The Senior Platform Engineer will own and administer critical infrastructure, ensuring continuous compliance with federal requirements such as NIST 800-53 and CMMC. Responsibilities include hardening GitHub Enterprise, managing AWS GovCloud environments, and maintaining infrastructure-as-code using Terraform.
Senior Platform Engineer
BAM is a dynamic, multi-disciplinary firm with leading-edge skills in information technology, software development and applied research. Serving government and commercial markets, BAM is committed to its customers and to delivering strong leadership, sound solutions, and innovative thinking. BAM is seeking a hands-on Senior Platform Engineer to own and administer a critical part of our infrastructure and keep it continuously compliant with federal requirements.
Responsibilities
Administer and harden our GitHub Enterprise Server baseline: org/repo policies, SSO/SCIM, audit logging, branch protections, secret scanning, and access controls.
Own the AWS GovCloud (US) infrastructure supporting our regulated services and integrations with Microsoft 365 GCC High, with deep ownership of Amazon EKS / Kubernetes.
Maintain and extend our existing Terraform modules and build new ones as the environment evolves.
Apply security-by-design across identity, networking, encryption, and secrets management.
Continuously validate and remediate the environment against its applicable federal requirements and IL4+ security baseline, including NIST 800-53, CMMC, FedRAMP-aligned controls, and relevant DISA STIGs, while maintaining supporting evidence and documentation.
Maintain policy-as-code guardrails to automatically enforce CMMC and other compliance rules across our Terraform-managed infrastructure.
Monitor, patch, and improve reliability of the platform through strong automation and operational best practices.
Respond to and remediate audit findings and vulnerability scan results in a timely manner.
Qualifications To excel in this role, candidates should possess the following:
7+ years in Platform/Cloud Infrastructure Engineering, DevOps, or SRE, with hands-on ownership (not just oversight) of production environments.
Experience administering GitHub Enterprise (or a comparable enterprise SCM platform) at an organizational level.
Expert-level Kubernetes/EKS and expert-level Terraform.
Strong AWS experience and solid cloud security fundamentals.
Direct experience supporting GCC High, GovCloud, or other regulated/government-compliant environments.
Ability to obtain a security clearance if needed
Must be US citizen
Preferred Skills
Experience with AWS GovCloud (US); Azure Government / Microsoft 365 GCC High a plus.
Experience implementing policy-as-code (e.g., OPA, Sentinel, Checkov, or similar) to enforce compliance guardrails.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
