Everforth ECS is seeking a Senior Runtime/Config Management Engineer to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax. Please Note: This position is contingent upon contract award.
The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
The Senior Runtime/Config Management Engineer architects and governs the configuration management and runtime parameterization infrastructure underpinning AI and machine learning model-serving operations across WDP's full multi-enclave environment, spanning Unclassified/NIPRNet, Secret/SIPRNet, and Top Secret/JWICS. This role is essential to maintaining deterministic model behavior, deployment reliability, and mission assurance across complex cross-domain release sequences in direct support of DoW operational objectives N/A +1 .
• Architects, operates, and governs configuration management and runtime parameterization supporting AI and machine learning model serving across Unclassified, Secret, and Top Secret enclaves within the War Data Platform (WDP) Core Integration enterprise.
• Establishes hardened configuration baselines, promotion parameters, runtime flags, and safe default operational states to maintain reliability, readiness, and mission assurance for model deployment activities supporting Combatant Commands, Joint Staff elements, Senior Executive Service leaders, and cross-agency analysts.
• Maintains configuration hygiene across enclaves by validating environment parity, resolving enclave-specific constraints, and integrating secure configuration controls aligned with DoW cybersecurity policies, cross-domain transfer requirements, Zero Trust directives, and NIST-derived operational safeguards.
• Integrates configuration logic into scanning pipelines, packaging workflows, model deployment runtimes, and serving endpoints to strengthen deterministic behavior and operational predictability during multi-domain promotions.
• Implements version-controlled configuration artifacts, automated validation routines, and runtime consistency checks within existing DevSecOps toolchains, container orchestration platforms, secrets management systems, and service mesh frameworks supporting enclave operations.
• Collaborates with model-serving engineers, pipeline teams, external integration engineers, cybersecurity personnel, and platform architects to synchronize configuration updates with test and evaluation gates, API exposure patterns, and cross-domain release sequencing.
• Produces configuration specifications, enclave compatibility matrices, change-control inputs, operational runbooks, and remediation reports that advance reliability, accelerate deployment cycles, and strengthen WDP Core Integration model-serving resilience across all networks.
• Performs other duties as assigned.
• Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI).
• 10 or more years of progressive experience in systems or platform engineering, with demonstrated expertise in configuration management, runtime parameterization, and secure baseline governance for AI/ML model-serving environments in classified or federal government cloud contexts.
• Hands-on experience implementing and maintaining version-controlled configuration management frameworks within DevSecOps pipelines and container orchestration platforms such as Kubernetes, Helm, or equivalent tooling, including integration with secrets management systems and service mesh architectures across multi-enclave environments.
• Demonstrated experience operating within DoW or federal government cybersecurity compliance frameworks, including NIST 800-53 security controls, Zero Trust Architecture principles, and Risk Management Framework (RMF) requirements as they apply to configuration governance, cross-domain release sequencing, and enclave-specific operational safeguards.
• CompTIA A+ certification or equivalent, demonstrating validated foundational knowledge of IT systems, hardware, software, and operational support practices.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).
Skills Required
- 10 or more years of progressive experience in systems or platform engineering
- Hands-on experience implementing and maintaining version-controlled configuration management frameworks
- Demonstrated experience operating within DoW or federal government cybersecurity compliance frameworks
- Current Secret security clearance with ability to obtain Top Secret
- CompTIA A+ certification or equivalent
- Strong problem-solving and decision-making capabilities
- Highly developed interpersonal and communication skills
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
