Principal Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage fleet-scale infrastructure-as-code platforms.

• Administer multi-tenant production Kubernetes environments utilizing GitOps, network and admission policies, workload identity, and tenant isolation.

• Create a CI/CD shared platform with reusable workflow contracts, branch protection, and established quality and security gates.

• Implement cloud identity and network security across Azure, AWS, GCP, or other comparable hyperscalers.

• Enforce security and compliance as code, incorporating scanning, policy engines, supply-chain controls, and evidence for SOC2 / ISO 27001.

• Establish production observability using OpenTelemetry or similar tools, with a focus on SLOs, error budgets, alert routing, incident management, and fault injection.

• Design and manage production application software in Go, Python, or TypeScript.

• Employ testing strategies, conduct code reviews, and manage trunk-based delivery and release processes.

• Simplify complex technical concepts for varied audiences, including executive stakeholders.

• Work collaboratively with cross-functional product teams utilizing Agile methodologies.

⛳️ Requirements

• Over 15 years of experience in software engineering, platform or infrastructure engineering, or a related technical discipline.

• Extensive hands-on expertise in infrastructure as code at fleet scale (Terraform or OpenTofu with Terragrunt or similar): module architecture, remote state management, multi-environment topologies.

• Proven experience managing multi-tenant Kubernetes platforms in production: GitOps, network and admission policies, workload identity, and tenant isolation.

• Established record of building CI/CD as a shared platform (GitHub Actions or similar), featuring reusable workflow contracts, fleet-scale branch protection, and enforced quality and security gates.

• Strong practical knowledge of cloud identity and network security on Azure/AWS/GCP or a comparable hyperscaler: workload identity federation, RBAC, private networking, WAF, DNS.

• Significant experience with security and compliance as code: scanning toolchains (Snyk, Checkov, Trivy), policy engines (OPA, Kyverno, Azure Policy), supply chain controls (signing, provenance, SBOM), and SOC2 / ISO 27001 control evidence.

• Experience with production observability using OpenTelemetry or similar: collector topology, SLOs and error budgets, alert routing, incident management, and fault injection.

• Demonstrated experience in building and operating production application software as a software engineer, proficient in at least one of Go, Python, or TypeScript, with fluency in testing strategies, code review, trunk-based delivery, and release management.

• Strong written and verbal communication skills in English; capable of translating intricate technical topics for diverse audiences, including executive stakeholders.

• Familiarity with Agile methodologies and experience collaborating within cross-functional product teams.

• Preferred / Additional Qualifications: experience in developing platforms for consulting, advisory, or professional services, including client isolation and data residency requirements.

• Knowledge of virtual-cluster and control-plane tooling (vcluster, Crossplane) and developer portals (Backstage, Port).

• Experience managing platforms utilized by AI coding assistants (Claude Code, GitHub Copilot, or similar), including sandboxing of agent tooling.

• Advanced certifications in cloud architecture, Kubernetes, or security (e.g., Azure Solutions Architect, CKA/CKS, CISSP).

• Experience in FinOps: cost allocation, showback, and cloud cost optimization.

• Proven enthusiasm for developer education through writing internal guides, conducting workshops, or fostering internal tooling communities.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Flexible work arrangements, including remote work options.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with employer matching.

• Opportunities for professional development and certifications.

• Collaborative and inclusive work environment.