Principal Platform Engineer – Infrastructure

This is a fully remote position, open to applicants in United States.

📋 Description

• Define the architecture of the platform, incorporating a container-orchestrated runtime, robust isolation for client engagements, and reusable, versioned infrastructure as code.

• Develop identity, networking, and observability features, which include just-in-time audited access, service-level objectives (SLOs) and alerting, as well as cost tracking per engagement.

• Take ownership of the shared CI/CD process and its gate framework to ensure that quality, security, and AI governance checks can prevent releases when necessary.

• Automate the generation of compliance evidence, such as scanning, signed artifacts, software bill of materials (SBOM), SOC2, and ISO 27001 from each build.

• Package the AI-assisted development environment as a product, ensuring strict sandbox boundaries for coding agents.

• Assess developer outcomes, including setup duration, pipeline speed, and overall adoption.

• Guide architecture decisions through comprehensive written trade-off documents.

• Provide advice to senior stakeholders regarding platform-related risks.

• Mentor engineers and vendor partners.

⛳️ Requirements

• Minimum of 15 years of experience for Principal roles or 10 years for Staff roles in software, platform, or infrastructure engineering.

• Experience in platform work within consulting or professional services firms, particularly regarding client isolation and data residency, is preferred.

• Proficient in managing fleet-scale infrastructure as code using Terraform or OpenTofu, along with Terragrunt or similar tools, including module design, remote state management, and multi-environment layouts.

• Practical experience in running multi-tenant Kubernetes environments, encompassing GitOps, network and admission policies, workload identity, and tenant isolation.

• Experience building CI/CD as a shared platform (e.g., GitHub Actions or similar), with reusable workflows, organization-wide branch protection, and enforced gates.

• Hands-on experience with cloud identity and network security in Azure, AWS, or GCP, including workload identity federation, RBAC, private networking, WAF, and DNS management.

• Familiarity with security and compliance automation using scanners such as Snyk, Checkov, or Trivy, as well as policy engines like OPA, Kyverno, or Azure Policy; knowledge of supply chain controls, including signing, provenance, and SBOM; and SOC2 and ISO 27001 evidence.

• Experience in production observability with OpenTelemetry or comparable tools, including collector design, SLOs and error budgets, alert routing, incident response, and chaos testing.

• Real-world application development experience in Go, Python, or TypeScript.

• Strong practices in testing, code review, trunk-based development, and release management.

• Excellent written and verbal communication skills, particularly in interactions with executives.

• Comfortable working within Agile, cross-functional product teams.

🏝️ Benefits

• Opportunity to work in a dynamic and innovative environment.

• Competitive salary and comprehensive benefits package.

• Continuous learning and professional development opportunities.

• Flexible work arrangements and a focus on work-life balance.