Staff Platform Engineer

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Take ownership of the architecture, configuration, and overall health of Tide's essential IT platforms.

• Make critical design decisions while ensuring that platforms remain secure, governed, and well-documented.

• Oversee the management of Google Workspace, Netskope, Jamf Pro, Microsoft Intune, Jira Service Management, Jira, and Confluence platforms.

• Implement configuration as code utilizing Terraform, Git, and CI/CD, alongside scripting additional configuration tasks.

• Manage endpoint security and compliance controls, which include EDR integrations, patching, vulnerability remediation, encryption, device compliance, and security baselines.

• Develop monitoring, reporting, and operational health metrics through APIs and automation.

• Lead technical design and architecture decisions for Workplace Technology, addressing standards, technical debt, vendor evaluations, proof of concepts, migration strategies, and lifecycle planning.

• Serve as L3 escalation for intricate incidents, conducting root-cause analyses and applying enduring solutions.

• Assist in ISO 27001, SOC 2, FCA, and DORA audit and compliance efforts.

• Mentor engineers and service desk colleagues, while also creating runbooks and documentation in Confluence.

⛳️ Requirements

• Significant experience with Configuration as Code (CaC) on SaaS platforms.

• Proficient in scripting with Python, Bash, and PowerShell, along with comfort in working with REST APIs.

• Over 7 years of experience in IT or workplace engineering, with a minimum of 3 years at a senior level in a cloud-native, SaaS-first organization with over 1,000 users.

• Extensive hands-on experience in Google Workspace administration at an enterprise level, including automation using GAM/GAMADV-XTD3, Admin SDK APIs, or Apps Script.

• Practical experience in designing and managing Netskope or a similar SSE/SASE platform (such as Zscaler, Prisma Access, Cloudflare One), including ZTNA and DLP.

• Strong expertise with both Jamf Pro and Microsoft Intune, managing a mixed fleet of Mac and Windows devices comprehensively.

• Solid understanding of identity and access management: SAML, OIDC, SCIM, MFA, conditional access, and device trust.

• Excellent and confident communication skills with engineers, stakeholders, and non-technical users.

🏝️ Benefits

• Remote-first work environment.

• 25 days of paid annual leave.

• 3 paid days off for volunteering or learning and development activities.

• Private Health Insurance.

• Mental Health Support Platform.

• FitPass.

• Family and friendly leave in accordance with statutory regulations.

• Personal learning and development budget.

• Share Options.