Network Platform Engineer

Job#: 3055254 Job Description: Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment. Apex Systems is currently hiring a Platform Network Engineer with a large federal client. As a Platform Network Engineer, you will support a modern, Kubernetes-based hosting environment designed to provide secure, scalable, cloud-native infrastructure for enterprise and mission-critical applications. This position will focus on designing, automating, securing, and maintaining the platform networking architecture that enables containerized workloads across distributed environments.

Project Details / Mission Supported:

• Collaborate with engineering teams to develop, maintain, and enhance a Kubernetes-based network architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) solutions supporting Kubernetes networking deployment and sustainment.
• Provision networking foundations for customer namespaces, enclaves, and containerized workloads using automated IaC methodologies.
• Perform day-to-day administration of Kubernetes networking infrastructure, including patching, upgrades, and lifecycle management of networking components such as Calico, Cilium, and OVN-Kubernetes.
• Monitor network health, utilization, capacity, and performance while proactively identifying resource constraints and operational risks.
• Implement cloud-native network security best practices and government cybersecurity requirements.
• Troubleshoot and perform root cause analysis across Kubernetes networking, containerized workloads, routing, switching, and security components.
• Develop and maintain network documentation, architecture diagrams, topology diagrams, Kubernetes network configurations, and operational procedures.
• Provide on-call support for triage and resolution of production incidents.
• Recommend improvements to security, scalability, reliability, performance, and manageability across Kubernetes network environments.
• Support the implementation and maintenance of enterprise networking, firewalling, and secure connectivity solutions.
• Assist in designing resilient network architectures supporting highly available Kubernetes-hosted applications.

Qualified candidates will have the following experience and skills:

• Senior-level network engineering experience with at least five years of experience implementing, supporting, and troubleshooting enterprise infrastructure environments.
• Strong experience supporting Kubernetes networking, containerized workloads, and cloud-native networking architectures.
• Experience with overlay and underlay networking technologies such as VXLAN, GENEVE, SD-WAN, and related networking concepts.
• Experience with data center networking and security technologies including Cisco NX-OS, Palo Alto NGFW, or similar enterprise networking platforms.
• Experience with network automation and Infrastructure as Code (IaC) utilizing tools such as Ansible, Terraform, or similar technologies.
• Experience with scripting and automation using Python, Bash, or comparable scripting languages.
• Experience performing packet capture analysis and network troubleshooting.
• Knowledge of mTLS, service mesh architectures, routing protocols, and secure communications concepts.
• Strong knowledge of Kubernetes networking concepts, including:

○ Container Network Interface (CNI) technologies such as Calico, Cilium, and OVN-Kubernetes

○ Service discovery

○ Ingress controllers

○ Network policies

○ DNS management

○ Container networking and traffic flow troubleshooting

• Experience designing, deploying, administering, and supporting enterprise network infrastructures.

Desired Skills:

• Familiarity with Kubernetes platforms such as Red Hat OpenShift, Rancher, or upstream Kubernetes.
• Experience implementing network automation and Infrastructure as Code methodologies in large-scale environments.
• Working knowledge of DoD STIGs, IAVM processes, RMF requirements, and/or industry-standard security hardening practices.
• Experience supporting cloud-native networking and container orchestration environments.
• Experience supporting highly available, secure environments within government or regulated industries.

Required Certifications:

• Security+ or equivalent DoD 8570 IAT Level II certification.
• Must possess, or obtain within six months of hire, one of…