Principal Platform Engineer

ELLKAY; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, Dental, and Vision benefits

Employer-paid Life and LTD

401k w/ matching – once eligibility is

Remote work options

Paid Volunteer Program

Flexible working hours

Generous FTO

Parental Leave

Gym membership / Exercise class stips

Job summary

ELLKAY in the United States is seeking a Principal Platform Engineer to own the design, build, and operational health of our infrastructure across AWS, Azure, and on-prem environments. This is a hands-on, high-ownership role bridging Platform Engineering and SRE, setting standards for deployment, observation, security, and cost governance at scale in a hybrid cloud and on-prem ecosystem.

You will be the primary technical bridge between Platform Engineering and SRE, guiding services from commit

Qualifications

• 15+ years in platform engineering, infrastructure engineering, DevOps, or SRE roles.
• Deep production-grade experience with AWS and Azure, plus hybrid on-prem.
• Expert-level Terraform — module design, state management at scale.
• CI/CD pipelines for Kubernetes and Docker-based workloads.
• Hands-on with configuration management tools (Ansible, Chef, Puppet).
• Proven observability stack implementation and actionable SLIs/SLOs.
• Experience leading production incident response and reliability improvements.
• Cloud cost governance and security/compliance in multi-cloud/hybrid.

Responsibilities

• Design, build, and maintain infrastructure across AWS, Azure, and on-prem.
• Architect and implement CI/CD pipelines for containerized services.
• Own configuration management tooling and practices across hybrid environments.
• Design observability patterns and define SLIs/SLOs with cross-functional teams.
• Lead incident response and drive durable remediation and postmortems.
• Design and enforce cost and security governance across environments.

Skills

IaC

Terraform

Kubernetes

CI/CD pipelines

SRE collaboration

Incident response

Cost governance

Python/Go

Security posture

Cross-functional leadership

Tools

Terraform

Ansible

Chef

Puppet

Kubernetes

Prometheus

Grafana

Datadog

OpenTelemetry

ELK/Splunk

Job description

ELLKAY started out providing connectivity solutions to laboratories and within a few years, grew to also provide data management solutions to ambulatory organizations. ELLKAY is now a trusted data management partner in five healthcare segments. ELLKAY’s solutions continue to serve laboratories and ambulatory practices and have expanded to empower hospitals and health systems, healthcare IT vendors, ambulatory practices, health plans, and other healthcare organizations with cutting-edge technologies and solutions that drive their growth and interoperability strategies.

Today, ELLKAY remains true to our core values, building strong partner relationships and offering unparalleled service and support while providing innovative, scalable solutions to the challenges our customers face in today’s data-rich world.

ELLKAY's experience, customer-focused approach, and reputation for innovation, speed, and accuracy differentiate ELLKAY as a premier partner for your interoperability needs and data management strategy.

Job Description

We're looking for a Principal Platform Engineer to own the design, build, and operational health of our infrastructure across AWS, Azure, and on-premises environments. This is a hands-on, high-ownership role for someone who thinks in systems, codifies everything, and is equally comfortable writing Terraform modules, debugging a production incident at 2 AM, and advising leadership on cost and security posture.

You will be the primary technical bridge between Platform Engineering and our Site Reliability Engineering (SRE) teams, setting the standards for how services are deployed, observed, secured, and operated at scale across hybrid cloud and on-prem infrastructure.

Essential Duties & Responsibilities

Infrastructure as Code

• Design, build, and maintain reusable Terraform modules to provision and manage infrastructure across AWS, Azure, and on-prem environments
• Establish IaC standards, module versioning strategy, state management practices, and review processes across engineering teams
• Drive migration of manually managed infrastructure to fully codified, version-controlled definitions

Deployment Pipelines & Containerized Services

• Architect and implement CI/CD pipelines for containerized and Kubernetes-based services, from build through progressive production rollout
• Define deployment strategies (blue/green, canary, rolling) and the automation that supports them
• Partner with development teams to streamline the path from commit to production while maintaining safety and auditability

Configuration Management

• Own configuration management tooling and practices across hybrid environments (e.g., Ansible, Chef, Puppet, or equivalent) to ensure consistency, repeatability, and drift detection
• Standardize secrets management, environment configuration, and golden image/baseline practices across cloud and on-prem fleets

Observability

• Design and implement observability patterns (metrics, logging, tracing) that provide actionable signal across distributed, hybrid-cloud services
• Define SLIs/SLOs in partnership with SRE and product teams, and build the dashboards and alerting that make them actionable
• Reduce mean-time-to-detect (MTTD) and mean-time-to-resolve (MTTR) through better instrumentation, not just more of it

Production Reliability

• Act as a senior escalation point for complex production incidents, driving root cause analysis and durable remediation
• Lead or contribute to postmortems and translate findings into infrastructure, process, or tooling improvements
• Proactively identify and remediate reliability risk before it becomes an incident

Cost & Security Governance

• Design and implement cost governance practices - tagging standards, budget alerting, rightsizing, and reserved capacity strategy across AWS, Azure, and on-prem infrastructure
• Partner with Security to define and enforce infrastructure security guardrails (IAM least-privilege, network segmentation, secrets handling, compliance controls)
• Build automated policy enforcement (e.g., policy-as-code) so governance scales with infrastructure rather than depending on manual review

Cross-Team Leadership

• Serve as the primary point of contact between Platform Engineering and SRE teams, aligning on standards, priorities, and shared tooling
• Mentor senior and mid-level engineers on infrastructure design, operational excellence, and IaC best practices
• Influence infrastructure architecture and technical roadmap at the organizational level

Qualifications

• 15+ years in platform engineering, infrastructure engineering, DevOps, or SRE roles, with demonstrated staff-level scope and impact
• Deep, production-grade experience with both AWS and Azure, plus experience managing on-premises infrastructure in a hybrid model
• Expert-level Terraform experience - module design, state management, workspace/environment strategy at scale
• Strong experience building CI/CD pipelines for Kubernetes and Docker-based workloads
• Hands-on experience with configuration management tooling (Ansible, Chef, Puppet, or similar)
• Proven track record implementing observability stacks (e.g., Prometheus, Grafana, Datadog, OpenTelemetry, ELK/Splunk) and defining meaningful SLIs/SLOs
• Demonstrated experience leading production incident response and driving reliability improvements
• Experience designing cloud cost governance and security/compliance frameworks in a multi-cloud or hybrid environment
• Strong scripting/programming ability (Python, Go, or Bash) for automation and tooling
• Excellent cross-functional communication — able to work directly with SRE, security, and engineering leadership

Preferred

• Experience with policy-as-code frameworks (OPA/Gatekeeper, Sentinel)
• Relevant certifications (AWS, Azure, CKA/CKAD)
• Experience operating infrastructure under regulatory or compliance requirements (SOC 2, HIPAA, PCI-DSS, ISO 27001)
• Prior experience in an on-call rotation for critical production systems
• History of mentoring engineers or leading infrastructure initiatives across multiple teams

Benefits

ELLKAY offers a comprehensive and competitive benefit package that starts day one!

Including

• Medical, Dental, and Vision benefits
• Employer-paid Life and LTD
• 401k w/ matching – once eligibility is met
• Work/life balance
• Paid Volunteer Program
• Flexible working hours
• Generous FTO
• Remote work options
• Employee Discounts
• Parental Leave
• Gym membership / Exercise class stipends

Our Awesome Culture Includes

• Working with talented, collaborative, and friendly people who love what they do
• Professional growth within
• Innovation environment
• On site in HQ Free daily lunches

Awards

• 2025 Top Workplaces Employee Appreciation
• 2025 Top Workplaces Employee Well-Being
• 2025 Top Workplaces Professional Development
• 2025 Top Workplaces Leadership
• 2026 USA Today Top Workplaces
• 2026 NJ Top Workplaces

Additional Information

At ELLKAY, we are committed to operating as a hybrid workplace, offering employees flexibility in how they structure their time between in-office and remote work. We recognize the significance of fostering connections, collaboration, and creativity within our office culture and its positive impact on our business. Our philosophy of operating as a hybrid workplace underscores our dedication to enabling employees to tailor work-life balance to their individual preferences. For those who do not live within 40 miles of one of our offices, we are open to considering remote work for candidates whose skills and experience strongly align with the role. While we prioritize a hybrid work environment for most roles, we understand the importance of flexibility and are open to remote work for specific positions and specialized skill sets.

For more information on our company, visit www.ELLKAY.com.

ELLKAY LLC is a Smoke-Free Workplace.

ELLKAY, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.