Senior Platform Engineer

Job Scope • Design, build, and operate cloud and Kubernetes platform capabilities: cluster provisioning, upgrade strategy, RBAC/IAM, quota and cost governance, high availability, and disaster recovery. • Build developer-facing platform products and self-service workflows in Go and/or Python, including APIs, CLI tools, operators/controllers, and automation that make the right operational path easy to use. • Evolve our delivery platform: Infrastructure-as-Code, GitOps-based deployment (Argo CD / Flux), environment management, and progressive delivery such as canary and blue-green rollout. • Embed security into the platform and delivery path: SAST/DAST, dependency and container scanning, secrets management, image signing, admission policies, and policy-as-code—making the secure path the default path for developers. • Design and troubleshoot network and runtime foundations: CNI, network policies, DNS, TLS, L4/L7 load balancing, service mesh, and east-west traffic control across cloud or hybrid environments. • Build and operate observability for platform components: metrics, logging, tracing, SLOs, and actionable alerting. • Partner with product and engineering teams to understand platform needs, improve developer experience, and evolve the platform beyond its current DevSecOps focus. • Participate in a reasonable on-call rotation, lead blameless post-incident reviews, and drive corrective actions to closure. • Mentor engineers and help establish engineering standards for the platform team. Job Requirement • 5+ years of experience in software, backend, infrastructure, or platform engineering, with demonstrated experience building and operating production systems. • Strong programming ability in Go or Python—you write maintainable production code, not just scripts. • Hands-on production experience with Kubernetes and cloud infrastructure. You understand Kubernetes beyond daily use, including API machinery, controllers, scheduling, and the operational trade-offs behind reliable multi-tenant platforms. • Solid TCP/IP and Linux fundamentals: routing, subnetting, NAT, DNS, TLS, L4 vs L7 proxying, namespaces, cgroups, systemd, and the Linux networking stack. You can use tools such as tcpdump to reason about a connection from SYN to FIN. • Experience designing or operating CI/CD, Infrastructure-as-Code (Terraform or equivalent), and production deployment workflows. • Practical DevSecOps experience: integrating security tooling such as SAST, SCA, image scanning, secrets detection, and policy-as-code (OPA/Kyverno or equivalent) into engineering workflows. • A product mindset for internal platforms: you can turn complex infrastructure capabilities into reliable, usable interfaces for other engineers. • Clear communication and sound incident-management judgement.