Principal Platform Engineer

Responsibilities

• Drive platform architecture, runtime direction, and multi-tenant isolation between client engagements
• Design composable infrastructure as code at fleet scale with versioned templates and images
• Make the environment lifecycle a one-command operation with automated cleanup
• Design federated, credential-free identity and network with just-in-time privileged access
• Ship telemetry, SLOs, alerting, and per-engagement cost attribution for every service
• Drive shared delivery pipelines and pluggable security, quality, and AI-governance gates
• Implement security and compliance as code, including signed artifacts and SBOMs
• Run the platform as a product measured by developer outcomes
• Lead strategic architecture decisions as evidence-based decision documents
• Mentor engineers and vendor partners and advise senior stakeholders

Requirements

• 15+ years in software, platform, or infrastructure engineering
• Fleet-scale infrastructure as code (Terraform or OpenTofu with Terragrunt)
• Multi-tenant Kubernetes operations in production, including GitOps and admission policy
• CI/CD as a shared platform with reusable workflows and enforced gates
• Cloud identity and network security on Azure, AWS, or GCP
• Security and compliance as code (Snyk, Checkov, Trivy, OPA, Kyverno, SOC2 or ISO 27001 evidence)
• Production observability with OpenTelemetry, SLOs, and incident management
• Production application software experience in Go, Python, or TypeScript
• Excellent written and verbal English communication
• Agile and cross-functional product team experience

Preferred Qualifications

• Platforms for consulting or professional services with client-isolation requirements
• Virtual-cluster and control-plane tooling (vcluster, Crossplane) and developer portals (Backstage, Port)
• Operating platforms used by AI coding assistants, including agent sandboxing
• Advanced cloud, Kubernetes, or security certifications
• FinOps experience
• Developer education through guides, workshops, or internal tooling communities

About the Company

The hiring company is not stated; this role is listed as an external client requirement.