Developer Platform Engineer

Embedding; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Embedding is building a Financial Cloud developer platform in San Francisco, delivering scalable CI/CD pipelines, GitOps automation, and asset management across global sites. You’ll co-create a graph-driven dependency analysis engine and change-impact tooling used by hundreds of engineers daily.

You will collaborate with the Platform Architect to translate architecture blueprints into production-grade systems, enabling hundreds of modules to be independently built, tested, composed, and deployed

Qualifications

• 6+ years in backend/platform/infrastructure engineering.
• Strong Go, Java/Kotlin, and Python capabilities.
• Production CI/CD experience with GitHub Actions, Tekton, Jenkins or equivalents.
• Hands-on with GitOps: ArgoCD, Flux, Kustomize at scale.
• Kubernetes knowledge: operators, CRDs, Helm charts.
• Artifact management and registries (Harbor, ECR, Artifactory).
• Experience with build systems and graph databases.

Responsibilities

• Build module-level CI/CD pipelines from commit to versioned artifacts.
• Develop build provenance automation and attestation integration.
• Create the dependency graph database and queryable graph for impact analysis.
• Develop change impact analysis tooling for PRs and selective test orchestration.
• Implement GitOps deployment engine with ArgoCD/Flux and automated promotions.
• Build site provisioning tooling and a version management console.
• Support security patch workflows and four-layer test orchestration.

Skills

Go

Java/Kotlin

Python

CI/CD

GitOps

Kubernetes

ArgoCD

Flux

Container Registry

Bazel

Gradle

Graph DB

AWS/GCP

Tools

ArgoCD

Flux

Kustomize

GitHub Actions

Tekton

Jenkins

Harbor

ECR

Artifactory

Bazel

Gradle

Neo4j

Dgraph

Job description

About the Role

You will be a core builder of the Financial Cloud developer platform — implementing the CI/CD pipelines, GitOps automation, artifact management, dependency graph engine, and change impact analysis tooling that allow 50-100 versioned modules to be independently built, tested, composed, and deployed across dozens of global compliance sites. You'll work directly with the Platform Architect to turn architecture blueprints into production systems used daily by hundreds of engineers.

Key Responsibilities

1. Build module-level CI/CD pipelines: from commit to versioned artifact (Docker image + K8s manifest) published to the artifact registry, with reproducible build enforcement (hermetic environments, pinned toolchains, deterministic outputs)
2. Implement build provenance automation: SLSA attestation generation, artifact signing, dependency chain verification integrated into every pipeline; Golden Signals validation in CI that blocks releases missing required metrics endpoints
3. Develop the dependency graph database: ingest static dependencies (code imports, API contracts, schema references) + runtime dependencies (service mesh traces), provide queryable graph for impact analysis
4. Build change impact analysis tools: given a PR, compute affected modules/sites/tests and surface results in the PR review UI; implement selective test orchestration that only runs dependency-graph-proven relevant tests
5. Implement the GitOps deployment engine: ArgoCD/Flux controllers managing site config repos, automated reconciliation, staging canary production promotion with Golden Signals monitoring and auto-rollback
6. Build site provisioning tooling: scaffolding tools that generate new site config repos with module version pinning + compliance parameters; self-service console for configuration-type sites
7. Develop the version management console: module version status, version drift visualization across all sites, batch upgrade workflows, automated changelog generation, compatibility checking before deployment
8. Implement the security patch force-push pipeline: automated SECURITY-REQUIRED PR creation across all site repos with SLA tracking and escalation triggers
9. Build the four-layer test orchestrator: automated test selection by module/country/scenario tags, parallel execution at scale, coverage gap detection that blocks deployments with actionable feedback

Major Requirements

1. 6+ years in backend / platform / infrastructure / developer tools engineering
2. Strong proficiency in Go (primary) or Java/Kotlin, with scripting in Python
3. Production experience with CI/CD pipeline development: GitHub Actions, Tekton, Jenkins, or custom pipeline orchestrators
4. Hands-on with GitOps tooling: ArgoCD, Flux, Kustomize — at scale (10+ clusters/environments)
5. Experience with Kubernetes: operators, custom controllers, CRDs, Helm chart development
6. Solid understanding of container registries and artifact management (Harbor, ECR, Artifactory)
7. Experience with build systems: Bazel, Gradle, or equivalent — reproducible builds, remote caching, build graph optimization
8. Background in dependency analysis tooling or graph databases (Neo4j, Dgraph, or custom implementations)
9. Preferred: Experience at AWS (CodePipeline, CodeBuild, Proton, Service Catalog) or GCP (Cloud Build, Artifact Registry, Cloud Deploy)
10. Preferred: Background at Stripe, Adyen, or Square in developer platform teams
11. Preferred: Experience building internal developer platforms (IDP) or platform-as-a-service for engineering organizations
12. Preferred: Familiarity with supply chain security tooling (Sigstore, in-toto, SBOM generation)