DevOps/Senior Platform Engineer

Upstaff LTD; United States; Remoto; USD 120.000 - 190.000; Tempo pieno

Descrizione del lavoro

Upstaff LTD seeks a Senior Platform Engineer to design, build, and operate cloud infrastructure and internal developer platforms. The role emphasizes reliability, scalability, security, and cost efficiency while enabling engineering teams through automated, self-service workflows.

The engineer will lead cloud modernization, establish SRE practices, and mentor teams while delivering reusable components and standardized delivery processes. Strong hands-on and leadership skills required.

Competenze

• Senior-level platform engineering experience.
• Strong AWS/Azure cloud background.
• Hands-on Terraform/OpenTofu and IaC automation.
• Proficient Kubernetes and container workloads.
• Experience with CI/CD, GitOps and automated provisioning.
• Observability, reliability and incident management practices.
• Understanding of cloud security, access governance, and policy enforcement.
• Experience building reusable platform components and self-service capabilities.

Mansioni

• Design, build, and operate cloud infra and internal platforms.
• Modernize cloud infrastructure with OpenTofu/Terraform and Ansible.
• Define IaC standards, remote state, and GitOps workflows.
• Implement policy-as-code and cloud governance (OPA/Conftest, SCPs, Azure Policy).
• Develop reusable infrastructure components for compute, network, storage, identities.
• Establish FinOps practices and cost governance.
• Deploy and maintain Backstage-based developer portal and golden paths.
• Own CI/CD platform layer, pipelines, image scanning, and promotions.
• Collaborate across teams, mentor juniors, and drive platform improvements.
• Manage Kubernetes on EKS/AKS, with Helm, RBAC, and network policies.

Conoscenze

OpenTofu

Terraform

Ansible

Kubernetes

AWS

Azure

EKS

AKS

Helm

RBAC

Network policies

Prometheus

Grafana

Loki

OpenTelemetry

Backstage

CI/CD

GitOps

SRE

FinOps

Policy-as-code

IaC scanning

Formazione

AWS Solutions Architect - Associate/Professional

CKA/CKAD

Terraform Associate

Strumenti

Backstage

Prometheus

Datadog

Loki

OpenSearch

Tempo

Grafana

OpenTelemetry

Istio

Linkerd

OPA/Conftest

SCPs

Azure Policy

tfsec

Checkov

Vault

AWS Secrets Manager

Azure Key Vault

GitHub Actions

GitLab CI

Descrizione del lavoro

• 5+ years of experience in AWS and Azure cloud infrastructure, specializing in OpenTofu/Terraform module development, state management, and GitOps CI/CD integration.
• Expert in Kubernetes operations EKS/AKS lifecycle, Helm, RBAC, and network policies.
• Skilled in building observability stacks (Prometheus, Grafana, Loki, and OpenTelemetry), with strong SLI/SLO.
• Skilled in developing Internal Developer Platforms with Backstage, CI/CD pipelines, and security-first practices including policy-as-code and IaC scanning.
• Experienced in chaos engineering, service mesh (Istio/Linkerd), and FinOps tooling.
• Holds certifications in AWS Solutions Architect, CKA/CKAD, and Terraform Associate.

Role Overview

We are looking for a Senior Platform Engineer to design, build, and operate cloud infrastructure and internal developer platforms. The role focuses on improving infrastructure reliability, scalability, security, and cost efficiency while enabling engineering teams to deliver software through standardized, automated, and self-service workflows.

The engineer will drive cloud infrastructure modernization, establish Site Reliability Engineering (SRE) practices, develop reusable infrastructure components, and improve developer experience through internal platforms and standardized delivery workflows. The position combines hands-on engineering with technical leadership, cross-team collaboration, and mentoring.

Responsibilities

Cloud Infrastructure & Infrastructure as Code

• Modernize and manage AWS and Azure infrastructure using OpenTofu/Terraform and Ansible.
• Establish infrastructure-as-code standards, reusable modules, remote state management, and GitOps-based infrastructure deployment workflows.
• Audit cloud environments against AWS and Azure Well-Architected Frameworks and drive improvements across networking, identity and access management, account structure, landing zones, security, and cost governance.
• Implement policy-as-code and cloud governance controls using OPA/Conftest, AWS Service Control Policies (SCPs), and Azure Policy.
• Develop reusable infrastructure components for compute, networking, storage, databases, and identity.
• Establish FinOps practices covering resource tagging, cost allocation, rightsizing, and reserved capacity planning.

SRE & Observability

• Design and maintain observability solutions covering metrics, logs, traces, dashboards, and application performance monitoring.
• Define Service Level Indicators (SLIs) and Service Level Objectives (SLOs), and implement error budget tracking and burn-rate alerting.
• Establish SRE practices, including incident runbooks, post-incident reviews, and chaos engineering exercises.
• Collaborate with engineering teams to improve service instrumentation, alert quality, operational visibility, and reliability.
• Develop compute and storage capacity planning models to support infrastructure scaling decisions.

Internal Developer Platform & Developer Experience

• Deploy and operate an internal developer portal, such as Backstage, providing a service catalog, scaffolding templates, runbooks, API documentation, and service ownership information.
• Build and maintain standardized developer workflows (golden paths) for service creation, Kubernetes deployments, database provisioning, secrets management, and CI/CD setup.
• Develop self-service provisioning capabilities that allow engineering teams to deploy approved infrastructure resources through automated workflows.
• Own the CI/CD platform layer, including reusable pipeline templates, workflow libraries, container image build and scanning, and environment promotion processes.
• Improve developer workflows through security integration, standardized defaults, feedback collection, and continuous platform improvements.

Kubernetes & Security

• Manage Kubernetes platform operations across Amazon EKS and/or Azure AKS, including cluster lifecycle, Helm standards, admission controllers, RBAC, and network policies.
• Support service mesh implementations using technologies such as Istio or Linkerd.
• Integrate security into infrastructure and delivery workflows through IaC scanning, secrets management, access controls, and container image hardening.
• Support workload migrations to the platform, providing practical engineering assistance to development teams.

Technical Leadership & Collaboration

• Document platform architecture, technical decisions, operational procedures, and runbooks.
• Participate in architecture reviews and build-versus-buy decisions.
• Collaborate with engineering teams on infrastructure adoption, workload migrations, and platform improvements.
• Mentor junior engineers and promote consistent engineering, security, and operational practices.

Technologies & Tools

• Cloud Platforms: AWS, Microsoft Azure
• Infrastructure as Code & Automation: OpenTofu, Terraform, Ansible
• Cloud Governance: OPA/Conftest, AWS SCPs, Azure Policy, FinOps practices
• Kubernetes & Containers: EKS, AKS, EC2, Helm, Istio, Linkerd
• SRE & Observability: Prometheus, Datadog, Loki, OpenSearch, Tempo, Grafana, OpenTelemetry, AWS Fault Injection Simulator
• Internal Developer Platforms: Backstage, service catalogs, scaffolding, self-service provisioning, golden paths
• CI/CD & DevOps: GitHub Actions, GitLab CI, GitOps, automated deployments, SAST, Snyk
• Security: Checkov, tfsec, Vault, AWS Secrets Manager, Azure Key Vault, RBAC, container image hardening

Requirements

• Senior-level experience in platform engineering, cloud infrastructure, DevOps, or SRE.
• Strong experience with AWS and/or Azure cloud environments.
• Practical experience with Terraform/OpenTofu and infrastructure automation.
• Experience with Kubernetes and containerized workloads.
• Knowledge of CI/CD, GitOps, and automated infrastructure provisioning.
• Experience implementing observability, reliability, and incident management practices.
• Understanding of cloud security, access management, policy enforcement, and infrastructure governance.
• Experience improving developer workflows through reusable platform components or self-service capabilities.
• Understanding of cloud cost optimization and FinOps principles.
• Strong collaboration, technical documentation, and mentoring skills.

Certifications

The following certifications are a plus:

• AWS Solutions Architect - Associate or Professional
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD)
• Microsoft Azure Administrator or Azure Solutions Architect
• HashiCorp Terraform Associate