Platform Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Manage and operate production Kubernetes environments on GKE, focusing on daily cluster operations, troubleshooting, maintenance, and enhancing reliability.

• Develop and sustain infrastructure as code using Pulumi, including Pulumi ESC for environments, secrets, and configuration, primarily utilizing TypeScript and Python.

• Oversee GitOps workflows with ArgoCD and ensure dependable CI/CD pipelines, including identifying and resolving pipeline-level race conditions.

• Administer GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager.

• Optimize Pub/Sub subscriptions by adjusting acknowledgement deadlines, managing dead-letter queue redrive behavior, and implementing backlog alerting.

• Fully manage Cloudflare as code, including Workers and DNS, while maintaining lifecycle cleanup for outdated preview environments.

• Take ownership of the secrets and configuration lifecycle across services, focusing on provisioning, rotation, naming conventions, and preventing authentication drift between services.

• Independently respond to production incidents through triage, escalation, documentation, runbooks, and incident.io workflows.

• Review and approve infrastructure pull requests, helping to uphold standards for safety, accuracy, and operational readiness.

• Create and manage Grafana dashboards and alerts, including collaboration with Grafana Alloy.

• Implement SOC2-driven infrastructure and security tasks while ensuring separation between regulated or sensitive-data environments.

• Read and contribute to codebases using Go, TypeScript, and Python.

• Serve as a trusted infrastructure partner during EU business-day core hours.

⛳️ Requirements

• Proven production experience managing Kubernetes on GKE in a daily infrastructure or platform engineering role.

• Practical hands-on experience with Pulumi, including Pulumi ESC for managing environments, secrets, and configuration, with proficiency in both TypeScript and Python.

• Familiarity with ArgoCD, GitOps workflows, CI/CD pipelines, and debugging pipeline-level race conditions.

• Strong hands-on experience with GCP services including IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager, along with subscription-level Pub/Sub tuning and alerting.

• Experience in managing Cloudflare Workers and DNS as code, including the cleanup of outdated preview environments.

• Proven ability to oversee secrets and configuration across services, including provisioning, rotation, naming conventions, and preventing authentication drift between services.

• Demonstrated capability to independently triage and manage production incidents, including escalation, runbooks, and incident.io workflows.

• Ability to execute infrastructure tasks independently based on defined requirements without needing architecture-level guidance.

• Experience in reviewing and approving infrastructure changes via pull requests.

• Familiarity with Grafana dashboards, alerting, and the Grafana Alloy or similar agent and collector layer.

• Security and compliance knowledge, including the capability to perform SOC2-driven infrastructure work and operate effectively in regulated or sensitive-data environments.

• Competence in reading Go and working comfortably within TypeScript and Python codebases.

• Availability to work during core hours that overlap with the EU business day.

🏝️ Benefits

• Remote-first global workforce.

• Industry-leading Medical, Dental, and Vision health insurance.*

• Company matching 401k with a 3% match.*

• $1,500 Home Office Set Up Allowance (lifetime max).

• $200 Annual Book Allowance Program.

• $75 Monthly internet or phone reimbursement.

• Flexible Time Off.

• Company-issued laptop.

• Egg freezing, mental health, and employee wellness benefits.

• In certain countries, medical, dental, and vision coverage is fully provided for employees and their dependents, subject to country and plan specifics.

• 401k is available for United States employees only.