Principal Software Engineer (Platform Engineering)

Saviynt; Bengaluru; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Saviynt is seeking a Principal Platform Engineer in Bengaluru to lead the Internal Developer Platform (IDP) and Developer Portal. You will own the IDP lifecycle, create golden-path templates, and partner with Embedded SREs and Central SREs to deliver a unified developer experience.

This role emphasizes security guardrails, scalable Kubernetes platforms, and centralized tooling across multi-tenant environments.

Qualifications

• 12++ Years of experience across the Software Development lifecycle with a focus on platform engineering, DevOps, and cloud-native infrastructure.

Responsibilities

• Take ownership of key aspects of the IDP architectural lifecycle, from service catalog creation to automated, self-service environment provisioning.
• Construct and manage a centralized developer hub featuring TechDocs, software catalogs, and integrations with GitLab, Jira, and cloud consoles.
• Develop and implement golden-path templates to rapidly deploy new microservices with Kubernetes configs, observability, and security guardrails.
• Champion and evangelize platform adoption across engineering units using feedback, usage analytics, and outreach.
• Design and support multi-tenant SaaS architectures with cell-based deployments and progressive ring deployments.
• Drive GitOps-based CI/CD via GitLab CI and ArgoCD for effortless team consumption.
• Establish policy-as-code using OPA/Gatekeeper/Kyverno in production Kubernetes clusters.

Skills

Kubernetes

Go/Python

Backstage/IDP

GitLab CI

ArgoCD/Argo Rollouts

Terraform/OpenTofu

Security/Governance

SRE collaboration

FinOps/Kubecost

Multi-tenant SaaS

Platform Engineering

Tools

EKS

AKS

Helm

Kustomize

Crossplane

Backstage plugins

OPA/Gatekeeper/Kyverno

SBOM/Software Supply Chain

Terraform/OpenTofu registry

Kafka/AWS MSK

Job description

Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit www.saviynt.com.

This is a Principal position within the Platform Engineering organization. Our core mission is to build the foundational, core common layer across Saviynt engineering, consolidating and centralizing scattered platform tools, workflows, and infrastructure primitives. Wearing a dedicated Platform Engineering hat, this role will proactively find opportunities to eliminate operational friction and standardize capabilities into a seamless, unified developer experience.

A primary focus of this role is designing, developing, implementing, rolling out, and supporting our Internal Developer Platform (IDP), fitting all foundational tooling into a cohesive, self-serve ecosystem. You will build and implement "golden paths" for developers, creating self-serve platforms embedded with essential security and operational guardrails. Crucially, you will act as a partner across engineering—working closely with developers, Embedded SREs (E-SREs), and Central SRE teams—while actively evangelizing platform products to accelerate adoption throughout the organization.

WHAT YOU BRING

• 12+ Years of experience across the Software Development lifecycle with a focus on platform engineering, DevOps, and cloud-native infrastructure.

• Proven IDP build experience: you have shipped or significantly contributed to a Backstage or Port portal (or equivalent) used in production.

• Deep Kubernetes expertise across EKS and AKS, including multi-tenant cluster design, Helm, Kustomize, and Crossplane.

• Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring/canary deployment strategies.

• Strong proficiency in Go (Golang) or Python for building production-grade CLIs, custom operators, or platform backends.

• GitLab CI + ArgoCD / Argo Rollouts pipeline implementation experience—building CI/CD-as-a-service for engineering teams.

• Terraform / OpenTofu module authoring at scale—module registry design, state management, and refactoring large IaC codebases.

• Background in developing Backstage plugins or contributing to open-source developer platform ecosystems.

• Practical application of workload identity, SPIFFE/IRSA, and cloud-native zero-trust network architectures.

• Implementation of OPA/Gatekeeper/Kyverno for policy-as-code within production-grade Kubernetes clusters.

• Proficiency in FinOps methodologies and tools such as Kubecost or cloud cost exposure APIs.

• Experience managing Kafka or AWS MSK as a multi-tenant platform capability.

• Proven platform-first mindset with a history of centralizing scattered tooling into core foundation layers, evangelizing platform adoption, and collaborating effectively across developers, Embedded SREs, and Central SREs.

• Professional exposure to identity security frameworks, SaaS delivery, and high-compliance operational environments (SOC 2, ISO 27001, FedRAMP).

WHAT YOU WILL BE DOING

Internal Developer Platform (IDP) & Developer Portal

• Take ownership of key aspects of the IDP architectural lifecycle, from service catalog creation to automated, self-service environment provisioning.

• Construct and manage a centralized developer hub featuring TechDocs, software catalogs, and seamless integrations with GitLab, Jira, and cloud management consoles.

• Develop and implement "golden-path" templates to rapidly deploy new microservices equipped with Kubernetes configurations, observability tools, and automated security guardrails.

• Champion and evangelize the adoption of platform products across engineering units using developer feedback, usage analytics, and active outreach.

Multi-tenant SaaS Architecture & Fleet Operations

• Design and support cell-based deployment patterns and progressive ring-deployment strategies across multi-tenant and single-tenant customer fleets to isolate tenant workloads and limit blast radiuses.

• Automate continuous zero-downtime release deployments globally while providing platform abstractions that support multi-region SaaS deployments.

Platform-as-a-Service on Kubernetes

• Design and supervise multi-tenant Kubernetes environments on AWS EKS and Azure AKS, ensuring a unified cluster management experience for internal users.

• Produce modular Helm libraries and infrastructure compositions that mask underlying cloud complexities for product development teams.

• Enforce robust isolation and access control policies that reflect our multi-tenancy security framework at the namespace level.

• Maintain high availability through automated cluster lifecycle operations, including seamless scaling and blue/green deployment rotations.

GitOps, CI/CD, and Delivery Infrastructure

• Drive the evolution of CI/CD-as-a-service by providing standardized pipeline templates via GitLab CI and ArgoCD / Argo Rollouts for effortless team consumption.

• Deploy GitOps methodologies to establish default rollback capabilities, continuous drift detection, and transparent audit trails across environment workflows.

• Incorporate supply-chain security measures, such as container signing and SBOM creation, directly into our core delivery infrastructure.

API Gateway, Traffic Management & Edge Infrastructure

• Manage edge, ingress, and service-to-service communication infrastructure (API gateways, service mesh), incorporating built-in mTLS, rate limiting, distributed tracing context propagation, and circuit breaking as platform primitives.

• Configure global load balancing and edge protection (CDN/WAF) as standardized defaults across developer paths.

Infrastructure Automation & IaC

• Curate a centralized Terraform / OpenTofu registry for multi-cloud resources that adheres to stringent FinOps and security standards by default.

• Enable self-service infrastructure provisioning via Kubernetes