Platform Engineer, Public Sector

Responsibilities

• Design and maintain reusable FedRAMP-aligned AWS account, networking, and identity-perimeter patterns across federal programs.
• Build and own a versioned, documented Terraform module library consumed by program engineers.
• Operate Kubernetes and EKS platform patterns, including cluster design, RBAC, network policies, autoscaling, and upgrades.
• Build production CI/CD paved roads with integrated image scanning, dependency scanning, and infrastructure-as-code policy gates.
• Create reusable observability dashboards, alerting, and SLO scaffolding for new programs.
• Forecast, govern, and communicate cloud costs across the portfolio, including reserved instances, savings plans, and chargeback/showback.
• Support program teams adopting the platform and improve patterns based on deployment feedback.
• Participate in customer-context discussions about cloud posture and ATO progress across engagements.
• Carry on-call responsibility for the shared platform surface.

Requirements

• 5+ years of production cloud engineering experience on AWS with deep familiarity with IAM, VPC, EKS, S3, KMS, and CloudTrail.
• Hands-on experience operating within a FedRAMP Moderate or High boundary.
• Strong Terraform skills, including authoring modules used by other engineers.
• Production Kubernetes and EKS experience covering upgrades, RBAC, network policy, and autoscaling.
• Production-scale CI/CD pipeline ownership with security gates.
• Production observability ownership at meaningful scale.
• Experience building reusable platforms, modules, or paved-road tooling for teams beyond one’s own.
• Familiarity with cloud cost management at scale, including reserved instances, savings plans, and chargeback/showback.
• Comfort participating in customer-facing conversations about cloud and ATO posture.
• Ability to obtain and maintain a U.S. Government security clearance.
• AWS Solutions Architect Professional or DevOps Engineer Professional certification is preferred.
• Direct AWS GovCloud production experience, FedRAMP authorization evidence experience, internal developer platform experience, security engineering or DevSecOps background, chaos engineering or fault-injection experience, FinOps certification or equivalent experience, and IL5, IL6, or JWICS experience are preferred.
• An active U.S. Government clearance is preferred; Secret is the minimum for most engagements and TS or TS/SCI is required for some engagements.

Benefits

• Discretionary Time Off with no maximum limit.
• Health, vision, and dental benefits.
• 16 weeks of fully paid parental leave.
• Flexible hybrid work from home and the office where applicable.
• Wellness stipends and dedicated wellness programming.
• Career development programs with reimbursement for educational certifications.
• U.S.-based hybrid/remote work with travel to customer sites as engagements require.