AECC 2.0 - Platform Network Engineer

This position is for a Platform Network Engineer supporting the Army Edge Computing Capability (AECC)project that ALTESS is fielding for the US Army. The AECC solution is a containerized, Kubernetes-based, multitenant hosting environment for hosting Army enterprise and tactical applications. AECC is utilizing Kubernetes and potentially Red Hat OpenShift to implement a cloud-native, software-defined infrastructure across multiple global sites. ALTESS provides value-added common and managed services built on top of the Kubernetes foundation, which hosted Army applications will require. ALTESS is a managed service provider (MSP) and hosting services provider for Army applications. ALTESS is a Product Lead office under Capability Program Executive (CPE) Enterprise Software and Services (CPE ES2).

Your role and responsibilities

Position Duties for Platform Network Engineer:

• Collaborate with Government engineers to design, develop, and maintain the AECC Kubernetesbased architecture.
• Develop, deploy, and maintain Infrastructure as Code (IaC) to support the deployment and sustainment of the Kubernetes networking architecture within the AECC.
• Use IaC to provision and manage the network foundation for customer namespaces and enclaves as applications are onboarded to the AECC solution.
• Perform daytoday administration of the network, including patching and upgrading Kubernetes networking components (e.g., CNI plugins such as Calico, Cilium, and OpenShift SDN) in coordination with the broader Kubernetes ecosystem.
• Monitor the health and utilization of network resources and proactively notify the AECC Lead of critical issues or anticipated capacity needs.
• Harden network configurations in accordance with cloudnative best practices and required government cybersecurity controls.
• Troubleshoot and perform root cause analysis for hosting platform network issues, including Kubernetes networking and containerized workload connectivity.
• Develop and maintain system, infrastructure, and process documentation, including system diagrams, network topology, Kubernetes and device configurations, and standard operating procedures.
• Provide oncall support for triage and resolution of afterhours production incidents.
• Recommend and implement improvements to network security, scalability, manageability, and performance across AECC Kubernetes network enclaves.

Required education

Bachelor's Degree

Required technical and professional expertise

• Seniorlevel network engineering experience, with a minimum of five (5) years designing, implementing, and troubleshooting enterprise IT infrastructure, with a strong focus on Kubernetes networking, containerized workloads, and platform configurations.
• Experience with underlay and overlay networking technologies, including VXLAN, GENEVE, and SDWAN, as well as outofcluster switching and firewall platforms such as Cisco NXOS and Palo Alto NGFW.
• Experience with network automation and tooling, including Ansible and Terraform, along with scripting languages such as Python and Bash; familiarity with packet capture analysis, mTLS, service mesh technologies, and routing protocols.
• Strong knowledge of Kubernetes network design, deployment, and management concepts, including Container Network Interface (CNI) plugins (e.g., Calico, Cilium, OpenShift SDN), service discovery, ingress controllers, network policies, and Kubernetes DNS management.
• Security+ or equivalent DoD 8570.01M Information Assurance Technical Level II certification.
• Must hold and maintain an active DoD Secret Security Clearance
• Must possess, or obtain within six (6) months of hire, a Computing Environment certification in a related field, including one or more of the following:
  • Networkfocused certifications such as Cisco (DCNX) or Palo Alto (PCNSE, PCCSE, NGFW)
  • Certified Kubernetes Administrator (CKA)
  • Red Hat Certified Specialist in OpenShift Administration
  • Certified Kubernetes Security Specialist (CKS)
  • Other equivalent Kubernetes or container networking certifications

Preferred technical and professional experience

• Working knowledge of DoD Security Technical Implementation Guides (STIGs) and the Information Assurance Vulnerability Management (IAVM) process, and/or industrystandard system hardening best practices.
• Familiarity with Kubernetesbased platforms, including Red Hat OpenShift, Rancher, or upstream (vanilla) Kubernetes.
• Demonstrated expertise with automation and Infrastructure as Code (IaC) concepts and practices.