Staff Platform Engineer

This is a fully remote position, open to applicants in Lithuania.

📋 Description

• Act as the technical Subject Matter Expert (SME) for Tide's primary IT platforms.

• Take ownership of platform architecture, configuration, and overall health.

• Make significant design decisions while ensuring platforms remain secure, governed, and well-documented.

• Manage platforms including Google Workspace, Netskope, Jamf Pro, Microsoft Intune, and Atlassian.

• Implement configuration as code using Terraform, Git, and CI/CD where applicable, while scripting other necessary tasks.

• Oversee endpoint security and compliance measures, which encompass EDR integrations, patch management, vulnerability remediation, encryption, device compliance, and security baselines.

• Develop monitoring, reporting, and operational health metrics through APIs and automation.

• Proactively identify configuration drift, failures, capacity issues, and operational risks to prevent incidents.

• Lead Workplace Technology design and architectural decisions, including setting standards, managing technical debt, vendor assessments, proof of concepts, migration strategies, and lifecycle planning.

• Serve as L3 escalation for complex incidents and conduct root-cause analysis.

• Assist with audit and compliance efforts related to ISO 27001, SOC 2, FCA, and DORA requirements.

• Provide mentorship to engineers and service desk personnel.

• Create runbooks and documentation in Confluence.

⛳️ Requirements

• Significant experience with Configuration as Code (CaC) on SaaS platforms.

• Proficient in scripting languages such as Python, Bash, and PowerShell.

• Comfortable working with REST APIs.

• Over 7 years of experience in IT or workplace engineering.

• Minimum of 3 years at a senior level in a cloud-native, SaaS-focused organization with over 1,000 users.

• In-depth hands-on administration experience with Google Workspace at an enterprise level.

• Knowledge of automation using GAM/GAMADV-XTD3, Admin SDK APIs, or Apps Script.

• Practical experience in designing and managing Netskope or a similar SSE/SASE platform, including Zero Trust Network Access (ZTNA) and Data Loss Prevention (DLP).

• Strong expertise with both Jamf Pro and Microsoft Intune, managing a blend of Mac and Windows devices end to end.

• Solid understanding of SAML, OIDC, SCIM, Multi-Factor Authentication (MFA), conditional access, and device trust.

• Effective and confident communication skills with engineers, stakeholders, and non-technical users.

• Relevant certifications are preferable but not mandatory.

🏝️ Benefits

• Private Health Insurance.

• 25 days of paid annual leave.

• 3 paid days off for volunteering or learning and development activities.

• Parental Leave days.

• Family-Friendly Leave.

• Personal learning and development budget of 500 EUR per year.

• Access to the mental wellbeing platform Plumm.

• Work from home equipment allowance.

• Sabbatical Leave.

• Share options.

• Team Events.