Principal Platform Engineer

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.

The Space and Intelligence Division provides professional services to the US Space Force, Combatant Commands, Intelligence Community, and NASA. Our work includes enterprise architectural assessments, systems engineering and integration, test, planning and execution, cost estimating and analysis, acquisition support, and cybersecurity. We are trusted partners developing approaches and concepts to meet emerging high priority needs, assessing cutting-edge technologies, and supporting capabilities for our National Defense. Come join the fastest growing Division at Systems Planning and Analysis, Inc.!

The Space Systems Group (SSG), part of SPA's Space and Intelligence Division, provides timely and objective assessments and recommendations integrating technical, operational, programmatic, policy and business analysis. We focus on our key clients in the Space community including the US Space Force's Space Systems Command (USSF/SSC), one of the three designated Field Commands under USSF. We work tirelessly to provide integrated solutions based on information and communications throughout the chain of command. We provide clear and consistent analysis and recommendations which are aligned to strategic and leadership goals while balancing the ability to execute on time and on budget within the technical communities. Come join an organization responsible for being a key enabler of Spacepower!

SPA has an immediate need for a Principal Platform Engineer.

SPA is looking for a Principal Platform Engineer to build our Azure cloud platform. We are seeking a technical expert who can excel at being hands-on keyboard while also architecting and delivering a secure, scalable cloud platform supporting space-defense missions. You'll drive the implementation of Microsoft's Azure Landing Zone (ALZ/MLZ) architectures and core Azure services (AKS, AAD, Azure Policy, VNets, Key Vault, Monitor), applying modern DevSecOps and GitOps practices throughout. In close collaboration with other platform engineers, product managers, application teams, cybersecurity, and corporate stakeholders, you'll transform mission needs into resilient, production-grade cloud infrastructure. This is a fully remote position.

Key responsibilities include but are not limited to the following:

Architect and implement an Azure-native foundation using Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows.
• Design and deploy Microsoft Azure Landing Zone (ALZ) and Mission Landing Zone (MLZ) reference architectures to establish a secure, governed, and scalable cloud environment.
• Engineer and operate AKS clusters with integrated service mesh, automated scaling, workload identity, and disaster recovery patterns.
• Develop secure CI/CD pipelines in Azure DevOps or GitHub Actions that integrate SAST/DAST, IaC scanning, image signing, and automated promotion to IL4-IL5 environments.
• Implement observability with Azure Monitor, Log Analytics, Prometheus, Grafana, and OpenTelemetry to track platform health, performance, and cost.
• Enforce Zero-Trust and compliance (NIST 800-53/171, CMMC) using Azure Policy, Defender for Cloud, and automated security controls.
• Document and evolve platform architecture, technical baselines, and implementation roadmaps supporting corporate and user priorities.
• Collaborate cross-functionally with fellow platform engineers, application developers, cybersecurity specialists, product managers, and business stakeholders to enhance platform capabilities and reliability.

About the Must Haves

• U.S. Citizenship
• Bachelor's degree in Computer Science, STEM, Information Systems, or a related technical field
• Minimum 9 years of hands-on experience in cloud engineering and Kubernetes, including minimum 4 years of architecture-level responsibilities and strong implementation skills
• At least one of the following certifications:
  • Azure Solutions Architect Expert
  • AZ 104 - Azure Administrator
  • CKA - Certified Kubernetes Administrator
  • AZ 400 - Azure DevOps Engineer
  • AZ 500 or Security+ - For secure cloud delivery
• Deep expertise in Microsoft Azure, including ALZ/MLZ design and secure enterprise-grade deployments
• Proven experience with AKS, Azure networking, identity, RBAC, policy, and native security services
• Strong IaC skills with Terraform and/or Bicep and scripting in Python, PowerShell, or Bash
• Demonstrated success building CI/CD pipelines using Azure DevOps, GitHub Actions, or Argo CD
• Familiarity with CNCF tooling (Helm, Istio/Linkerd, OPA, Prometheus) and container security best practices
• FinOps or cost optimization expertise for Azure environments

At SPA, we strive to deliver a robust total compensation package that will attract and retain the top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities.

SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commk - ensurate with experience and qualifications, as well as market and business considerations.

Salary pay range: 185k -260k