Job Requirements
Remote Washington, DC
Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Overview:
Expression is seeking an experienced Senior Platform Engineer to support the National
Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS)
program within the U.S. Department of Commerce.
The FSDS program supports the modernization of federal spectrum management systems through
improved technology, automation, data integration, and interoperability. These systems help NTIA
manage federal spectrum use and support essential government missions.
In this role, you will design, build, and operate the shared cloud platforms that engineering teams use
to develop, deploy, and run applications, data services, and analytics. You will work across Azure
Commercial, Government, and Secret cloud environments, creating secure, reusable infrastructure
and tooling that make delivery more consistent and production systems easier to operate.
We’re looking for someone who treats the platform as a product: understand what teams need, build
a dependable solution, and improve it based on how it performs in practice. You should be
comfortable making architecture decisions, troubleshooting across the stack, and turning one-off
solutions into capabilities other engineers can use.
Location: Washington, DC (3 days/week on-site).
Clearance Requirement: Active Secret clearance or higher is required.
Platform Architecture & Cloud Infrastructure
● Design and maintain Azure platform architecture supporting unclassified and classified
spectrum management systems.
● Build reusable Infrastructure as Code modules and environment templates using Terraform,
Bicep, ARM templates, or comparable tools.
● Design, configure, and operate Kubernetes platforms, including Azure Kubernetes Service
where available and appropriate to the environment.
● Establish shared platform services for networking, identity, secrets management, container
registries, and configuration management.
● Define platform standards that improve consistency, scalability, security, and cost efficiency
across development, test, and production.
Developer Enablement & Software Delivery
● Build reusable pipeline templates and deployment patterns that integrate with Azure DevOps
and support secure, repeatable releases.
, ● Create documented, automated workflows that help teams provision environments, onboard
applications, and deploy changes with appropriate controls.
● Standardize artifact management, environment configuration, release approvals, and rollback
capabilities across platform-supported applications.
● Adapt platform tooling and delivery workflows for restricted environments with limited
connectivity and controlled software dependencies.
● Work with developers and data engineers to identify delivery bottlenecks, improve tooling,
and reduce recurring manual work.
Platform Security & Compliance
● Embed applicable Department of Commerce, NTIA, and federal security requirements into
platform architecture and reusable infrastructure patterns.
● Implement secure configuration baselines, STIGs where required, access controls, and
vulnerability management practices across platform services.
● Support RMF, ATO, and continuous monitoring activities through architecture documentation,
configuration evidence, and remediation tracking.
● Partner with security personnel to implement platform guardrails, least-privilege access,
secrets protection, and security scanning.
Reliability & Platform Operations
● Define and implement monitoring, centralized logging, metrics, and actionable alerts for
shared infrastructure and platform services.
● Lead troubleshooting of complex platform incidents, support root cause analysis, and
implement changes that prevent recurrence.
● Design and test backup, recovery, resilience, and high-availability approaches appropriate to
system requirements.
● Maintain platform architecture diagrams, service documentation, operational runbooks, and
lifecycle management plans.
● Guide platform upgrades, capacity planning, and production transitions; mentor engineers
and communicate technical tradeoffs to stakeholders.
Required Qualifications
● Active Secret security clearance or higher is required.
● Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
● Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years
of relevant platform, DevOps, or cloud engineering experience, or eight or more years of
relevant experience in lieu of a degree.
● Hands-on experience designing and operating infrastructure in Azure Commercial and Azure
Government.
● Experience building reusable delivery workflows and deployment automation using Azure
DevOps YAML pipelines or comparable CI/CD tooling.
, ● Experience delivering and operating infrastructure or platform services in classified or
similarly restricted federal environments.
● Proficiency with Infrastructure as Code, including developing reusable modules, managing
infrastructure changes, and maintaining consistent environments using Terraform, Bicep, or
comparable tools.
● Strong hands-on experience with Docker, Kubernetes, and Helm, including cluster
operations, application deployment, networking, access controls, and troubleshooting.
● Strong scripting and automation skills using Python, PowerShell, Bash, or similar languages.
● Experience with Git-based version control, pull requests, code reviews, and collaborative
management of infrastructure and platform code.
● Strong Linux administration skills and working knowledge of cloud networking, identity and
access management, secrets management, and observability.
● Ability to make sound architecture decisions, troubleshoot complex systems, document
reusable solutions, and collaborate with developers, security personnel, and customer
stakeholders.
Preferred Qualifications
● Experience operating Azure Government Secret platforms or supporting infrastructure with
restricted connectivity.
● Experience building internal developer platforms, self-service provisioning workflows,
reusable deployment patterns, or shared engineering services.
● Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
● Experience integrating platform security tools such as Nessus, SonarQube, Microsoft
Defender for Cloud, Aqua Security, or comparable products.
● Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
● Experience supporting shared database or search services such as SQL Server, PostgreSQL,
Elasticsearch, or OpenSearch.
● Experience enabling data engineering or machine learning workloads on platforms such as
Databricks, Apache Spark, or related technologies.
● Experience with GitOps, policy as code, Kubernetes operators, or service mesh technologies;
relevant Azure, Kubernetes, or cloud security certifications.
Benefits:
Expression offers competitive salaries and benefits, such as:
● 401k matching
● PPO and HDHP medical/dental/vision insurance
● Education reimbursement
● Complimentary life insurance
● Generous PTO and holiday leave
● Onsite office gym access
● Commuter Benefits Plan
,About Expression:
Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data
analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum
management solutions to the U.S. Department of Defense, Department of State, and national
security community. Expression’s culture focuses on creating immediate and sustainable value for
our clients via agile delivery of tailored solutions built through constant engagement with our clients.
Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest-growing
small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.
We make sure to provide everyone with the tools and opportunities to grow while working on some
of the newest technologies in the industry. We get excited about celebrating our professionals'
milestones, accomplishments, promotions, overcoming challenges, and many other aspects that
make an engaging collaborative environment.
Equal Opportunity Employer/Veterans/Disabled
Expression is an Equal Opportunity Employer. If you require a reasonable accommodation during the
application or interview process, please submit your request to our Human Resources department
through the application portal.
Expression is seeking an experienced Senior Platform Engineer to support the National
Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS)
program within the U.S. Department of Commerce.
The FSDS program supports the modernization of federal spectrum management systems through
improved technology, automation, data integration, and interoperability. These systems help NTIA
manage federal spectrum use and support essential government missions.
In this role, you will design, build, and operate the shared cloud platforms that engineering teams use
to develop, deploy, and run applications, data services, and analytics. You will work across Azure
Commercial, Government, and Secret cloud environments, creating secure, reusable infrastructure
and tooling that make delivery more consistent and production systems easier to operate.
We’re looking for someone who treats the platform as a product: understand what teams need, build
a dependable solution, and improve it based on how it performs in practice. You should be
comfortable making architecture decisions, troubleshooting across the stack, and turning one-off
solutions into capabilities other engineers can use.
Location: Washington, DC (3 days/week on-site).
Clearance Requirement: Active Secret clearance or higher is required.
Platform Architecture & Cloud Infrastructure
● Design and maintain Azure platform architecture supporting unclassified and classified
spectrum management systems.
● Build reusable Infrastructure as Code modules and environment templates using Terraform,
Bicep, ARM templates, or comparable tools.
● Design, configure, and operate Kubernetes platforms, including Azure Kubernetes Service
where available and appropriate to the environment.
● Establish shared platform services for networking, identity, secrets management, container
registries, and configuration management.
● Define platform standards that improve consistency, scalability, security, and cost efficiency
across development, test, and production.
Developer Enablement & Software Delivery
● Build reusable pipeline templates and deployment patterns that integrate with Azure DevOps
and support secure, repeatable releases.
, ● Create documented, automated workflows that help teams provision environments, onboard
applications, and deploy changes with appropriate controls.
● Standardize artifact management, environment configuration, release approvals, and rollback
capabilities across platform-supported applications.
● Adapt platform tooling and delivery workflows for restricted environments with limited
connectivity and controlled software dependencies.
● Work with developers and data engineers to identify delivery bottlenecks, improve tooling,
and reduce recurring manual work.
Platform Security & Compliance
● Embed applicable Department of Commerce, NTIA, and federal security requirements into
platform architecture and reusable infrastructure patterns.
● Implement secure configuration baselines, STIGs where required, access controls, and
vulnerability management practices across platform services.
● Support RMF, ATO, and continuous monitoring activities through architecture documentation,
configuration evidence, and remediation tracking.
● Partner with security personnel to implement platform guardrails, least-privilege access,
secrets protection, and security scanning.
Reliability & Platform Operations
● Define and implement monitoring, centralized logging, metrics, and actionable alerts for
shared infrastructure and platform services.
● Lead troubleshooting of complex platform incidents, support root cause analysis, and
implement changes that prevent recurrence.
● Design and test backup, recovery, resilience, and high-availability approaches appropriate to
system requirements.
● Maintain platform architecture diagrams, service documentation, operational runbooks, and
lifecycle management plans.
● Guide platform upgrades, capacity planning, and production transitions; mentor engineers
and communicate technical tradeoffs to stakeholders.
Required Qualifications
● Active Secret security clearance or higher is required.
● Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire.
● Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years
of relevant platform, DevOps, or cloud engineering experience, or eight or more years of
relevant experience in lieu of a degree.
● Hands-on experience designing and operating infrastructure in Azure Commercial and Azure
Government.
● Experience building reusable delivery workflows and deployment automation using Azure
DevOps YAML pipelines or comparable CI/CD tooling.
, ● Experience delivering and operating infrastructure or platform services in classified or
similarly restricted federal environments.
● Proficiency with Infrastructure as Code, including developing reusable modules, managing
infrastructure changes, and maintaining consistent environments using Terraform, Bicep, or
comparable tools.
● Strong hands-on experience with Docker, Kubernetes, and Helm, including cluster
operations, application deployment, networking, access controls, and troubleshooting.
● Strong scripting and automation skills using Python, PowerShell, Bash, or similar languages.
● Experience with Git-based version control, pull requests, code reviews, and collaborative
management of infrastructure and platform code.
● Strong Linux administration skills and working knowledge of cloud networking, identity and
access management, secrets management, and observability.
● Ability to make sound architecture decisions, troubleshoot complex systems, document
reusable solutions, and collaborate with developers, security personnel, and customer
stakeholders.
Preferred Qualifications
● Experience operating Azure Government Secret platforms or supporting infrastructure with
restricted connectivity.
● Experience building internal developer platforms, self-service provisioning workflows,
reusable deployment patterns, or shared engineering services.
● Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation.
● Experience integrating platform security tools such as Nessus, SonarQube, Microsoft
Defender for Cloud, Aqua Security, or comparable products.
● Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana.
● Experience supporting shared database or search services such as SQL Server, PostgreSQL,
Elasticsearch, or OpenSearch.
● Experience enabling data engineering or machine learning workloads on platforms such as
Databricks, Apache Spark, or related technologies.
● Experience with GitOps, policy as code, Kubernetes operators, or service mesh technologies;
relevant Azure, Kubernetes, or cloud security certifications.
Benefits:
Expression offers competitive salaries and benefits, such as:
● 401k matching
● PPO and HDHP medical/dental/vision insurance
● Education reimbursement
● Complimentary life insurance
● Generous PTO and holiday leave
● Onsite office gym access
● Commuter Benefits Plan
,About Expression:
Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data
analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum
management solutions to the U.S. Department of Defense, Department of State, and national
security community. Expression’s culture focuses on creating immediate and sustainable value for
our clients via agile delivery of tailored solutions built through constant engagement with our clients.
Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest-growing
small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.
We make sure to provide everyone with the tools and opportunities to grow while working on some
of the newest technologies in the industry. We get excited about celebrating our professionals'
milestones, accomplishments, promotions, overcoming challenges, and many other aspects that
make an engaging collaborative environment.
Equal Opportunity Employer/Veterans/Disabled
Expression is an Equal Opportunity Employer. If you require a reasonable accommodation during the
application or interview process, please submit your request to our Human Resources department
through the application portal.
group id: 10196618