Platform/Cloud Infrastructure Engineering or SRE.
• Hands-on ownership of production environments.
• Experience with GitHub Enterprise at org level.
• Expert-level Kubernetes/EKS and Terraform.
• Strong AWS and cloud security fundamentals.
• Experience supporting GCC High or GovCloud.
• US citizen with ability to obtain security clearance if needed.

Responsibilities

• Administer and harden GitHub Enterprise Server baseline.
• Own AWS GovCloud (US) infrastructure with EKS/Kubernetes.
• Maintain and extend Terraform modules.
• Apply security-by-design across identity, networking, encryption, and secrets.
• Validate against NIST 800-53, CMMC, FedRAMP-aligned controls.
• Maintain policy-as-code guardrails for compliance.
• Monitor, patch, and improve reliability through automation.
• Remediate audit findings and vulnerability scans promptly.

Skills

Kubernetes/EKS

Terraform

AWS

GitHub Enterprise

Cloud security

Compliance

Job description

Senior Platform Engineer

BAM is a dynamic, multi-disciplinary firm with leading-edge skills in information technology, software development and applied research. Serving government and commercial markets, BAM is committed to its customers and to delivering strong leadership, sound solutions, and innovative thinking. BAM is seeking a hands-on Senior Platform Engineer to own and administer a critical part of our infrastructure and keep it continuously compliant with federal requirements.

Responsibilities

• Administer and harden our GitHub Enterprise Server baseline: org/repo policies, SSO/SCIM, audit logging, branch protections, secret scanning, and access controls.
• Own the AWS GovCloud (US) infrastructure supporting our regulated services and integrations with Microsoft 365 GCC High, with deep ownership of Amazon EKS / Kubernetes.
• Maintain and extend our existing Terraform modules and build new ones as the environment evolves.
• Apply security-by-design across identity, networking, encryption, and secrets management.
• Continuously validate and remediate the environment against its applicable federal requirements and IL4+ security baseline, including NIST 800-53, CMMC, FedRAMP-aligned controls, and relevant DISA STIGs, while maintaining supporting evidence and documentation.
• Maintain policy-as-code guardrails to automatically enforce CMMC and other compliance rules across our Terraform-managed infrastructure.
• Monitor, patch, and improve reliability of the platform through strong automation and operational best practices.
• Respond to and remediate audit findings and vulnerability scan results in a timely manner.

Qualifications

• 7+ years in Platform/Cloud Infrastructure Engineering, DevOps, or SRE, with hands-on ownership (not just oversight) of production environments.
• Experience administering GitHub Enterprise (or a comparable enterprise SCM platform) at an organizational level.
• Expert-level Kubernetes/EKS and expert-level Terraform.
• Strong AWS experience and solid cloud security fundamentals.
• Direct experience supporting GCC High, GovCloud, or other regulated/government-compliant environments.
• Ability to obtain a security clearance if neededMust be US citizen

Preferred Skills

• Experience with AWS GovCloud (US); Azure Government / Microsoft 365 GCC High a plus.
• Experience implementing policy-as-code (e.g., OPA, Sentinel, Checkov, or similar) to enforce compliance guardrails.
• AWS Professional certs, CKA/CKS, GitHub Advanced Security certification, HashiCorp Terraform Associate.
• Familiarity with NIST, FedRAMP, FISMA, or CMMC.
• This is a remote position