Senior Platform Engineer — Enterprise API Gateway

RESPONSIBILITIES: Deploy and operate the gateway control and data planes on Kubernetes or Red Hat OpenShift - namespaces, RBAC, quotas, ingress and routes, rolling updatesAutomate installation, configuration, upgrade, and patching with Helm, Terraform, and Ansible, delivered as reusable modules rather than one-off scriptsBuild and maintain CI/CD pipelines in Jenkins or GitHub Actions with artifact management, image scanning, and approval gates under Government change controlManage declarative gateway configuration as code and promote it across environment tiers with tested rollbackArchitect multi-AZ high availability and disaster recovery for the gateway tier and its datastoresProvision and maintain supporting cloud infrastructure - VPC design, subnets and routing, security groups, managed databases, backups, encryptionAutomate certificate lifecycle, mutual TLS, and secrets handling for platform componentsBuild observability across metrics, logs, and traces with dashboards and alerting tied to service objectivesEstablish performance and capacity baselines, load test the gateway tier, and tune for throughput and latencyMaintain runbooks, SOPs, and design artifacts sufficient for Government and follow-on staff to sustain the platformREQUIRED QUALIFICATIONSActive MBI suitability determination, current and transferable as of your start dateU.S. citizenship, as required for Customer contractor personnelEight years of hands-on platform, DevOps, or cloud infrastructure engineering in production, including three years supporting a Federal system subject to FISMAProduction operation of Kubernetes or Red Hat OpenShift, including cluster resources, ingress controllers, operators, and HelmInfrastructure-as-code at scale with Terraform and Ansible, including reusable modules and version-controlled stateOwnership of enterprise CI/CD pipelines in Jenkins, GitHub Actions, or GitLab, with artifact repositories and security scanning integratedAWS-native architecture across VPC, EC2 or EKS, IAM, S3, RDS, Lambda, and CloudWatch, or equivalent depth in another major cloudDemonstrated design and operation of multi-AZ, high-availability services meeting a stated availability commitmentObservability engineering with tools such as Prometheus, Grafana, Splunk, AppDynamics, OpenTelemetry, or the ELK stackLinux administration on RHEL, shell or Python scripting, and troubleshooting at the OS and network layerCertificate and secrets handling for platform services - TLS and mutual TLS, key rotation, and a secrets management platformExperience promoting configuration through Government-controlled environments under formal change controlTechnical documentation - design artifacts, runbooks, and SDLC deliverables that hold up under Government reviewAgile or Scrum delivery alongside Government product owners and multiple contractor teamsBachelor's degree in Computer Science, Engineering, or Information Systems, or equivalent hands-on experiencePREFERRED QUALIFICATIONSAn active vendor certification on the program's API gateway platform, or willingness to earn it within 90 days of start with training providedAn active platform certification such as CKA, Red Hat OpenShift, AWS Solutions Architect, Terraform Associate, or ITIL v4Prior support to a Federal financial or tax administration programGitOps delivery with Argo CD, and service mesh exposure such as IstioMessaging and integration middleware such as Kafka, IBM MQ, ActiveMQ, or webMethodsZero Trust implementation - mTLS, RBAC/ABAC, MFA, PIV, and LDAP/AD or Kerberos integrationSupporting ATO and continuous monitoring from the platform side - scan remediation and evidence collection