Lead Cloud Platform Engineer

Modern Technology Solutions, Inc. (MTSI) is hiring a Lead Cloud Platform Engineer to work in Springfield, VA or St. Louis, MO.

Responsibilities

• Be instrumental in building NGA’s EA Digital Twin capability, modeling the future-state enterprise and delivering the unified Digital Engineering environment the IC and DoW have sought for years.
• Operate at the strategic level while remaining deeply technical, becoming a critical force multiplier for the Chief Architect and for NGA’s Digital Transformation journey.
• Lead the architecture, deployment, and sustainment of the Cloud Native Platform (CNP) powering Model-Based Systems Engineering (MBSE), enterprise data integration, Digital Threads, and future Digital Twin operations.
• Build and mature a secure, federated, multi-cloud platform that enables enterprise-scale Digital Engineering workflows, authoritative data synchronization, and Zero Trust enforcement across multiple enclaves.
• Serve as the technical authority for NGA’s CNP, responsible for designing, hardening, deploying, and operating the hybrid, multi-cloud platform foundational to the DEE.
• Integrate cloud native infrastructure, Kubernetes orchestration, identity and access services, telemetry pipelines, DevSecOps automation, and platform governance to support enterprise modeling, data fabric, and Digital Thread execution.
• Lead a small but highly skilled team of cloud/platform engineers and collaborate tightly with MBSE leads, data engineers, cyber, enterprise architects, and mission area stakeholders to deliver a secure, scalable, and resilient DEE platform.
• Platform Architecture Leadership: Own the design, implementation, and evolution of the Cloud Native Platform (CNP), enabling secure, scalable, multi-cloud operations across AWS, Azure, on-prem, and classified enclaves.
• Kubernetes & Multi-Cloud Engineering: Deploy, harden, and operate Kubernetes environments, service mesh, GitOps, and OTEL stacks to ensure reliable, governed platform execution.
• Identity, Access & Zero Trust Enforcement: Implement and manage identity federation, enforce Zero Trust policies, manage secrets, certificates, hardened containers (IronBank), and Policy as Code (PaC).
• DevSecOps & Automation: Lead CI/CD, Infrastructure as Code (IaC), and Configuration as Code (CaC) pipelines, platform automation, onboarding workflows, and environment lifecycle management.
• Platform Operations & Resilience: Deliver high availability, scalability, monitoring/observability, cost optimization, license management, and environment reliability across multiple enclaves and mission threads.
• Integration with Enterprise Architecture, Data & MBSE: Work closely with MBSE, data fabric, and EA teams to ensure platform services support Digital Threads, automated data pipelines, authoritative data stores, and model-driven execution.
• Security & Accreditation: Partner with ISSO/cyber engineers to enforce JSIG PL3/PL4 compliance, CSfC guidance, enclave boundary controls, OTEL, security, patching, and ongoing accreditation workflows.
• Stakeholder & Vendor Coordination: Collaborate with cross-agency stakeholders, provide technical direction to vendors, resolve integration issues, and drive platform capabilities toward enterprise-level interoperability.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field; and 8+ years in cloud/platform engineering.
• 5+ years’ experience leading cloud native platform development and operations.
• Deep experience with Kubernetes orchestration and associated tech stack including service mesh, GitOps, and multi-cloud operations.
• Hands-on experience with IaC/CaC (Terraform, Helm, Dockerfiles), CI/CD (GitLab), and automation pipelines.
• Strong understanding of Zero Trust architectures, identity federation, secrets management, certificate services, and policy-as-code.
• Experience operating secure cloud-native environments in classified or high-compliance settings.
• Experience working on Scrum or Agile development teams.
• Must be a U.S. citizen with an active TS/SCI clearance and be eligible to obtain a CI Poly.

Qualifications

• DoD Compliance: Desired to meet DoD 8140/8570 requirements for an IAM Level III position (ISC2 CISSP or equivalent).
• Experience with Azure Gov, AWS GovCloud, on-prem Kubernetes (e.g., RKE2, NKP), and air-gap management.
• Familiarity with observability stacks (Grafana, Prometheus, OpenTelemetry), hardened container repositories, and license servers (FlexLM).
• Experience integrating platform capabilities with enterprise data fabrics, Digital Threads, or MBSE environments.
• Experience collaborating with data engineers, MBSE teams, and enterprise architects.
• Background supporting DevSecOps in DoD, IC, or large-scale engineering ecosystems.
• Strong ability to guide roadmap development, platform governance, and enterprise onboarding processes.