Cloud Platform Engineer

Tookitaki; Manila; On-site; PHP 1,800,000 - 3,600,000; Full time

Benefits offered by this job

Competitive salary

Certification support

Health insurance

Flexible working options

Career growth

Job summary

TookiTaki is seeking a senior Platform Engineer to build and operate a cloud platform on Kubernetes/EKS, using GitOps and a Terraform-based self-service layer. You will manage data services and stateful workloads, delivering infrastructure through reviewed YAML and automated pipelines.

Ideal candidates have 4+ years in cloud/DevOps, strong Kubernetes experience, and proficiency in Python or Go scripting. This role is based in Manila with the team focused on scalable, secure platform engineering.

Qualifications

• Bachelor's degree in Computer Science, Engineering or related field, or equivalent practical experience.
• 4+ years in cloud, platform, or DevOps engineering.
• Experience running production Kubernetes on a managed cloud (EKS preferred).
• Infrastructure as Code only; no console-driven changes.
• Certifications like CKA, Terraform Associate, AWS certifications are valued.

Responsibilities

• Build and operate TookiTaki's cloud platform (Kubernetes, EKS, GitOps).
• Deliver infrastructure via reviewed YAML and automated pipelines.
• Manage data services and stateful workloads on Kubernetes using operators.
• Ensure cost efficiency, tagging, and policy-gated deployments.

Skills

Cloud/Platform Engineering

DevOps

Kubernetes

GitOps

ArgoCD

Terraform

CI/CD

Python/Go scripting

Education

Bachelor's degree in CS/Engineering

CKA

Terraform Associate

AWS Solutions Architect Associate

Tools

Kubernetes

EKS

ArgoCD

Atlantis

GitHub Actions

GitLab CI

Datadog

OpenTelemetry

Grafana

PostgreSQL

MySQL (Percona)

ScyllaDB

Elasticsearch

Kafka (Strimzi)

Redis (Valkey/Redis)

AWS RDS/Aurora

Job description

Team: Infrastructure · Reports to Head of Infrastructure

Location - Manila

About the role

You will build and operate TookiTaki's cloud platform: AWS EKS clusters managed as code, GitOps-driven delivery with the Argo suite, operator-managed data services running on Kubernetes, and a Terraform-based self-service layer that lets application teams request infrastructure through reviewed YAML instead of tickets. The job is platform engineering, not click-ops — everything ships through version control, automated pipelines, and policy gates.

Requirements

Education

• Required: Bachelor's degree in Computer Science, Engineering, or a related field — or equivalent practical experience.
• Preferred: Relevant certifications over a Master's — CKA (Certified Kubernetes Administrator), HashiCorp Terraform Associate, AWS Solutions Architect Associate or higher.

Experience

• 4+ years in cloud, platform, or DevOps engineering.
• Proven track record running production Kubernetes on a managed cloud (EKS strongly preferred), including stateful workloads.
• Experience operating infrastructure entirely through Infrastructure as Code — no console-driven change management.

Technical expertise

• Kubernetes / EKS: cluster lifecycle and upgrades, autoscaling (Karpenter, KEDA, VPA), ingress and load balancing, IRSA/Pod Identity, core add-ons (cert-manager, external-dns, CoreDNS, node-local-dns).
• GitOps / Argo: ArgoCD for platform and application delivery (app-of-apps, Helm chart authoring, sync and rollback strategies), Argo Rollouts for progressive delivery, Argo Workflows/Events for automation.
• Databases and stateful services on Kubernetes: deploying and operating databases via Kubernetes operators — PostgreSQL and MySQL (Percona operators), ScyllaDB, Elasticsearch, Valkey/Redis, Kafka (Strimzi) — plus AWS RDS/Aurora where managed services fit better; backup/restore, upgrades, and capacity management for stateful workloads.
• Terraform: authoring reusable, versioned, tested modules (not just consuming them) — variable/output interface design, `terraform test`, semantic versioning, remote state on S3.
• CI/CD & automation: pipeline design in GitHub Actions or GitLab CI; plan/apply automation with Atlantis; policy-as-code gates (OPA/Conftest, checkov, tflint); pre-merge validation and drift detection.
• AWS core services: VPC and network design, Route 53, IAM (least‑privilege roles and policies), S3, RDS/Aurora.
• Observability: Datadog, OpenTelemetry (collector and kube-stack), Grafana; alerting hygiene with low false‑positive rates; log and event pipelines.
• Programming: solid scripting/tooling ability in Python or Go — enough to build renderers, validators, and pipeline tooling, not just glue scripts.
• Nice to have: data platform tooling (Airflow, Spark on Kubernetes, Temporal, StarRocks), identity and SSO (Keycloak, Dex, oauth2-proxy), load testing with k6, FinOps practices (tagging standards, cost allocation, rightsizing).
• Strong problem-solving and analytical abilities; comfortable debugging across the stack (DNS → LB → cluster → workload → database).
• Clear written communication — design docs, runbooks, and PR descriptions are first‑class deliverables here.
• Collaborative mindset: infrastructure changes ship through peer review, and platform decisions are made with (not for) application teams.
• Platform thinking: design paved roads that make the secure, cost‑efficient path the easy path for application teams.
• Automation‑first: if a task is done twice manually, the third time is a pipeline.
• Ownership: own services end to end — provisioning, upgrades, incidents, cost, and documentation.
• Cost awareness: treat cloud spend as an engineering metric; tag, measure, and optimize continuously.
• Adaptability: comfortable in a fast‑moving environment where the platform itself is under active development.

Success metrics (first 6–12 months)

• Application teams provision standard infrastructure through the self‑service platform with no manual Terraform written by requesters.
• EKS cluster and node‑group upgrades executed as routine, zero‑downtime operations via blue/green rollout.
• Operator‑managed data services (PostgreSQL, Kafka, Elasticsearch, etc.) run with tested backup/restore and rehearsed upgrade procedures.
• 100% of infrastructure changes delivered through reviewed, policy‑gated pipelines — zero out‑of-band console changes.
• Deployment lead time for platform changes reduced measurably (target: same‑day merge‑to‑production for routine changes).
• Cost visibility established via tagging and dashboards, with identified savings executed (rightsizing, autoscaling, storage tiering).
• Actionable alerting: on‑call pages correspond to real incidents; false‑positive alerts trend toward zero.
• Mean time to recovery for platform incidents under 30 minutes.

• Competitive salary aligned with industry standards and experience.
• Professional development certification support (CKA, AWS, Terraform) and training across cloud, platform, and data engineering.
• Comprehensive benefits health insurance and flexible working options.
• Growth opportunities career progression within TookiTaki's expanding infrastructure and platform organization.