Cloud Platform Engineer

About the role

Everforth ECS is seeking  Cloud Platform Engineer  to work  remotely.   Everforth  ECS is seeking a  Cloud Platforms Engineer   specializing in Containerization and Orchestration to deploy and support cloud environments. This role is hands-on and focused on  platforms  containerization and orchestration in  AWS, building and operating containers and Kubernetes, including authoring  Dockerfiles, Helm/ Kustomize  configurations, GitLab CI/CD pipelines, and Terraform code. This includes writing infrastructure code, improving deployment pipelines, and helping teams  operate  more efficiently in the cloud.   The position works closely with engineering and security teams to deliver consistent, repeatable infrastructure and deployment patterns. The focus is on doing the work, solving problems, and improving how cloud environments are built and  maintained  over time.   Responsibilities include:   Build and  operate  containerized platforms and Kubernetes environments in  AWS.   Develop,  maintain, and  optimize   Dockerfiles  for application containerization.   Author and  maintain  Helm charts and  Kustomize  configurations for Kubernetes deployments.   Build and improve GitLab CI/CD pipelines to automate application and infrastructure deployments.   Develop and  maintain  Terraform Infrastructure as Code ( IaC ) for  Cloud  resources and platform services.   Automate infrastructure provisioning, configuration, and deployment processes.   Improve deployment pipelines to increase reliability, repeatability, and operational efficiency.   Support the ongoing operation, maintenance, and troubleshooting of  container  and Kubernetes platforms.   Other duties, as assigned.     Salary Range: $140,000-$180,000 General Description of Benefits Qualifications U.S. Citizen.   Ability to get DHS Public Trust  security clearance.   Bachelor’s degree with 5+ years of related work experience.   Containers:  Author  Dockerfiles  from scratch, including multi-stage/hardened builds, non-root containers, proper ENTRYPOINT/CMD, and deterministic dependency installation.   Container Registries:  Experience with image tagging/versioning, immutable tags, authentication, pull secrets, and image scanning/remediation.   Kubernetes:  Strong knowledge of Deployments,  StatefulSets,  DaemonSets, Jobs, Services, Ingress,  ConfigMaps, Secrets, PVCs,  ServiceAccounts, RBAC,  NetworkPolicies, and scheduling.   Kubernetes Troubleshooting:  Diagnose workload failures using  kubectl, logs, events, describe, exec, resource status, and evidence-based troubleshooting rather than trial and error.   Reliability & Security:  Resource requests/limits, probes, PDBs, rollout strategies, security contexts, non-root execution, node affinity/taints, and storage concepts.   Helm:  Author and  maintain  charts, templates, values,  subcharts, overrides, and environment-specific configurations; use helm  template, --dry-run, upgrades, and rollbacks.   Kustomize:  Build bases and overlays; use patches, image transformations, namespaces, and generators; understand when to use Helm versus  Kustomize.   GitLab CI/CD:   Author . gitlab-ci.yml  pipelines with stages, needs, rules, reusable templates, artifacts, caching, variables/secrets, approvals, environments, and quality gates.   CI Image Builds:  Build and scan container images in restricted CI environments using  Buildah,  BuildKit, or equivalent tools.   GitOps:  Hands-on experience with Flux or Argo CD, including reconciliation, deployments, drift, health status, and troubleshooting failed reconciliations.   Terraform:  Author Terraform code from scratch, including resources, variables, outputs, modules, data sources, dependencies,  for_each /count, provider configuration, and remote state. Understand plans, state, dependency graphs, unknown values, and reusable module design.   Git/YAML:  Strong Git and YAML skills, including branching, merging/rebasing, troubleshooting, and maintainable configuration.   Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and  identify  the most  appropriate solution.   Highly developed interpersonal and oral/written communication skills, with the ability to  effectively and professionally interact with a diverse set of stakeholders  (from peers to end-users to executive management).   Desired Skills Big Bang / DoD:  Big Bang, Iron Bank, hardened/STIG images, restricted or air-gapped environments, and DoD/RMF/FedRAMP experience.   AWS/GovCloud:  EKS, IAM/IRSA or Pod Identity, EBS/EFS, RDS, ALB/NLB, Route 53, KMS, and Secrets Manager.   Advanced Terraform:  Module design, multi-environment deployments, state management, and provider dependencies   Service Mesh & Policy:  Istio,  Kyverno, and OPA/Gatekeeper.   Security & Identity:  SOPS, Sealed Secrets, External Secrets, cert-manager, OIDC/SAML, and Azure Entra ID     #EverforthECS1   ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.   Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value: Attracting and developing top talent and high-performing teams Fostering a culture that is engaging, accountable, and mission-driven Meet the challenge. Make a difference with Everforth ECS!