DevOps/Senior Platform Engineer

Role Overview

We are looking for a Senior Platform Engineer to design, build, and operate cloud infrastructure and internal developer platforms. The role focuses on improving infrastructure reliability, scalability, security, and cost efficiency while enabling engineering teams to deliver software through standardized, automated, and self-service workflows.

The engineer will drive cloud infrastructure modernization, establish Site Reliability Engineering (SRE) practices, develop reusable infrastructure components, and improve developer experience through internal platforms and standardized delivery workflows. The position combines hands-on engineering with technical leadership, cross-team collaboration, and mentoring.

Responsibilities

Cloud Infrastructure & Infrastructure as Code

• Modernize and manage AWS and Azure infrastructure using OpenTofu/Terraform and Ansible.
• Establish infrastructure-as-code standards, reusable modules, remote state management, and GitOps-based infrastructure deployment workflows.
• Audit cloud environments against AWS and Azure Well-Architected Frameworks and drive improvements across networking, identity and access management, account structure, landing zones, security, and cost governance.
• Implement policy-as-code and cloud governance controls using OPA/Conftest, AWS Service Control Policies (SCPs), and Azure Policy.
• Develop reusable infrastructure components for compute, networking, storage, databases, and identity.
• Establish FinOps practices covering resource tagging, cost allocation, rightsizing, and reserved capacity planning.

SRE & Observability

• Design and maintain observability solutions covering metrics, logs, traces, dashboards, and application performance monitoring.
• Define Service Level Indicators (SLIs) and Service Level Objectives (SLOs), and implement error budget tracking and burn-rate alerting.
• Establish SRE practices, including incident runbooks, post-incident reviews, and chaos engineering exercises.
• Collaborate with engineering teams to improve service instrumentation, alert quality, operational visibility, and reliability.
• Develop compute and storage capacity planning models to support infrastructure scaling decisions.

Internal Developer Platform & Developer Experience

• Deploy and operate an internal developer portal, such as Backstage, providing a service catalog, scaffolding templates, runbooks, API documentation, and service ownership information.
• Build and maintain standardized developer workflows (golden paths) for service creation, Kubernetes deployments, database provisioning, secrets management, and CI/CD setup.
• Develop self-service provisioning capabilities that allow engineering teams to deploy approved infrastructure resources through automated workflows.
• Own the CI/CD platform layer, including reusable pipeline templates, workflow libraries, container image build and scanning, and environment promotion processes.
• Improve developer workflows through security integration, standardized defaults, feedback collection, and continuous platform improvements.

Kubernetes & Security

• Manage Kubernetes platform operations across Amazon EKS and/or Azure AKS, including cluster lifecycle, Helm standards, admission controllers, RBAC, and network policies.
• Support service mesh implementations using technologies such as Istio or Linkerd.
• Integrate security into infrastructure and delivery workflows through IaC scanning, secrets management, access controls, and container image hardening.
• Support workload migrations to the platform, providing practical engineering assistance to development teams.

Technical Leadership & Collaboration

• Document platform architecture, technical decisions, operational procedures, and runbooks.
• Participate in architecture reviews and build-versus-buy decisions.
• Collaborate with engineering teams on infrastructure adoption, workload migrations, and platform improvements.
• Mentor junior engineers and promote consistent engineering, security, and operational practices.

Technologies & Tools

• Cloud Platforms: AWS, Microsoft Azure
• Infrastructure as Code & Automation: OpenTofu, Terraform, Ansible
• Cloud Governance: OPA/Conftest, AWS SCPs, Azure Policy, FinOps practices
• Kubernetes & Containers: EKS, AKS, EC2, Helm, Istio, Linkerd
• SRE & Observability: Prometheus, Datadog, Loki, OpenSearch, Tempo, Grafana, OpenTelemetry, AWS Fault Injection Simulator
• Internal Developer Platforms: Backstage, service catalogs, scaffolding, self-service provisioning, golden paths
• CI/CD & DevOps: GitHub Actions, GitLab CI, GitOps, automated deployments, SAST, Snyk
• Security: Checkov, tfsec, Vault, AWS Secrets Manager, Azure Key Vault, RBAC, container image hardening

Requirements

• Senior-level experience in platform engineering, cloud infrastructure, DevOps, or SRE.
• Strong experience with AWS and/or Azure cloud environments.
• Practical experience with Terraform/OpenTofu and infrastructure automation.
• Experience with Kubernetes and containerized workloads.
• Knowledge of CI/CD, GitOps, and automated infrastructure provisioning.
• Experience implementing observability, reliability, and incident management practices.
• Understanding of cloud security, access management, policy enforcement, and infrastructure governance.
• Experience improving developer workflows through reusable platform components or self-service capabilities.
• Understanding of cloud cost optimization and FinOps principles.
• Strong collaboration, technical documentation, and mentoring skills.

Certifications

The following certifications are a plus:

• AWS Solutions Architect - Associate or Professional
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD)
• Microsoft Azure Administrator or Azure Solutions Architect
• HashiCorp Terraform Associate