Senior Platform Engineer - Kubernetes Focus - Tucson, AZ

ICR, Inc.; Tucson (AZ); On-site; USD 138,000 - 236,000; Full time

Benefits offered by this job

Equity

Retirement plan

Health care benefits

Paid time off

Job summary

ICR, Inc. is seeking experienced Senior Platform/DevOps Engineers in Tucson, AZ to secure and optimize Kubernetes platforms in classified environments. You will lead the design of secure CI/CD pipelines and IaC implementations, ensuring compliance, resilience, and scalable deployments.

Qualified candidates have TS/SCI clearance, a relevant engineering degree, and 7+ years of Kubernetes expertise. The role emphasizes collaboration, incident response, and continuous improvement in DevSecOps

Qualifications

• Active TS/SCI clearance with US citizenship is required.
• Bachelor's degree in CS/CE/EE with 7+ years of relevant experience.
• Expert Kubernetes administration knowledge.
• Experience designing secure CI/CD pipelines with automated gates.

Responsibilities

• Architect, administer, and harden production-grade Kubernetes clusters with high availability and security posture in classified environments.
• Design and implement secure CI/CD pipelines with automated security gates and policy enforcement.
• Manage CNI, cluster networking, and Network Policies for distributed systems.
• Develop and maintain IaC using Terraform, Ansible, and Helm for auditable deployments.
• Lead incident response and troubleshooting to resolve root causes without outages.
• Implement DevSecOps practices including secrets management and runtime security controls.
• Collaborate with software teams to optimize performance and deployment patterns.
• Document architectural decisions and security postures for technical and non-technical stakeholders.
• Mentor junior engineers and drive platform reliability and automation.

Skills

Kubernetes

CI/CD pipelines

IaC

Security hardening

Scripting

Troubleshooting

DevSecOps

Collaboration

Education

Bachelor's degree in CS/CE/EE

Tools

Terraform

Ansible

Helm

Jenkins

GitLab CI

Job description

our Ideas, Commitment & Results will define us

What Defines Us

We believe the right person can make all the difference in the world. We believe where there is a will, there is a way. We believe in getting our nose bloodied for the right cause and challenging the status quo. We believe candor and transparency lead to quick and informed decisions. We believe employee ownership and compensation commensurate with one's contribution are a must. Finally, we believe our Ideas, Commitment and Results will define us.

We believe in getting our nose bloodied for the right cause and challenging the status quo

About ICR

We will be the first to identify and solve the Intelligence and Defense Communities’ toughest engineering and operational problems by establishing a true partnership with our Customers. Despite our advanced degrees and heavy R&D focus, it is our hands‑on experience and scars from the field that will enable us to create very practical and reliable solutions.

Our purpose at ICR is to establish a company where the best minds in their career field want to work. Our Customer’s problems will become our own and our employees will wake up each day wanting to solve them. Through a culture of stewardship and calculated risk‑taking, we hope to mentor, develop and ultimately transition ICR’s ownership and leadership from our earliest employees to our future generation of employees.

ICR is now hiring motivated Analysts & Engineersfor positions in Denver, CO | Cincinnati, OH | Monterey, CA | Chantilly, VA | Fulton, MD Augusta, GA | San Antonio, TX | Tucson, AZ | Orlando, FL | Syracuse, NY Louisville, CO

WhoWe Are

ICR was founded with the mission to be the first to identify and solve the Intelligence and Defense Communities’ toughest engineering and operational problems by establishing a true partnership with our Customers. Despite our advanced degrees and heavy R&D focus, it is our hands‑on experience and scars from the field that will enable us to create very practical and reliable solutions.

Our purpose at ICR is to establish an employee‑owned company where the best minds in their career field want to work. Our Customer’s problems will become our own and our employees will wake up each day wanting to solve them. Through a culture of stewardship and calculated risk‑taking, we hope to mentor, develop and ultimately transition ICR’s ownership and leadership from our earliest employees to our future generation of employees.

Employee Benefits

ICR is an employee‑owned company that is proud to offer a comprehensive benefits package designed to meet the needs of our employees and their families. In addition to the industry’s most competitive salaries, we offer each employee equity in their company, a generous retirement plan, company‑paid health care benefits and a flexible paid time off policy.

ICR funds a retirement account for every employee at an additional 25% of your base salary. These funds are deposited in a tax‑deferred account, with no vesting period, that allows you to decide on the investment strategy best for you.

ICR also funds an Individual Benefits Account (IBA) for every employee at an additional 25% of your base salary. These funds are available immediately and can be used to reimburse expenses such as health insurance, medical expenses, paid time off, elected training and an array of other qualified pre‑tax expenses.

Location: Tucson, AZ

Job Id:698

# of Openings:1

Tucson, AZ

Requires active TS/SCI security clearance - U.S. Citizenship required.

ICR has opportunities available for fully cleared, experienced, and motivated Senior Platform/DevOps Engineers. Successful candidates will be strong engineers who can prioritize well, communicate clearly, and have a consistent track record of delivering secure, resilient, and automated infrastructure in classified environments. You will serve as the technical authority for our Kubernetes platforms, bridging the gap between development velocity and rigorous security compliance.

ICR is an employee‑owned company that is proud to offer a comprehensive benefits package designed to meet the needs of our employees and their families. In addition to the industry's most competitive salaries, we offer each employee equity in their company, a generous retirement plan, company‑paid health care benefits, and a flexible paid time off policy.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Architect, administer, and harden production‑grade Kubernetes clusters, ensuring high availability, security compliance (CIS/STIG), and operational resilience in classified environments.
• Design and implement secure CI/CD pipelines that integrate automated security scanning (SAST/DAST/Image Scanning), policy enforcement, and seamless deployment strategies.
• Manage Container Network Interfaces (CNI) and cluster networking, troubleshooting complex connectivity issues, configuring Network Policies, and optimizing traffic flow for distributed systems.
• Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, Ansible, and Helm to ensure consistent, auditable, and repeatable infrastructure deployments.
• Lead incident response and troubleshooting for control plane and worker node issues, utilizing deep diagnostic skills to resolve root causes without service disruption.
• Implement DevSecOps best practices, including secrets management, pod security admission controls, runtime security monitoring, and continuous compliance auditing.
• Collaborate with software development teams to optimize application performance, resource utilization, and deployment patterns within the Kubernetes ecosystem.
• Document and communicate highly technical architectural decisions, operational procedures, and security postures effectively to both technical teams and non‑technical stakeholders.
• Mentor junior engineers and drive continuous improvement in platform reliability, automation coverage, and security posture.

REQUIRED SKILLS AND QUALIFICATIONS

• Active Top Secret Security Clearance with SSBI and SCI eligibility - US Citizenship Required
• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related field with a minimum of seven (7) years of relevant experience.
• Expert‑level proficiency in Kubernetes administration, including control plane components (etcd, API server, scheduler), worker node management, and upgrade strategies.
• Deep understanding of Container Networking (CNI) plugins, including troubleshooting, BGP peering, and Network Policy enforcement.
• Proven experience designing and maintaining CI/CD pipelines (Jenkins, GitLab CI, or similar) with integrated security gates and automated testing.
• Strong proficiency in Infrastructure as Code (IaC) tools such as Terraform, Ansible, and Helm.
• Demonstrated experience implementing security hardening measures (CIS Benchmarks, Pod Security Standards, RBAC, OPA/Gatekeeper, etc) in production environments.
• Proficiency in scripting languages for automation and tooling development.
• Exceptional analytical and problem‑solving skills with a methodical approach to troubleshooting complex distributed system failures.
• High level of self‑initiative and self‑motivation with the ability to work under minimal supervision in a fast‑paced, high‑stakes environment.

PREFERRED SKILLS AND QUALIFICATIONS

• Experience operating in air‑gapped or disconnected environments and managing offline package repositories/registries.
• Proficiency with Rancher, Nexus, Harbor, or similar enterprise container management and registry tools.
• Experience with eBPF‑based technologies for advanced networking and security observability.
• Familiarity with Chaos Engineering principles and tools to validate system resilience.
• Experience with Secrets Management solutions.
• Knowledge of monitoring and observability stacks (Prometheus, Grafana, etc.) tailored for Kubernetes.
• Background in DevSecOps, including integrating static/dynamic analysis and vulnerability management into the SDLC.
• Experience supporting US Government/DoD programs and familiarity with RMF, ATO processes, and CDRL deliverables.
• Strong RHEL IPA skills including troubleshooting and implementing resolutions via Ansible deployed architectures.
• Strong ansible skills; ability to troubleshoot, reverse engineer and resolve issues within complex structures within air‑gapped deployments.

Salary Range: $138,000 - $236,000 (based on experience and qualifications)

This position offers a comprehensive benefits package that includes company equity, retirement plan, company‑paid health care benefits, and flexible paid time off policy, in addition to opportunities for a raise and bonus during the year.

ICR, Inc. considers several factors when extending job offers, including but not limited to candidates' key skills, relevant work and/or military experience, education, training, certifications, and work location.

ICR is proud to be an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.

If you share our ideals, we want to hear from you