Principal K8 Platform Engineer

Overview

Ask Sage (BigBearAI Company) is the leading Generative AI platform that augments the velocity of government and commercial teams with dozens of use cases from coding to cybersecurity to acquisition to data analysis and much more. Our FedRAMP High and DoD IL5 accredited cutting‑edge technology enables teams to focus on strategic initiatives while we take care of the heavy lifting. We are seeking a highly skilled and experienced Principal Kubernetes Platform Engineer.

This critical role involves privileged access to our cloud instances, Kubernetes clusters, and supporting platform services, including environments operating under FedRAMP High and Department of Defense requirements. The Principal Kubernetes Platform Engineer (Multi‑Cloud) will be accountable for the reliability, security, scalability, and operational excellence of our Kubernetes estate across Azure Government (AKS), AWS (EKS), and Google Cloud (GKE) as needed.

You will serve as the organization’s technical authority for Kubernetes administration and platform engineering, setting standards for cluster architecture, network policy, identity and access, workload isolation, secrets management, observability, release engineering, and incident response. The ideal candidate combines deep hands‑on Kubernetes expertise with disciplined operational execution, strong security instincts, and the ability to automate everything (Git Ops/Infrastructure‑as‑Code) while partnering effectively with security, engineering, and leadership.

As a key member of our team, you will improve platform uptime, reduce operational toil, accelerate delivery, and ensure our container platform remains compliant and defensible under audit.

Key Responsibilities:

• Own day‑to‑day and strategic administration of Kubernetes clusters across multiple cloud environments (AKS/EKS/GKE), including Azure Government enclaves where applicable.
• Design, build, secure, and operate highly available Kubernetes platform architectures (multi‑zone, upgrade‑safe, disaster recovery‑ready).
• Establish and enforce cluster standards: name spaces/tenancy, RBAC, Pod Security standards, admission control, network segmentation, and workload isolation.
• Implement and maintain end‑to‑end platform security controls: image provenance, vulnerability management, runtime protection, secrets management, and certificate lifecycle.
• Build and mature Git Ops/CI/CD patterns for Kubernetes (e.g., Flux/Argo), ensuring reliable, repeatable deployments with strong auditability.
• Manage Kubernetes lifecycle operations: version upgrades, node pool strategy, capacity planning, add‑on management, and cluster hardening.
• Define and operate observability for clusters and workloads: logging, metrics, traces, alerting, SLOs/SLIs, and actionable runbooks.
• Proactively ensure the highest levels of platform availability and performance; lead root‑cause analysis and drive permanent corrective actions.
• Maintain security, backup, and redundancy strategies for etcd (where applicable), persistent storage, cluster state, and critical platform services.
• Secure and maintain the stack to fix cybersecurity vulnerabilities, CVEs, misconfigurations, and supply‑chain risks; coordinate remediation timelines with stakeholders.
• Provide 2nd and 3rd level support for Kubernetes and containerized workloads, including incident response participation and on‑call support as required.
• Partner with application teams to set best practices for containerization, resource requests/limits, health probes, service discovery, ingress, and release safety.
• Develop and maintain automation to reduce manual intervention (IaC, policy‑as‑code, auto‑remediation, self‑service workflows, and automated compliance evidence).
• Liaise with cloud vendors and internal stakeholders for platform problem resolution and architectural guidance.
• Maintain our environment to comply with FedRAMP High requirements and support regular reporting and audit evidence collection.
• Uphold and enforce Ask Sage’s compliance, privacy, and security policies, ensuring adherence to all relevant regulations and standards.
• Conduct regular audits of Kubernetes configurations and platform…