Senior Platform Engineer

Job Scope

• Design, build, and operate cloud and Kubernetes platform capabilities: cluster provisioning, upgrade strategy, RBAC/IAM, quota and cost governance, high availability, and disaster recovery.
• Build developer-facing platform products and self-service workflows in Go and/or Python, including APIs, CLI tools, operators/controllers, and automation that make the right operational path easy to use.
• Evolve our delivery platform: Infrastructure-as-Code, GitOps-based deployment (Argo CD / Flux), environment management, and progressive delivery such as canary and blue-green rollout.
• Embed security into the platform and delivery path: SAST/DAST, dependency and container scanning, secrets management, image signing, admission policies, and policy-as-code—making the secure path the default path for developers.
• Design and troubleshoot network and runtime foundations: CNI, network policies, DNS, TLS, L4/L7 load balancing, service mesh, and east-west traffic control across cloud or hybrid environments.
• Build and operate observability for platform components: metrics, logging, tracing, SLOs, and actionable alerting.
• Partner with product and engineering teams to understand platform needs, improve developer experience, and evolve the platform beyond its current DevSecOps focus.
• Participate in a reasonable on-call rotation, lead blameless post-incident reviews, and drive corrective actions to closure.
• Mentor engineers and help establish engineering standards for the platform team.

Job Requirement

• 5+ years of experience in software, backend, infrastructure, or platform engineering, with demonstrated experience building and operating production systems.
• Strong programming ability in Go or Python—you write maintainable production code, not just scripts.
• Hands-on production experience with Kubernetes and cloud infrastructure. You understand Kubernetes beyond daily use, including API machinery, controllers, scheduling, and the operational trade-offs behind reliable multi-tenant platforms.
• Solid TCP/IP and Linux fundamentals: routing, subnetting, NAT, DNS, TLS, L4 vs L7 proxying, namespaces, cgroups, systemd, and the Linux networking stack. You can use tools such as tcpdump to reason about a connection from SYN to FIN.
• Experience designing or operating CI/CD, Infrastructure-as-Code (Terraform or equivalent), and production deployment workflows.
• Practical DevSecOps experience: integrating security tooling such as SAST, SCA, image scanning, secrets detection, and policy-as-code (OPA/Kyverno or equivalent) into engineering workflows.
• A product mindset for internal platforms: you can turn complex infrastructure capabilities into reliable, usable interfaces for other engineers.
• Clear communication and sound incident-management judgement.