Senior Platform Engineer

This is a U.S. based position. All of the programs we support require U.S. citizenship to be eligible for employment. All work must be conducted within the continental U.S.

Who we are:

Raft (https://TeamRaft.com) is a customer-obsessed non-traditional small business with a purposeful focus on Distributed Data Systems, Platforms at Scale, and Complex Application Development, with headquarters in McLean, VA. Our range of clients includes innovative federal and public agencies leveraging design thinking, cutting-edge tech stack, and cloud-native ecosystem. We build digital solutions that impact the lives of millions of Americans.

We’re looking for an experienced Senior Platform Engineer to support our customers and join our passionate team of high-impact problem solvers.

About the role:

The Senior Platform Engineer is an expert in hybrid-infrastructure developer platforms. They excel in deploying Kubernetes and in the automation of platform management. The engineer will have experience developing advanced platform APIs and will be an authority on containerized applications. With leadership skills, they will mentor junior to mid-level engineers and have strong communication skills for high-level stakeholder interaction.

What we are looking for: 

• 5+ years of experience creating and maintaining Kubernetes clusters via both managed services (e.g., AKS, EKS, or GKE) and/or self-managed installers (e.g., EKS-A, RKE2, or similar) 
  
• 5+ years of experience leading teams building and developing containerized services deployed in production on orchestration platforms such as Kubernetes, Mesos, etc.
  
• 3+ years of experience managing network resources for Kubernetes clusters (i.e., CNI solutions, NetworkPolicies, etc.) 
  
• 3+ years of experience managing and troubleshooting Kubernetes workloads at enterprise scale
  
• Experience deploying and maintaining platform services and deployment tools (e.g., Istio, Keycloak, Vault, Harbor, ArgoCD, CertManager, Grafana, Prometheus, Loki, FluentBit, FluentD) 
  
• Experience configuring metrics scraping and monitoring dashboards (e.g., Prometheus and Grafana configurations) 
  
• 5+ years of experience building production services using Cloud Infrastructure Providers such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud
  
• 5+ years of experience deploying, maintaining, and monitoring cloud-based compute resources (e.g., AWS EC2 and EBS, Azure Virtual Machines and premium storage, etc.)
  
• Relevant experience deploying, maintaining and monitoring cloud-based network resources (e.g., AWS VPCs, Subnets and Security Groups, Azure Virtual Networks and Network Security Groups, etc.)
  
• 5+ years of experience building developer platform services and APIs that scale in production
  
• 3+ years of experience in Identity and Access Lifecycle Management Operations and Controls
• Bachelor’s degree in Computer Science, Mathematics, or related field, or equivalent experience; Master’s preferred
• Active Security+ certification or ability to obtain within 90 days; advanced certifications (e.g., CISSP, AWS Certified Solutions Architect) highly preferred

Highly preferred:

• Experience hardening Kubernetes clusters via RBAC, Audit Policies, admission controllers (e.g., OPA Gatekeeper or Kyverno), image scanning (e.g., Trivy, Sysdig, or NeuVector), NetworkPolicies, CIS benchmark, and CISA/NSA Hardening Guidance 
• Experience configuring log forwarding, filtering, and aggregation (e.g., Loki, FluentBit, or FluentD) 
• CI/CD experience writing automation to deploy K8s applications at scale 
• Experience with relational and non-relational databases such as PostgreSQL, MySQL, MongoDB, and Elasticsearch 
• Experience deploying, maintaining and monitoring on-premises compute infrastructure (e.g., blade servers, edge devices, VMware virtual machines, etc.) 
• Experience with modern programming languages such as Java, Python, or Go 
• Experience building data intensive platforms

Clearance Requirements:

• Active Secret security clearance