Developer Platform Engineer

Embedding VC; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Embedding VC is building a Financial Cloud developer platform in San Francisco. You will implement CI/CD pipelines, GitOps automation, artifact management, and a dependency graph engine to enable 50-100 versioned modules to be built, tested, and deployed across global compliance sites.

You'll work directly with the Platform Architect to turn architecture blueprints into production systems used daily by hundreds of engineers.

Qualifications

• 6+ years in backend/platform engineering.

Responsibilities

• Build module-level CI/CD pipelines: from commit to versioned artifact (Docker image + K8s manifest) published to the artifact registry, with reproducible build enforcement (hermetic environments, pinned toolchains, deterministic outputs)
• Implement build provenance automation: SLSA attestation generation, artifact signing, dependency chain verification integrated into every pipeline; Golden Signals validation in CI that blocks releases missing required metrics endpoints
• Develop the dependency graph database: ingest static dependencies (code imports, API contracts, schema references) + runtime dependencies (service mesh traces), provide queryable graph for impact analysis
• Build change impact analysis tools: given a PR, compute affected modules/sites/tests and surface results in the PR review UI; implement selective test orchestration that only runs dependency-graph-proven relevant tests
• Implement the GitOps deployment engine: ArgoCD/Flux controllers managing site config repos, automated reconciliation, staging → canary → production promotion with Golden Signals monitoring and auto-rollback
• Build site provisioning tooling: scaffolding tools that generate new site config repos with module version pinning + compliance parameters; self-service console for configuration-type sites
• Develop the version management console: module version status, version drift visualization across all sites, batch upgrade workflows, automated changelog generation, compatibility checking before deployment
• Implement the security patch force-push pipeline: automated SECURITY-REQUIRED PR creation across all site repos with SLA tracking and escalation triggers
• Build the four-layer test orchestrator: automated test selection by module/country/scenario tags, parallel execution at scale, coverage gap detection that blocks deployments with actionable feedback

Skills

Go (primary)

Java/Kotlin

Python scripting

CI/CD pipelines

GitOps tooling

Kubernetes

Container registries

Build systems

Graph databases

AWS / GCP

Tools

ArgoCD

Flux

Kustomize

Harbor

Amazon ECR

Artifactory

Bazel

Gradle

Neo4j

Dgraph

CodePipeline

CodeBuild

Cloud Deploy

Job description

About the Role

You will be a core builder of the Financial Cloud developer platform — implementing the CI/CD pipelines, GitOps automation, artifact management, dependency graph engine, and change impact analysis tooling that allow 50-100 versioned modules to be independently built, tested, composed, and deployed across dozens of global compliance sites. You'll work directly with the Platform Architect to turn architecture blueprints into production systems used daily by hundreds of engineers.

Key Responsibilities

1. Build module-level CI/CD pipelines: from commit to versioned artifact (Docker image + K8s manifest) published to the artifact registry, with reproducible build enforcement (hermetic environments, pinned toolchains, deterministic outputs)

2. Implement build provenance automation: SLSA attestation generation, artifact signing, dependency chain verification integrated into every pipeline; Golden Signals validation in CI that blocks releases missing required metrics endpoints

3. Develop the dependency graph database: ingest static dependencies (code imports, API contracts, schema references) + runtime dependencies (service mesh traces), provide queryable graph for impact analysis

4. Build change impact analysis tools: given a PR, compute affected modules/sites/tests and surface results in the PR review UI; implement selective test orchestration that only runs dependency-graph-proven relevant tests

5. Implement the GitOps deployment engine: ArgoCD/Flux controllers managing site config repos, automated reconciliation, staging → canary → production promotion with Golden Signals monitoring and auto-rollback

6. Build site provisioning tooling: scaffolding tools that generate new site config repos with module version pinning + compliance parameters; self-service console for configuration-type sites

7. Develop the version management console: module version status, version drift visualization across all sites, batch upgrade workflows, automated changelog generation, compatibility checking before deployment

8. Implement the security patch force-push pipeline: automated SECURITY-REQUIRED PR creation across all site repos with SLA tracking and escalation triggers

9. Build the four-layer test orchestrator: automated test selection by module/country/scenario tags, parallel execution at scale, coverage gap detection that blocks deployments with actionable feedback

Major Requirements

1. 6+ years in backend / platform / infrastructure / developer tools engineering

2. Strong proficiency in Go (primary) or Java/Kotlin, with scripting in Python

3. Production experience with CI/CD pipeline development: GitHub Actions, Tekton, Jenkins, or custom pipeline orchestrators

4. Hands-on with GitOps tooling: ArgoCD, Flux, Kustomize — at scale (10+ clusters/environments)

5. Experience with Kubernetes: operators, custom controllers, CRDs, Helm chart development

6. Solid understanding of container registries and artifact management (Harbor, ECR, Artifactory)

7. Experience with build systems: Bazel, Gradle, or equivalent — reproducible builds, remote caching, build graph optimization

8. Background in dependency analysis tooling or graph databases (Neo4j, Dgraph, or custom implementations)

9. Preferred: Experience at AWS (CodePipeline, CodeBuild, Proton, Service Catalog) or GCP (Cloud Build, Artifact Registry, Cloud Deploy)

10. Preferred: Background at Stripe, Adyen, or Square in developer platform teams

11. Preferred: Experience building internal developer platforms (IDP) or platform-as-a-service for engineering organizations

12. Preferred: Familiarity with supply chain security tooling (Sigstore, in-toto, SBOM generation)