Platform Engineer

North Point Technology is looking to hire a Senior Platform Engineer with deep expertise in on-premises Kubernetes infrastructure to support a mission-critical enterprise container platform operating in a fully air-gapped, non-cloud environment. This is a short-term contract assignment of approximately seven months. An active Top Secret clearance with SCI eligibility is required upon hire, and the selected candidate must be willing and able to obtain a polygraph within the customer's timeline.

Responsibilities:

The Senior Platform Engineer will design, deploy, and maintain enterprise-scale Kubernetes clusters built entirely from bare metal in secure, air-gapped data centers. Responsibilities span the full infrastructure stack: advanced Linux administration including systemd, kernel tuning, and SSH key architecture; manual installation and configuration of container runtimes (containerd, CRI-O); OS-level security hardening with AppArmor and SELinux; and management of cgroups v2 and container isolation mechanisms. The engineer will design and implement software-defined storage solutions, build distributed storage clusters from raw drives, deploy Container Storage Interface (CSI) drivers for dynamic volume provisioning, and monitor storage performance and capacity. Cluster lifecycle duties include bootstrapping production Kubernetes clusters from scratch using kubeadm or Kubespray, designing multi-master high-availability control plane architectures, configuring internal load balancers for API server redundancy, and managing etcd operations including backups, snapshots, restoration, and defragmentation. Security responsibilities include implementing RBAC policies, network policies, pod security standards, admission controllers, API server auditing, certificate lifecycle management, and vulnerability remediation. The role also involves developing Ansible playbooks and Bash/Python scripts for cluster provisioning, implementing GitOps workflows with ArgoCD, maintaining infrastructure-as-code repositories, building CI/CD pipelines for infrastructure validation, managing Kaniko-based container image builds in air-gapped environments, and troubleshooting cluster components using k9s, kubectl, and crictl.

Required Skills/Experience:

• On-premises Kubernetes cluster deployment and management in production environments (non-cloud, air-gapped)
• Bootstrapping Kubernetes clusters using Kubespray, kubeadm, or equivalent tools
• Enterprise Linux system administration including systemd service management and kernel tuning
• Container runtime installation and configuration: containerd and CRI-O
• cgroups v2, Linux namespaces, and container isolation management at the OS level
• OS-level security hardening with AppArmor and SELinux