Principal Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the architectural framework of the platform, encompassing VPC, managed PostgreSQL, serverless computing, object storage, observability, CI/CD, and configuration as code.

• Manage the security and compliance framework to ensure that federal identity standards (SSO, smart-card, federated identity) integrate seamlessly when the platform transitions to restricted environments, including encryption at rest and in transit, audit logging, identity abstraction, tenant isolation, and data residency requirements.

• Ensure architectural portability to facilitate straightforward deployment in regulated or restricted environments when necessary.

• Enhance the internal developer experience, focusing on logs, traces, deployment speed, and the local development loop.

• Be available for on-call support for the systems you have designed and lead the postmortem analysis when issues arise.

• Convert regulatory demands (FedRAMP, HIPAA, SOC 2, ITAR, or similar control frameworks) into actionable infrastructure decisions.

• Collaborate with downstream deployment teams during the transition into restricted environments.

⛳️ Requirements

• A Bachelor’s degree in Computer Science, Engineering, or a related field, along with 10 years of professional experience in infrastructure or platform engineering; equivalent experience may be accepted in lieu of the degree.

• Experience being on call for production systems you personally designed, with the ability to discuss in detail an outage you caused, an audit you participated in, or an identity bug you resolved past 4 am.

• Capability to thrive in a fast-paced and collaborative environment.

• Over ten years of experience with production cloud platforms; extensive experience is critical for this position.

• In-depth hands-on experience with AWS and strong capabilities in infrastructure-as-code (CDK or Terraform).

• Proficiency in identity and access design, including SAML/OIDC, federated identity, and identity abstraction patterns.

• Experience working under regulatory pressure (FedRAMP, HIPAA, SOC 2, ITAR, or comparable) and the ability to interpret a control catalog and translate it into infrastructure decisions, even without having led a full accreditation process.

• Design systems for portability to environments beyond those you have personally managed.

• Extensive use of AI tools: employing agents in parallel and utilizing models as collaborators.

• Strong discipline in observability, including logs, traces, deployment speed, and the local development loop.

• Proven experience working in a remote work setting.

🏝️ Benefits

• The chance to support high-profile federal missions in IT and healthcare.

• A culture that promotes innovation, growth, collaboration, and quality.

• Access to state-of-the-art tools and technologies.

• Comprehensive benefits for you and your family.

• A career trajectory that recognizes ambition and performance.