Senior Platform Engineer with Security Clearance

Overview: Expression is seeking an experienced Senior Platform Engineer to support the National
Telecommunications and Information Administration (NTIA) Federal Spectrum Data Systems (FSDS) program within the U.S. Department of Commerce. The FSDS program supports the modernization of federal spectrum management systems through improved technology, automation, data integration, and interoperability. These systems help NTIA manage federal spectrum use and support essential government missions.

In this role, you will design, build, and operate the shared cloud platforms that engineering teams use to develop, deploy, and run applications, data services, and analytics. You will work across Azure
Commercial, Government, and Secret cloud environments, creating secure, reusable infrastructure and tooling that make delivery more consistent and production systems easier to operate. We’re looking for someone who treats the platform as a product: understand what teams need, build a dependable solution, and improve it based on how it performs in practice.

You should be comfortable making architecture decisions, troubleshooting across the stack, and turning one-off solutions into capabilities other engineers can use.

Location: Washington, DC (3 days/week on-site).

Clearance Requirement: Active Secret clearance or higher is required.

Platform Architecture & Cloud Infrastructure ●​ Design and maintain Azure platform architecture supporting unclassified and classified spectrum management systems. ●​ Build reusable Infrastructure as Code modules and environment templates using Terraform, Bicep, ARM templates, or comparable tools. ●​ Design, configure, and operate Kubernetes platforms, including Azure Kubernetes Service where available and appropriate to the environment. ●​ Establish shared platform services for networking, identity, secrets management, container registries, and configuration management. ●​ Define platform standards that improve consistency, scalability, security, and cost efficiency across development, test, and production.

Developer Enablement & Software Delivery ●​ Build reusable pipeline templates and deployment patterns that integrate with Azure DevOps and support secure, repeatable releases. , ●​ Create documented, automated workflows that help teams provision environments, onboard applications, and deploy changes with appropriate controls. ●​ Standardize artifact management, environment configuration, release approvals, and rollback capabilities across platform-supported applications. ●​ Adapt platform tooling and delivery workflows for restricted environments with limited connectivity and controlled software dependencies. ●​ Work with developers and data engineers to identify delivery bottlenecks, improve tooling, and reduce recurring manual work.

Platform Security & Compliance ●​ Embed applicable Department of Commerce, NTIA, and federal security requirements into platform architecture and reusable infrastructure patterns. ●​ Implement secure configuration baselines, STIGs where required, access controls, and vulnerability management practices across platform services. ●​ Support RMF, ATO, and continuous monitoring activities through architecture documentation, configuration evidence, and remediation tracking. ●​ Partner with security personnel to implement platform guardrails, least-privilege access, secrets protection, and security scanning.

Reliability & Platform Operations ●​ Define and implement monitoring, centralized logging, metrics, and actionable alerts for shared infrastructure and platform services. ●​ Lead troubleshooting of complex platform incidents, support root cause analysis, and implement changes that prevent recurrence. ●​ Design and test backup, recovery, resilience, and high-availability approaches appropriate to system requirements. ●​ Maintain platform architecture diagrams, service documentation, operational runbooks, and lifecycle management plans. ●​ Guide platform upgrades, capacity planning, and production transitions; mentor engineers and communicate technical tradeoffs to stakeholders.

Required Qualifications ●​ Active Secret security clearance or higher is required. ●​ Current CompTIA Security+ certification, or ability to obtain it within 30 days of hire. ●​ Bachelor’s degree in Computer Science, Engineering, or a related field and five or more years of relevant platform, DevOps, or cloud engineering experience, or eight or more years of relevant experience in lieu of a degree. ●​ Hands-on experience designing and operating infrastructure in Azure Commercial and Azure Government. ●​ Experience building reusable delivery workflows and deployment automation using Azure DevOps YAML pipelines or comparable CI/CD tooling. , ●​ Experience delivering and operating infrastructure or platform services in classified or similarly restricted federal environments. ●​ Proficiency with Infrastructure as Code, including developing reusable modules, managing infrastructure changes, and maintaining consistent environments using Terraform, Bicep, or comparable tools. ●​ Strong hands-on experience with Docker, Kubernetes, and Helm, including cluster operations, application deployment, networking, access controls, and troubleshooting. ●​ Strong scripting and automation skills using Python, PowerShell, Bash, or similar languages. ●​ Experience with Git-based version control, pull requests, code reviews, and collaborative management of infrastructure and platform code. ●​ Strong Linux administration skills and working knowledge of cloud networking, identity and access management, secrets management, and observability. ●​ Ability to make sound architecture decisions, troubleshoot complex systems, document reusable solutions, and collaborate with developers, security personnel, and customer stakeholders.

Preferred Qualifications ●​ Experience operating Azure Government Secret platforms or supporting infrastructure with restricted connectivity. ●​ Experience building internal developer platforms, self-service provisioning workflows, reusable deployment patterns, or shared engineering services. ●​ Familiarity with NIST SP 800-53 controls, RMF, ATO processes, and STIG implementation. ●​ Experience integrating platform security tools such as Nessus, SonarQube, Microsoft Defender for Cloud, Aqua Security, or comparable products. ●​ Experience with Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana. ●​ Experience supporting shared database or search services such as SQL Server, PostgreSQL, Elasticsearch, or OpenSearch. ●​ Experience enabling data engineering or machine learning workloads on platforms such as Databricks, Apache Spark, or related technologies. ●​ Experience with GitOps, policy as code, Kubernetes operators, or service mesh technologies; relevant Azure, Kubernetes, or cloud security certifications.

Benefits: Expression offers competitive salaries and benefits, such as: ●​ 401k matching ●​ PPO and HDHP medical/dental/vision insurance ●​ Education reimbursement ●​ Complimentary life insurance ●​ Generous PTO and holiday leave ●​ Onsite office gym access ●​ Commuter Benefits Plan ,About Expression: Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community.

Expression’s culture focuses on creating immediate and sustainable value for our clients via agile delivery of tailored solutions built through constant engagement with our clients. Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest-growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review. We make sure to provide everyone with the tools and opportunities to grow while working on some of the newest technologies in the industry.

We get excited about celebrating our professionals' milestones, accomplishments, promotions, overcoming challenges, and many other aspects that make an engaging collaborative environment.

Equal Opportunity Employer/Veterans/Disabled​
Expression is an

Equal Opportunity Employer. If you require a reasonable accommodation during the application or interview process, please submit your request to our Human Resources department through the application portal.