Staff Platform Engineer

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Act as the technical Subject Matter Expert (SME) for Tide's primary IT platforms.

• Take ownership of platform architecture, configuration, and overall health.

• Make critical design decisions while ensuring platforms remain secure, governed, and well-documented.

• Oversee the management of Google Workspace, Netskope, Jamf Pro, Microsoft Intune, and Atlassian platforms.

• Implement configuration as code with Terraform, Git, and CI/CD, and script other necessary tasks.

• Manage endpoint security and compliance controls, encompassing EDR integrations, patching, vulnerability remediation, encryption, device compliance, and security baselines.

• Develop monitoring, reporting, and operational health metrics utilizing APIs and automation techniques.

• Lead Workplace Technology design and architecture, including standards, addressing technical debt, vendor assessments, proofs of concept, migrations, and lifecycle planning.

• Serve as the L3 escalation point for complex incidents and carry out root-cause analyses.

• Assist with ISO 27001, SOC 2, FCA, and DORA audit and compliance initiatives.

• Guide engineers and service desk staff, while maintaining runbooks and Confluence documentation.

⛳️ Requirements

• Significant experience with Configuration as Code (CaC) on SaaS platforms.

• Proficient in scripting languages such as Python, Bash, and PowerShell, with a strong comfort level in working with REST APIs.

• Over 7 years of experience in IT or workplace engineering, including at least 3 years in a senior role within a cloud-native, SaaS-first organization of over 1,000 users.

• Extensive hands-on experience with Google Workspace administration at an enterprise level, including automation via GAM/GAMADV-XTD3, Admin SDK APIs, or Apps Script.

• Proven experience in designing and operating Netskope or a similar SSE/SASE platform (such as Zscaler, Prisma Access, Cloudflare One), particularly in ZTNA and DLP.

• Strong expertise in both Jamf Pro and Microsoft Intune, effectively managing a mixed Mac and Windows fleet from end to end.

• Solid understanding of identity and access management concepts: SAML, OIDC, SCIM, MFA, conditional access, and device trust.

• Excellent communication skills, capable of interacting confidently with engineers, stakeholders, and non-technical users.

🏝️ Benefits

• 25 days of paid annual leave.

• 3 paid days off dedicated to volunteering or professional development activities.

• Extended maternity and paternity leave fully covered by the company.

• Personal learning and development budget of 500 EUR per year.

• Additional health and dental insurance.

• Access to a mental wellbeing platform.

• Fully covered Multisports card.

• Food vouchers provided.

• Snacks, light meals, and beverages available in the office.

• Work-from-home equipment allowance.

• Flexible remote working options.

• Sabbatical leave available.

• Share options provided.