Kubernetes · Defense

Kubernetes Platform Engineering for Defense Programs

Self-service Kubernetes for program teams, on AWS GovCloud (US), AWS, Azure and OpenShift.

Our engineers build Kubernetes platforms that application teams can use on their own, inside the guardrails a DoW program needs. Clusters, pipelines, policy and monitoring come from code, so every environment is repeatable and reviewable.

What We Build

  • Platform foundations: Amazon EKS, Azure Kubernetes Service and Red Hat OpenShift clusters defined in Terraform and managed with GitOps.

  • Shared and on-demand clusters: long-lived shared-services clusters plus clusters provisioned per event or test, then removed cleanly.

  • Guardrails as code: admission policy, scoped access, quotas and secrets handled by the platform instead of a checklist.

  • Workload identity and mutual TLS: a service mesh securing traffic between services and clusters, aligned with Zero Trust.

  • Day-two operations: monitoring, alerting, upgrades and incident response, with service-level objectives the program agrees to.

Kubernetes on AWS GovCloud (US)

Many DoW workloads run in AWS GovCloud (US). The patterns match commercial regions, but service availability, endpoints, image sources and approvals differ. We keep those differences in infrastructure code, so moving a platform between accounts or regions is a reviewed change, not a rebuild.

We also build platforms designed to move between cloud, private cloud and local environments when a program needs to. Read more about our cloud and platform engineering work.

Where Our Engineers Have Done This

On the U.S. Army’s Next Generation Constructive program, via GDMS, our engineers help run a platform-services cluster for shared simulation services and exercise-specific clusters provisioned on demand on ECMA / cArmy. On the Synthetic Training Environment, via CESI, they supported an OpenShift migration with Kafka metrics and Grafana dashboards. See program experience.

How We Approach Platform Engineering on Kubernetes

We treat the platform as a product with a paved path: a team asks for an environment and gets a namespace, pipeline, database and policy in one reviewed change. Our article on Kubernetes platform engineering for government programs goes into the details.

Frequently Asked Questions

Do you build Kubernetes platforms in AWS GovCloud (US)?

Yes. Our engineers build and operate Kubernetes platforms on AWS, AWS GovCloud (US) and Azure, and on OpenShift in program-controlled environments.

Which Kubernetes distributions do you work with?

Amazon EKS, Azure Kubernetes Service and Red Hat OpenShift, managed with Terraform, Ansible and GitOps.

Can you work inside a platform the program already runs?

Yes. Most of our work is program-embedded, under the program’s own release process, tools and rules.

How do we bring Thazen in?

Order through MDA SHIELD, use a HUBZone set-aside, or add Thazen to your team as a subcontractor. Thazen is an SBA Certified HUBZone Small Business.

Need a Kubernetes Platform Your Teams Can Use?

Tell us about the environment, the workloads and the timeline.