Platform/Kubernetes Engineer

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.

JOB SUMMARY -- ESSENTIAL FUNCTIONS/DUTIES

The Platform and Kubernetes Engineer will manage, architect, and modernize our container orchestration platforms across on-premises, air-gapped, and secure cloud environments. In this role, you will serve as the primary subject matter expert for our container platforms - supporting bare-metal and lightweight edge/dev clusters (Talos, Linux, MicroK8s) as well as enterprise orchestrators (Red Had OpenShift) while potentially supporting integration into secure hybrid cloud boundaries (AWS FENCES). The Platform and Kubernetes Engineer will work closely with a collaborative team of System Administrators, DevSecOps Engineers, Cybersecurity Analysts, and Software Developers to provide resilient container infrastructure, automated runner environments, and secure packaging pipelines for our software development community.

Employee will be responsible for the following functions/duties:

• Kubernetes and Platform Operations
• Architect, deploy, patch, and maintain multi-distribution Kubernetes environments across bare-metal, virtualized, and cloud infrastructure, including Talos Linux and MicroK8s.
• Ensure high availability, performance, and resource optimization across development and production clusters.
• Manage container persistent volumes, stateful workloads, and distributed storage clusters (Rook-Ceph and Longhorn).
• Support physical server maintenance, rack deployments, and bare-metal OS provisioning for underlying cluster nodes.
• Cloud Integration & Hybrid Architecture (AWS FENCES)
• Interface on-premises Kubernetes platforms with cloud services, including hands-on administration or integration with AWS Elastic Kubernetes Service (EKS).
• Provision and troubleshoot supporting cloud infrastructure utilizing core AWS services: EC2, S3, VPC, IAM, Lambda, and Network & Application Load Balancers (NLB/ALB).
• Supports the secure network boundary and data synchronization between on-premises developer networks and AWS FENCES
• CI/CD, Runners, and Artifact Management
• Stand up, configure, and maintain self-hosted pipeline runners, with an emphasis on Actions Runner Controller (ARC) on Kubernetes for GitHub Actions.
• Maintain and secure container registries and artifact repositories (AWS Elastic Container Registry (ECR), Harbor, Nexus, Artifactory).
• Partner with DevSecOps engineers to support code deployment pipelines, version control integrations (Git, GitHub, AWS CodeCommit), and release packaging.
• Network, Security, and PKI Administration
• Manage the end-to-end lifecycle of SSL/TLS certificates across both Linux operating systems and Kubernetes ingress controllers, ensuring continuous encryption in transit.
• Configure and troubleshoot cluster networking, software-defined networking (SDN), ingress controllers, reverse proxies, and virtual/physical load balancers.
• Enforce security baselines, and access policies in compliance with DoD/DoW cybersecurity standards across air-gapped and connected environments.
• Documentation & Team Collaboration
• Produce and maintain detailed operational runbooks, disaster recovery procedures, and cluster architecture diagrams.
• Provide escalation support to systems administrators and software development teams encountering infrastructure-level blockers.

DESIRED QUALIFICATIONS

• Air-Gapped Operations: Experience operating, patching, and maintaining infrastructure in disconnected, air-gapped, or classified networks (including DoD IL5/IL6 or AWS FENCES).
• Automated Runner Architecture: Production experience deploying and tuning Actions Runner Controller (ARC) for containerized GitHub self-hosted runners.
• AWS Developer Tools: Exposure to AWS CodeCommit, CodeDeploy, or automated CloudFormation/Terraform IaC workflows.
• Storage Systems: Familiarity with distributed block and object storage systems on bare-metal hardware.
• Hardware Operations: Experience with physical server hardware diagnostics, iDRAC/iLO remote management, and network interface teaming.
• Observability: Experience deploying and configuring cluster monitoring and alerting solutions (e.g., Prometheus, Grafana, OpenSearch/Elasticsearch).
• Desired Certifications: Certified Kubernetes Administrator (CKA)

The following qualifications are preferred:

• Kubernetes Administration: Demonstrated hands-on experience deploying, configuring, and troubleshooting Kubernetes clusters, including direct experience with one or more distributions:
• Talos Linux (API-driven, immutable OS)
• MicroK8s
• Red Hat OpenShift
• Linux Systems Mastery: Strong Linux administration experience (RHEL, Ubuntu, or immutable Linux distributions), shell proficiency, and deep comfort navigating the command-line interface (CLI).
• Scripting & Automation: Proven ability to automate administrative tasks using Bash, Python, or PowerShell.
• Version Control & CI/CD Fundamentals: Practical understanding of Git, branching workflows, source repository platforms (GitHub, GitLab), and continuous integration pipelines.
• Networking & Web Infrastructure: Solid understanding of TCP/IP, DNS, subnetting, reverse proxies, and traffic routing.
• PKI & Certificate Operations: Direct, hands-on experience configuring and debugging SSL/TLS certificates and mutual TLS (mTLS) within Linux servers and container environments.
• AWS Exposure: Practical experience or strong foundational exposure to core AWS services, including IAM, VPC, EC2, S3, EKS, ECR, and Application/Network Load Balancers.
• CompTIA Security +

REQUIREMENTS -- EDUCATION, TECHNICAL, AND WORK EXPERIENCE

One of the following educational requirements must be met for this position:

• A bachelor’s degree in an associated discipline and a minimum of four years of related experience
• A master’s degree in an associated discipline and a minimum of two years of experience
• A PhD in an associated discipline

In addition, a Computer Scientist III must possess the following qualifications:

• Experience with computer-based systems and applications
• Programming skills in languages used for job-specific programming tasks
• Familiarity with the application of industry standard hardware and software design and documentation techniques
• Experience with systems engineering and software development lifecycles
• Effective oral and written communication skills
• Good planning/organizational skills

BENEFITS

• Medical, Dental, Vision Insurance
• Benefits Active on Day 1
• Life Insurance
• Health Savings Accounts/FSA's
• Disability Insurance
• Paid Time Off
• 401(k) Plan Options with Employer Match
• JT4 will match 50%, up to an 8% contribution
• 100% Immediate Vesting
• Tuition Reimbursement

OTHER RESPONSIBILITIES

Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.

WORKING CONDITIONS

Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting while using the computer terminal, constant use of sight abilities while reviewing documents, constant use of speech/hearing abilities for communication, and constant mental alertness are required.

Travel to remote company work locations may be required.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified.

Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment.

SCC: JSD12; JCORP12