Senior Platform Engineer (Top Secret/SCI with agreement to obtain CI Poly Clearance Required)

North-Point-Technology; Chantilly (VA); On-site; USD 130,000 - 210,000; Full time

Job summary

North Point Technology in Chantilly, Virginia seeks a Senior Platform Engineer to design, deploy, and maintain enterprise-scale on-prem Kubernetes clusters in secure air-gapped data centers. The role demands strong Linux, container runtimes, and storage expertise, plus automation with Ansible and GitOps using ArgoCD.

The contract is approximately seven months, requires active Top Secret clearance with SCI eligibility, and an ability to obtain a polygraph within the customer's timeline.

Qualifications

• On-premises Kubernetes deployment and management in air-gapped environments.
• Enterprise Linux admin tasks including systemd and kernel tuning.
• Container runtimes: containerd and CRI‑O.
• OS-level isolation with cgroups v2, Linux namespaces.
• Security hardening with AppArmor and SELinux.
• Storage design and CSI driver deployment for dynamic PVs.
• HA control plane with multi-master nodes and internal load balancers.
• etcd backups, snapshots, and restoration.
• RBAC, network policies, pod security standards, auditing.
• Certificate lifecycle management for cluster components.
• Ansible automation for provisioning; GitOps with ArgoCD.
• CI/CD pipelines for infra testing and validation.
• Air-gapped deployment and Kaniko builds.
• Cluster troubleshooting with k9s, kubectl, crictl.
• Scripting in Bash and Python for automation.

Responsibilities

• Design, deploy, and maintain enterprise-scale Kubernetes clusters on bare metal.
• Manage security hardening, RBAC, network policies, and auditing.
• Develop and maintain Ansible playbooks for provisioning.
• Implement GitOps workflows with ArgoCD and IaC repositories.
• Build CI/CD pipelines for infrastructure validation and deployment.
• Operate and optimize storage clusters with CSI drivers and Kaniko builds.
• Troubleshoot cluster components using k9s, kubectl, and crictl.

Skills

On-prem Kubernetes deployment

Linux system administration

Container runtimes (containerd, CRI-O)

cgroups v2 / namespaces

AppArmor / SELinux hardening

Storage design (CSI)

Kubernetes HA & multi-master

etcd backup/restoration

RBAC / network policies / pod security

Certificate lifecycle management

Ansible automation

GitOps / ArgoCD

CI/CD for infra testing

Kaniko-based builds in air-gapped env

kubectl / k9s / crictl

Bash / Python scripting

Education

Bachelor's degree in STEM

Master's degree in STEM (preferred)

Tools

Kubernetes

Ansible

ArgoCD

Kubespray

Kaniko

kubectl

crictl

Job description

Senior Platform Engineer (Top Secret/SCI with agreement to obtain CI Poly Clearance Required)

Chantilly, Virginia, United States

North Point Technology is looking to hire a Senior Platform Engineer with deep expertise in on-premises Kubernetes infrastructure to support a mission-critical enterprise container platform operating in a fully air-gapped, non-cloud environment. This is a short-term contract assignment of approximately seven months. An active Top Secret clearance with SCI eligibility is required upon hire, and the selected candidate must be willing and able to obtain a polygraph within the customer's timeline.

Responsibilities:

The Senior Platform Engineer will design, deploy, and maintain enterprise-scale Kubernetes clusters built entirely from bare metal in secure, air-gapped data centers. Responsibilities span the full infrastructure stack: advanced Linux administration including systemd, kernel tuning, and SSH key architecture; manual installation and configuration of container runtimes (containerd, CRI-O); OS-level security hardening with AppArmor and SELinux; and management of cgroups v2 and container isolation mechanisms. The engineer will design and implement software-defined storage solutions, build distributed storage clusters from raw drives, deploy Container Storage Interface (CSI) drivers for dynamic volume provisioning, and monitor storage performance and capacity. Cluster lifecycle duties include bootstrapping production Kubernetes clusters from scratch using kubeadm or Kubespray, designing multi-master high-availability control plane architectures, configuring internal load balancers for API server redundancy, and managing etcd operations including backups, snapshots, restoration, and defragmentation. Security responsibilities include implementing RBAC policies, network policies, pod security standards, admission controllers, API server auditing, certificate lifecycle management, and vulnerability remediation. The role also involves developing Ansible playbooks and Bash/Python scripts for cluster provisioning, implementing GitOps workflows with ArgoCD, maintaining infrastructure-as-code repositories, building CI/CD pipelines for infrastructure validation, managing Kaniko-based container image builds in air-gapped environments, and troubleshooting cluster components using k9s, kubectl, and crictl.

Required Skills/Experience:

• On-premises Kubernetes cluster deployment and management in production environments (non-cloud, air-gapped)
• Enterprise Linux system administration including systemd service management and kernel tuning
• Container runtime installation and configuration: containerd and CRI‑O
• cgroups v2, Linux namespaces, and container isolation management at the OS level
• OS-level security hardening with AppArmor and SELinux
• Software‑defined storage design and implementation; CSI driver deployment for dynamic persistent volume provisioning
• High‑availability Kubernetes control plane architecture with multi‑master nodes and internal load balancers
• etcd cluster operations: backups, snapshots, restoration, and defragmentation
• Kubernetes security: RBAC, network policies, pod security standards, admission controllers, and API server auditing
• Certificate lifecycle management for Kubernetes cluster components and service mesh
• Ansible automation and Ansible playbook development for infrastructure provisioning
• GitOps workflows and ArgoCD for declarative, continuous deployment
• CI/CD pipeline construction for infrastructure testing and validation
• Air‑gapped and offline deployment strategies including Kaniko‑based container image builds
• Cluster administration and debugging using k9s, kubectl, and crictl
• Troubleshooting static pods: etcd, kube-apiserver, kube-controller-manager, kube-scheduler
• Scripting in Bash and/or Python for cluster automation

Preferred Skills/Experience:

• Identity and authorization standards: X.509, SAML, OAuth2, OIDC, LDAP
• ICAM solution architecture using Oracle or other enterprise‑grade identity platforms

Qualifications:

• Bachelor's degree in a STEM field
• Master's degree in a STEM field (preferred)
• Certified Kubernetes Security Specialist (CKS) certification
• Active Top Secret security clearance
• SCI eligibility
• Willingness and ability to obtain a CI polygraph within the customer's timeline

North Point Technology is THE BEST place to work for curious-minded engineers motivated to support our country’s most crucial missions! We focus on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems.

At North Point Technology, EMPLOYEES come first! We value our employees by providing excellent compensation, benefits, and a flexible work-life balance. We strive for a close-knit and open atmosphere where the owners are always directly available to our team members.

For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.