About the Company
LMI is a digital solutions provider focused on helping government agencies achieve their missions through technology, innovation, and rapid delivery. The company develops commercial-grade platforms and mission-ready AI solutions for federal customers, drawing on its expertise in government deployment and strategic partnerships. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors.
About the Role
LMI is seeking a Platform Engineer to design, deploy, operate, and maintain secure cloud-native platform services for a Department of War mission partner. The role focuses on AWS-hosted Kubernetes environments connected to the Department of Defense Information Network (DODIN). The engineer will support platform architecture, infrastructure automation, container orchestration, application deployment, cybersecurity compliance, monitoring, and troubleshooting to deliver reliable and secure services for mission-critical applications.
This is a remote position within the continental United States. An active Secret security clearance is required. The employee must be available during core working hours aligned with the mission partner and may need to travel periodically to government or LMI locations for integration, testing, maintenance, and mission support.
Key Responsibilities
Design, deploy, configure, operate, and maintain AWS-based platform services supporting mission-critical Department of War applications and workloads.
Administer Kubernetes clusters and supporting services, including node groups, namespaces, role-based access control, ingress, service discovery, storage, secrets management, network policies, autoscaling, upgrades, and lifecycle maintenance.
Build and maintain repeatable infrastructure configurations using Terraform, AWS CloudFormation, or equivalent approved technologies.
Develop and improve CI/CD pipelines, GitOps workflows, container registries, artifact repositories, automated testing, and deployment controls.
Onboard, configure, deploy, and maintain containerized applications across development, testing, staging, and production environments.
Integrate platform services with DODIN network services, identity and access management, public key infrastructure, logging, monitoring, vulnerability management, endpoint security, and other government enterprise services.
Implement secure platform configurations aligned with approved security baselines, Defense Information Systems Agency Security Technical Implementation Guides (STIGs), Risk Management Framework (RMF) requirements, and Authority to Operate (ATO) conditions.
Monitor platform availability, performance, capacity, security posture, and application health using AWS-native and approved observability tools.
Troubleshoot complex issues involving Linux, containers, Kubernetes, AWS services, networking, DNS, certificates, encryption, load balancing, storage, compute, identity, and application dependencies.
Perform platform patching, vulnerability remediation, configuration management, backup, recovery, and controlled upgrades while minimizing disruption to mission operations.
Collaborate with cybersecurity, network, software, data, systems engineering, and mission teams to resolve dependencies and deliver integrated capabilities.
Maintain platform architecture documentation, configuration standards, operating procedures, runbooks, troubleshooting guides, deployment instructions, and knowledge articles.
Support technical interchange meetings, architecture reviews, release planning, change control, incident response, root-cause analysis, and after-action reviews.
Report platform health, technical risks, security findings, maintenance activities, dependencies, and recommended actions.
Participate in scheduled maintenance and time-sensitive incident response outside normal working hours when mission requirements demand it.
Required Qualifications
Active Secret security clearance.
At least five years of directly relevant experience in platform engineering, cloud engineering, DevSecOps, systems engineering, Linux systems administration, or a related technical field.
Hands-on experience operating, integrating, or maintaining systems connected to DODIN, including familiarity with Department of Defense network access, security, configuration, and operational requirements.
Current Department of Defense 8570-compliant certification appropriate to the assigned information assurance or cybersecurity workforce functions.
Hands-on experience deploying, administering, troubleshooting, and upgrading Kubernetes environments.
Practical experience with AWS infrastructure and services, including compute, networking, storage, identity, security, monitoring, and automation.
Experience administering Linux-based systems and troubleshooting operating system, process, package, file system, permissions, networking, and performance issues.
Experience building, securing, deploying, and operating containers using Docker, Open Container Initiative-compatible technologies, or equivalent tools.
Experience with infrastructure as code, configuration automation, source control, CI/CD pipelines, and repeatable deployment practices.
Working knowledge of enterprise networking concepts, including TCP/IP, routing, firewalls, DNS, load balancing, VPNs, TLS, certificates, and network segmentation.
Working knowledge of Department of Defense cybersecurity and authorization practices, including RMF activities, STIGs, vulnerability management, continuous monitoring, and ATO requirements.
Ability to diagnose complex technical problems independently, coordinate across technical teams, document findings, and drive issues through resolution.
Strong written and verbal communication skills, including the ability to explain technical issues, risks, and recommendations to engineering, cybersecurity, program, and mission stakeholders.
Ability to work effectively remotely, protect government information, maintain reliable connectivity, and travel periodically as required.
Preferred Qualifications
Experience operating Kubernetes on Amazon Elastic Kubernetes Service (EKS) within AWS GovCloud or another Department of Defense-authorized cloud environment.
Experience supporting systems at Department of Defense Impact Level 4, Impact Level 5, or Impact Level 6.
Experience with Terraform, AWS CloudFormation, GitLab, GitHub Actions, Jenkins, Argo CD, Helm, Kustomize, or comparable platform engineering and GitOps tools.
Familiarity with observability technologies such as Amazon CloudWatch, Prometheus, Grafana, OpenSearch, Elastic, Fluent Bit, or comparable logging and monitoring platforms.
Experience with container security, software supply-chain controls, image scanning, software bills of materials, Iron Bank images, or hardened container baselines.
Experience integrating platform services with Common Access Card authentication, Department of Defense public key infrastructure, identity providers, role-based access control, attribute-based access control, or Zero Trust architectures.
Experience with service mesh, secrets management, policy as code, automated compliance, high availability, disaster recovery, or multi-account AWS architectures.
AWS, Certified Kubernetes Administrator, Certified Kubernetes Application Developer, Linux, cybersecurity, or related professional certification.
Previous experience directly supporting a Department of War mission partner, combatant command, military service component, Special Operations Forces organization, or other national security customer.
Location and Work Arrangement
This is a remote position available within the continental United States. The employee must maintain availability during core hours aligned with the mission partner and may be required to travel periodically to government or LMI locations. Scheduled maintenance or urgent incident response may occasionally require work outside normal business hours.
Compensation The target salary range is $135,000–$230,000. This range represents the typical salary range for the position and does not guarantee a specific compensation amount. Individual salaries depend on factors including location, internal equity, business considerations, client contract requirements, education, experience, skills, and security clearances.
Security Clearance and Citizenship
Applicants must meet U.S. Government security clearance eligibility requirements. Only U.S. citizens are eligible for a security clearance. Due to the nature of the work, LMI will consider applicants who already hold a security clearance or are eligible to obtain one.
Equal Employment Opportunity
LMI is an Equal Opportunity Employer committed to fair treatment and equal employment opportunities. The company recruits, hires, trains, and promotes individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law.
Applicants with disabilities who need assistance during the application process may contact LMI for support. Colorado residents may redact age-identifying information, such as age, date of birth, or school attendance and graduation dates, from submitted materials without penalty.