Senior Platform Engineer

Description

We are looking for a Senior Platform Engineer to support the development of Internal Developer Platform (IDP) components, including VPCR / Backstage, and to drive platform standardization, GitOps automation, security guardrails, and self-service enablement for development and SRE teams. This role will focus on building scalable platform capabilities using Kubernetes and modern cloud-native tooling, with exposure to AWS, Backstage, Crossplane, Flux, Terraform, Operator Framework, and TypeScript. Responsibilities Support IDP components, including VPCR / Backstage Platform services that improve developer experience and standardize deployments Collaborate with engineering and SRE teams to deliver reusable platform capabilities Define baseline Terraform, Flux, and Crossplane templates for GitOps-driven deployments Curated deployment templates for pilot and custom applications Publish a self-service catalog for SRE and development teams Integrate templates into pipeline automation Transition template ownership to relevant application or platform teams Implement an Azure AD-based IAM strategy for centralized authentication Admission control setup using Kyverno or OPA Gatekeeper Integrate vulnerability scanning tools such as Snyk into CI/CD pipelines Define code review and gating rules using Gatekeeper policies Expand security guardrails for vendor deployments Finalize cluster-to-cluster network policies and encryption in transit Conduct security reviews and penetration testing Establish an ongoing security posture and governance Align linting and unit test checks with CI/CD pipelines Establish coding guidelines for microservices, Helm charts, and Terraform scripts Introduce peer review and gating processes for pull requests Integrate code scanning tools such as Snyk and SonarQube Define quality benchmarks for vendor-provided code and configuration Create dashboards or leaderboards to track quality violations and coverage Refine policies based on pilot/vendor feedback Document and operationalize final code quality standards across teams Identify custom components or integrations needed for pilot vendors Bridging services for hybrid cloud requirements Implement custom disaster recovery automation scripts Develop data integrity checks Perform integration testing with pilot vendor applications Finalize custom features for broader vendor onboarding Harden custom components for production readiness Requirements Hands-on experience with Kubernetes Strong understanding of DevOps, GitOps, and CI/CD practices Experience designing or operating cloud-native platforms Familiarity with infrastructure-as-code and application deployment automation Ability to work across platform engineering, application teams, and security teams Nice to have Experience with Backstage or similar developer portal tools Knowledge of Crossplane, Flux, Terraform, or operator-based automation Exposure to AWS and hybrid cloud environments Experience with policy enforcement tools such as Kyverno or OPA Gatekeeper Familiarity with security scanning and software supply chain controls Experience reusable templates and self-service workflows

Requirements

• Hands-on experience with Kubernetes

• Strong understanding of DevOps, GitOps, and CI/CD practices

• Experience designing or operating cloud-native platforms

• Familiarity with infrastructure-as-code and application deployment automation

• Ability to work across platform engineering, application teams, and security teams

Responsibilities

• Support IDP components, including VPCR / Backstage

• Platform services that improve developer experience and standardize deployments

• Collaborate with engineering and SRE teams to deliver reusable platform capabilities

• Define baseline Terraform, Flux, and Crossplane templates for GitOps-driven deployments

• Curated deployment templates for pilot and custom applications

• Publish a self-service catalog for SRE and development teams

• Integrate templates into pipeline automation

• Transition template ownership to relevant application or platform teams

• Implement an Azure AD-based IAM strategy for centralized authentication

• Admission control setup using Kyverno or OPA Gatekeeper

• Integrate vulnerability scanning tools such as Snyk into CI/CD pipelines

• Define code review and gating rules using Gatekeeper policies

• Expand security guardrails for vendor deployments

• Finalize cluster-to-cluster network policies and encryption in transit

• Conduct security reviews and penetration testing

• Establish an ongoing security posture and governance

• Align linting and unit test checks with CI/CD pipelines

• Establish coding guidelines for microservices, Helm charts, and Terraform scripts

• Introduce peer review and gating processes for pull requests

• Integrate code scanning tools such as Snyk and SonarQube

• Define quality benchmarks for vendor-provided code and configuration

• Create dashboards or leaderboards to track quality violations and coverage

• Refine policies based on pilot/vendor feedback

• Document and operationalize final code quality standards across teams

• Identify custom components or integrations needed for pilot vendors

• Bridging services for hybrid cloud requirements

• Implement custom disaster recovery automation scripts

• Develop data integrity checks

• Perform integration testing with pilot vendor applications

• Finalize custom features for broader vendor onboarding

• Harden custom components for production readiness

Seniority

• Senior

Nice to have

• Experience with Backstage or similar developer portal tools

• Knowledge of Crossplane, Flux, Terraform, or operator-based automation

• Exposure to AWS and hybrid cloud environments

• Experience with policy enforcement tools such as Kyverno or OPA Gatekeeper

• Familiarity with security scanning and software supply chain controls

• Experience reusable templates and self-service workflows