Platform Engineer

Bain & Company; Houston (TX); Hybrid; USD 74,000 - 81,000; Full time

Benefits offered by this job

401(k) plan

Competitive benefits

Paid time off

Job summary

Bain & Company is seeking Platform Engineers to develop and operate backend services powering the Bain Diligence Platform. You will contribute to REST APIs, database schemas, and distributed systems with a focus on reliability and security.

You will collaborate across teams to design, implement, and run platform services using FastAPI, PostgreSQL, Redis, and Kubernetes on Azure. This is a hybrid role with in-office presence at least one day per week.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS/Engineering/IS.
• 2+ years building backend services, APIs, or platform components in production.
• Experience with REST APIs, Postgres, and migration workflows.
• Exposure to containerised development (Docker) and Kubernetes in Azure AKS.
• Knowledge of authentication/authorization concepts (JWT, RBAC, OIDC/SAML) and secure-by-default services.
• Proficient Python development using FastAPI, Pydantic, pytest, and type-checking.
• Familiarity with Postgres, Redis, and observability patterns.

Responsibilities

• Develop backend features and service endpoints under guidance of senior engineers.
• Build and maintain REST APIs in FastAPI with robust input validation and error handling.
• Manage Postgres schemas and Alembic migrations with safe patterns.
• Use Redis for caching and session storage per platform conventions.
• Implement event-driven integrations and maintain observability with logs and Datadog metrics.
• Contribute to Terraform for Azure deployments and work within GitHub Actions CI/CD pipelines.
• Participate in code reviews and collaborate with Security and Infra teams.

Skills

Python development

FastAPI

PostgreSQL

Docker

Kubernetes

GitHub Actions

Education

Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field

Tools

Docker

Kubernetes

Azure AKS

Terraform

GitHub Actions

Cloudsmith

Helm

Job description

Atlanta, Austin, Chicago, Dallas, Houston

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times.

Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU’LL WORK WITH

As the premier consulting partner for the private equity industry, Bain's PEG boasts a global practice that is over three times larger than any competitor. Our network of over 1,000 professionals supports private equity and institutional investor clients through every stage of the investment life cycle, from deal generation and due diligence to portfolio value creation and exit planning.

Bain & Company is developing a suite of cutting-edge data and software solutions designed to revolutionize how the private equity industry uses data for investment insights and decision-making.

The PEG Innovation team's mission is to create analytical solutions for Bain clients, teams, and the broader institutional investor space using proprietary software and data products. This includes the development, commercialization, and daily management of Bain's proprietary datasets, data, and software businesses.

WHERE YOU’LL FIT WITHIN THE TEAM

Platform Engineers build and maintain the shared backend services that power the Bain Diligence Platform (BDP). These include enterprise SSO, session management, audit, case and case-provenance APIs, document and file access (Microsoft Graph / SharePoint and Azure Blob Storage), search with source citations, and the API gateway. You contribute to services across the full delivery lifecycle — design, build, test, deploy, monitor, and operate — with guidance from senior engineers. You write reliable, well-tested code, follow platform engineering standards, and help ensure services are secure-by-default, observable, and production-ready. You collaborate closely with Platform, Data & Intelligence, Security, and Infrastructure teammates to deliver shared capabilities that are stable, scalable, and easy for squads to consume as the platform hardens.

WHAT YOU'LL DO

Core Platform Service Development, Deployment, and Operations (80%)

• Implement backend features and service endpoints in existing platform services under the guidance of senior engineers.
• Build and maintain REST APIs in FastAPI using clear contracts, input validation, and consistent error handling.
• Write and update Postgres schemas and Alembic migrations using safe patterns (including backwards-compatible changes) with review support.
• Use Redis for standard platform patterns such as caching, session storage, and rate limiting under established conventions.
• Use event-driven integration where asynchronous behaviour adds clear value (for example change feeds and domain events, following existing schema and envelope conventions), consistent with the platform's simple-now, evolve-when-needed approach.
• Add and maintain service instrumentation: structured logs, OpenTelemetry-style spans, and Datadog metrics and APM traces according to platform standards.
• Update and maintain Helm chart values and Kubernetes manifests for services deployed to Azure Kubernetes Service (AKS); ensure probes, resource requests/limits, and environment configuration are correct, and support blue/green candidate/promote deployments.
• Contribute to Terraform infrastructure-as-code for Azure, deployed through env0 / Terraform Cloud across dev, UAT, and prod environments, with review support.
• Work within GitHub Actions pipelines: pull-request test suites, branch-to-environment promotion (main → Dev, release/X.Y → UAT/Prod), image publishing to Cloudsmith, and blue/green candidate/promote deploys with approval gates.
• Triage and resolve routine production issues for owned services; participate in on-call rotation with support and follow established runbooks.
• Write and update runbooks and service documentation for changes you ship, ensuring operational steps remain accurate.

Other (20%):

• Participate in code reviews as both author and reviewer; incorporate feedback and apply engineering standards consistently.
• Use AI coding assistants to accelerate boilerplate creation (routers, schemas, tests, docs); review all generated code and align it with platform conventions before committing.
• Use LLMs to draft first-pass documentation (runbook updates, service notes, API docs); validate and refine outputs before publishing.
• Collaborate with Security and Infrastructure on implementation tasks (e.g., Azure Key Vault secret consumption, Entra ID app registrations, network-security-group / private-endpoint constraints, least-privilege configuration, and Wiz security-scan findings) under guidance.
• Contribute to quality improvements (test coverage, refactors, observability, and reliability fixes) as part of regular delivery work.

ABOUT YOU

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field (or equivalent practical experience)
• 2+ years of experience building backend services, APIs, or platform components in a production or near-production environment.
• Demonstrated experience building and maintaining backend services or APIs with an emphasis on reliability and correctness.
• Experience contributing to REST APIs and working with relational databases (Postgres preferred), including basic schema evolution and migration workflows.
• Exposure to containerised development and deployment practices (Docker) and familiarity with operating services in Kubernetes environments (Azure / AKS in practice).
• Exposure to authentication and authorisation concepts (JWT, RBAC, OIDC/SAML — Entra ID / Azure AD in practice) and interest in building secure-by-default services.
• Demonstrated ability to learn from feedback, collaborate effectively, and deliver production-ready work within established engineering standards.
• Proficient Python development skills; able to build FastAPI services using Pydantic, write tests with pytest, and follow linting/type-checking standards (Ruff, mypy), and manage environments and dependencies with uv.
• Working knowledge of Postgres fundamentals: schema design basics, indexing concepts, and safe migration practices with Alembic.
• Working knowledge of Redis patterns for caching and session storage; understands basic failure modes and operational considerations.
• Familiarity with event-driven integration patterns applied where asynchronous behaviour adds value (change feeds / domain events, consumers, retries, idempotency); able to implement producers/consumers within established conventions.
• Docker proficiency for local development and building container images; understands non-root execution and basic image hygiene.
• Kubernetes fundamentals: understands deployments/services, pod lifecycle basics, and how health checks and resource limits affect service behaviour; able to work with Helm values and charts on AKS, including blue/green deployments.
• Observability fundamentals: structured logging, tracing concepts, and emitting metrics and APM traces via Datadog for service health; awareness of MLflow for evaluating AI features.
• Security fundamentals: understands least-privilege access, secret-handling basics, and common authN/authZ concepts; follows established patterns for JWT and RBAC integration, Entra ID, and Azure Key Vault.
• Familiarity with infrastructure-as-code (Terraform) and CI/CD via GitHub Actions; understands environment promotion, container registries (Cloudsmith), Helm chart versioning, and blue/green deployments on AKS.

Generative AI and agentic systems

• Uses AI coding assistants (Cursor, GitHub Copilot, or equivalent) to accelerate development tasks (boilerplate, refactors, basic tests); reviews all outputs critically before committing.
• Uses LLMs to draft first-pass unit tests and documentation; validates correctness, adds missing edge cases, and ensures alignment with platform standards.
• Understands how core platform services (SSO/JWT authentication, RBAC, audit, and case provenance) underpin agentic systems, and why access control, auditability, and provenance matter for AI interactions — including the platform's “skills orchestrate, agents execute” model.
• Familiarity with the LLM-application patterns used on the platform: an LLM gateway (Portkey) for model access and routing, structured / tool-constrained outputs with schema validation and automatic repair, and retrieval-grounded answers with citations back to source.
• Exposure to eval-driven development for AI features — building evaluation cases and using MLflow to measure quality, regressions, and repair uplift before promoting changes.

General

• Treats every service change as production-impacting: writes tests, adds observability where needed, and updates documentation and runbooks.
• Raises risks early (unclear requirements, security concerns, migration risk, operational impact) and seeks help appropriately.
• Uses AI tooling to move faster, but applies judgement and careful review to all generated code and documentation before it enters the codebase.
• Maintains a strong ownership mindset for assigned work: follows through from implementation to deployment support and post-release verification.
• Favours the simplest solution that meets the need — introducing new components, services, or infrastructure only when a concrete requirement justifies it, and keeping services secure-by-default, observable, versioned, and backward-compatible.
• This role follows a hybrid model, requiring in-office presence at least 1 day per week

U.S. COMPENSATION INFORMATION

Compensation for this role includes base salary, annual discretionary performance bonus, 401(k) plan with an annual employer contribution based on years of service and Bain’s best in class benefits package (details listed below).

Some local governments in the United States require a good-faith, reasonable salary range be included in job postings for open roles. The estimated annualized compensation for this role is as follows:

In Atlanta, the good-faith, reasonable annualized full-time salary range for this role is between $70,375 - $76,750

In Texas, the good-faith, reasonable annualized full-time salary range for this role is between $73,750 - $80,500

In Chicago, the good-faith, reasonable annualized full-time salary range for this role is between $77,500 - $84,500

Placement within these ranges will vary based on factors such as experience, education, training, and skill level.

Compensation also includes a discretionary annual performance bonus, 401(k) plan with employer contribution, and Bain’s best-in-class benefits—including full premium coverage for medical, dental, and vision, generous paid time off, and more.

Annual discretionary performance bonus

This role may also be eligible for other elements of discretionary compensation

4.5% 401(k) company contribution, which increases after 3 years of service and is 100% vested upon start date

Bain & Company's comprehensive benefits and wellness program is designed to help employees achieve personal independence, protection and stability in the areas most important to you and your family.

Bain pays 100% individual employee premiums for medical, dental and vision programs, offering one of the most comprehensive medical plans for employees without impacting your paycheck

Generous paid time off, including parental leave, sick leave and paid holidays

Fully vested 401(k) company contribution

Paid Life and Long-Term Disability insurance