Staff Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop the platform runtime, encompassing container orchestration, tenancy-grade isolation, and inherited module contracts.

• Create composable infrastructure as code at fleet scale while publishing versioned templates and images.

• Automate the creation and destruction of environments via pull requests, ensuring no remnants remain.

• Design federated, credential-free identity and network systems featuring audited privileged access and distinct internal/external edges.

• Deliver telemetry, alerting, service-level objectives, fault injection, and cost attribution per engagement, including AI expenditures.

• Construct and manage shared delivery pipelines along with pluggable quality, security, and AI-governance gates.

• Implement security and compliance as code, which includes scanning, policy controls, signed artifacts, attestations, audit trails, SBOMs, and SOC2/ISO 27001 evidence.

• Package and secure AI-assisted development environments utilizing sandboxing, default-deny egress, short-lived credentials, and isolated runners.

• Measure platform outcomes, enhance developer experience, and validate golden paths through practical engagement.

• Make architectural decisions through spikes and proofs of concept, producing evidence of security and reliability.

• Review designs and pull requests, document architecture decision records, and offer technical leadership.

• Propel the adoption of platform standards while supporting product-team migrations.

⛳️ Requirements

• Over 10 years of experience in software engineering, platform or infrastructure engineering, or a closely related technical domain.

• Hands-on proficiency in infrastructure as code at fleet scale (Terraform or OpenTofu with Terragrunt or equivalent), covering module architecture, remote state, and multi-environment topology.

• Proven experience in managing multi-tenant Kubernetes platforms in production, including GitOps, network and admission policy, workload identity, and tenant isolation.

• Experience in building CI/CD as a shared platform (GitHub Actions or equivalent), featuring reusable workflow contracts, fleet-scale branch protection, and enforced quality and security gates.

• Strong practical knowledge of cloud identity and network security on Azure/AWS/GCP or a similar hyperscaler: including workload identity federation, RBAC, private networking, WAF, and DNS.

• Significant experience with security and compliance as code, including scanning toolchains (Snyk, Checkov, Trivy), policy engines (OPA, Kyverno, Azure Policy), supply chain controls (signing, provenance, SBOM), and SOC2/ISO 27001 control evidence.

• Production-level observability with OpenTelemetry or equivalent: involving collector topology, SLOs and error budgets, alert routing, incident management, and fault injection.

• Developed and maintained production application software in at least one of Go, Python, or TypeScript; proficient in testing strategy, code review, trunk-based delivery, and release management.

• Exceptional written and verbal communication skills in English; capable of translating complex technical subjects for diverse audiences.

• Familiarity with Agile methodologies and collaboration within cross-functional product teams.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance plans.

• Opportunities for professional growth and development.

• Flexible work hours and remote work options.

• Collaborative and inclusive company culture.