layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Senior Platform Engineer (FedD237) at Defense Unicorns | LAYIQ

Design, implement, and continuously improve secure CI/CD and GitOps pipelines for cloud-native software, AI models, and agentic applications.
Work hands-on with Kubernetes and Red Hat OpenShift/OpenShift AI environments to automate secure build, test, promotion, deployment, and lifecycle workflows.
Translate NIST SP 800-53 controls and RMF requirements into practical engineering controls, policies, pipeline checks, and automated evidence collection.
Identify cybersecurity, compliance, configuration, and supply-chain risks early in the development lifecycle—before formal security testing or authorization activities.
Support the end-to-end ATO/RMF lifecycle, including control implementation, technical evidence generation, security artifacts, remediation tracking, and preparation for assessment.
Build and maintain automated security checks across source code, dependencies, container images, infrastructure, configurations, and deployment pipelines.
Implement software supply-chain security practices including SBOM generation, provenance, artifact signing, vulnerability scanning, policy enforcement, and controlled artifact promotion.
Develop Infrastructure as Code using Terraform, Pulumi, Ansible, or similar technologies to make environments consistent, auditable, and repeatable.
Configure and improve GitLab CI/CD pipelines, runners, registries, and automated workflows across multiple environments.
Integrate identity, secrets management, policy enforcement, logging, monitoring, and security tooling into the broader engineering platform.
Collaborate with platform, data, AI/agent, and architecture engineers to ensure security and compliance requirements are designed into the system rather than bolted on later.
Work directly with commercial technology partners to resolve cross-platform security, deployment, identity, networking, and integration issues.
Help establish repeatable approaches for promoting software and AI capabilities across security domains and into classified operational environments.
Develop security automation and compliance-as-code patterns that reduce manual effort and accelerate authorization decisions.
Create and maintain architecture decision records, security documentation, technical standards, runbooks, and implementation guidance.
Continuously identify recurring security and compliance work that can be standardized, automated, or productized rather than solved manually for each environment.
Operate effectively in a fast-moving, ambiguous environment where requirements and architecture will continue to evolve.
Travel / Onsite Expectations: Must be local to the National Capital Region and able to work onsite at the government campus in Springfield, VA as mission requirements evolve. The initial prototype environment may support a hybrid schedule, but the role should be prepared for increasing onsite and SCIF interaction as the effort transitions to higher-classification environments.
Minimum Experience and Qualifications
Active TS/SCI clearance.
Must reside in or be local to the National Capital Region with the ability to work onsite in Springfield, VA as required.
Deep hands-on experience with Kubernetes and containerized application environments.
Experience deploying and operating workloads on Red Hat OpenShift and/or enterprise Kubernetes platforms.
Strong experience with GitLab CI/CD or comparable software delivery platforms.
Strong working knowledge of NIST SP 800-53 and the Risk Management Framework (RMF).
Practical understanding of the government ATO process, including control implementation, security evidence, POA&M/remediation, assessment, and authorization activities.
Experience identifying and remediating security risks in software and infrastructure before formal security testing.
Experience developing and managing Infrastructure as Code using Terraform, Pulumi, Ansible, or similar technologies.
Strong experience with Helm, Kubernetes manifests, GitOps, and declarative configuration management.
Experience with cloud environments such as AWS, including networking, IAM, compute, storage, and Kubernetes services.
Strong Linux systems knowledge and ability to troubleshoot across application, container, Kubernetes, network, and infrastructure layers.
Experience with container security, vulnerability management, artifact repositories/registries, and software supply-chain controls.
Strong scripting or programming ability using Python, Go, Bash, or similar languages.
Ability to work directly with government personnel and multiple technology vendors to diagnose and resolve complex technical and security issues.
Ability to operate with significant autonomy and turn loosely defined mission objectives into working technical solutions.
Preferred Experience and Qualifications
Experience supporting production systems at Secret or TS/SCI classification levels.
Experience implementing NIST 800-53 controls in Kubernetes or cloud-native environments.
Experience with continuous authorization / continuous ATO (cATO) approaches and automated compliance evidence.
Experience with Red Hat OpenShift AI or similar enterprise AI platforms.
Experience with AI/ML infrastructure, model serving, GPU-enabled environments, MLOps, or agentic AI systems.
Experience securing AI/agent workloads, including model provenance, tool access, data access, guardrails, and policy enforcement.
Experience with GitOps tooling such as Flux or Argo CD.
Experience with security and compliance tools such as Kyverno, OPA/Gatekeeper, SonarQube, Trivy, Snyk, Anchore, or comparable technologies.
Experience with SBOM, SLSA/provenance, artifact signing, and software supply-chain security frameworks.
Experience with identity and access management platforms such as Keycloak or comparable enterprise IAM technologies.
Experience with observability and telemetry tooling such as Prometheus, Grafana, OpenTelemetry, ELK, or similar platforms.
Experience moving software, images, or artifacts across multiple security domains or into disconnected/air-gapped environments.
Familiarity with UDS, Zarf, Pepr, Iron Bank, or similar secure software delivery technologies.
Department of Defense or Intelligence Community experience working on an operational ATO’d system.
Experience working on multidisciplinary teams consisting of government engineers, FDEs, OEM professional services teams, and multiple technology vendors.
Demonstrated ability to turn security and compliance requirements into automated engineering patterns that can be reused across environments.

Senior Platform Engineer (FedD237)

Employer job description

Responsibilities

What Success Looks Like

What We Do

What We Work On

Benefits Our Unicorns Enjoy

About this listing