Senior Platform Engineer

We are seeking a Senior Platform Engineer to lead the design, implementation, and maintenance of our secure DevSecOps platform infrastructure supporting mission-critical government systems. This role combines advanced DevOps practices with platform engineering expertise to build automated, secure, and scalable cloud-native infrastructure. The ideal candidate will define build, deployment, and monitoring standards while providing Tier 4 platform support and technical leadership to ensure our infrastructure meets DoD compliance and Risk Management Framework (RMF) requirements. This position works directly with the platform team and serves as a bridge between development teams, security teams, and cloud operations.  Candidate must possess an active TS/SCI.

Why Work with us? 

Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.  

Responsibilities include:

DevSecOps Pipeline Development and Automation

• Design, implement, and maintain automated and secure DevSecOps pipelines with integrated security controls throughout the software delivery lifecycle
• Assist developers in building, scanning, and testing systems through automated pipeline integration and continuous integration/continuous deployment (CI/CD) processes
• Develop DevSecOps tools and techniques to construct comprehensive automated deployment workflows
• Design and document best practices for DevSecOps actions and ensure team adherence to established standards
• Define and implement build, deployment, and monitoring standards for the organization

Infrastructure as Code and Cloud Management

• Automate deployment and maintenance of solutions across multiple Azure cloud instances using Terraform, ARM/Bicep, and other IaC tooling based on guidance from System Architects
• Implement infrastructure consistency and repeatability through automated processes that ensure reliable and predictable deployments
• Develop automated deployment solutions in accordance with guidelines set by Lead Architects
• Collaborate with Cloud Ops/VDI Team to optimize cloud resource utilization, performance, and cost management through automated solutions
• Develop and automate system failover, high availability, and application deployment/upgrade availability models
• Ensure infrastructure deployments comply with security requirements and organizational standards through automated validation

Security Integration and Compliance

• Incorporate security controls and automated security scans to conform to Risk Management Framework (RMF) security requirements
• Ensure cybersecurity functions, performance, and characteristics are incorporated into system deployments and validated according to DoD and USAF policy
• Integrate automated security scanning, vulnerability assessment, and compliance checking throughout deployment pipelines
• Collaborate with Cyber/ATO team on security control implementation and continuous compliance monitoring
• Maintain familiarity with RMF/DIACAP accreditation processes and ensure pipeline compliance
• Ensure cybersecurity documentation completion in accordance with DoD and USAF policy
• Integrate security compliance into automated infrastructure provisioning and management

Container and Orchestration Security Management

• Manage containerization strategies using Docker and Azure Kubernetes Services with integrated security controls
• Implement container security scanning, image vulnerability management, and secure container lifecycle processes
• Configure and optimize container orchestration for security, scalability, and performance
• Ensure container security best practices and automated vulnerability remediation
• Support development teams with secure containerization guidance and troubleshooting
• Maintain cybersecurity performance and functions across infrastructure components

Monitoring, Reporting, and Observability

• Work with development teams to develop monitoring and reporting capabilitie