Senior Platform Engineer

Locatee AG; Oregon; Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Flexible work environment

Inclusive & collaborative culture

Job summary

Tango Analytics is seeking a Senior Platform Engineer to help build a platform engineering function from the ground up. You will rearchitect cloud estates on AWS and Azure, establish a world-class SRE and observability practice, and create an Internal Developer Platform with golden paths for fast, safe, self-service software delivery.

This high-ownership, individual-contributor role reports to the Platform Engineering Manager and emphasizes IaC, policy-as-code, and end-to-end ownership of

Qualifications

• 5+ years in platform, infrastructure, or DevOps engineering with direct production ownership on AWS and/or Azure
• IaC: OpenTofu/Terraform proficiency; module authoring and remote backends
• Kubernetes operations: EKS/AKS lifecycle, RBAC, network policies
• Observability/SRE with two or more of Prometheus, Grafana, Loki, Tempo, Datadog, OpenTelemetry
• CI/CD platform experience: GitHub Actions, reusable workflows, container build/scan
• GitOps: ArgoCD or Flux; canary/blue-green is a plus
• IDP experience: Backstage or similar developer portal
• Security-first mindset: policy-as-code, IaC scanning, secrets management
• Strong communication and documentation skills
• Experience with Cloud FinOps and cost governance

Responsibilities

• Migrate existing AWS/Azure infra to OpenTofu/Terraform and Ansible; establish module standards and GitOps pipelines
• Audit cloud estates against Well-Architected frameworks and drive remediation across networking, IAM, landing zones, and_cost governance
• Implement policy-as-code (OPA/Conftest, AWS SCPs, Azure Policy) at the platform layer
• Build reusable Terraform modules for compute, networking, storage, databases, and identity
• Define FinOps standards: tagging taxonomy and cost dashboards
• Design and implement the full observability stack: Prometheus, Grafana, Loki, Tempo with OpenTelemetry
• Define SLIs/SLOs for platform services; build error budgets and alerting
• Establish the SRE practice with incident runbooks and post-incident reviews
• Collaborate with engineering to instrument services and build reliable dashboards
• Deploy and operate a developer portal (Backstage) as the single entry point
• Own CI/CD platform templates and security-integrated pipelines
• Own Kubernetes platform operations (EKS/AKS, Helm, RBAC, policies)
• Build self-service provisioning and golden paths for high-frequency workflows
• Measure adoption and iterate on developer workflows based on feedback
• Mentor junior engineers and contribute to architecture decisions

Tools

OpenTofu/Terraform

Ansible

Terraform

GitOps

Kubernetes

Prometheus/Grafana

OpenTelemetry

Backstage

AWS

Azure

SRE

CI/CD

Telemetry

Job description

Let’sTango!WhereInnovationMeetsImpact.

At Tango Analytics, we’re all about helping businesses make smarter decisions through powerful technology, insightful data, and a whole lot of collaboration. Whether you are a creative thinker, a strategic planner, a tech wizard, or a customer champion, there's a place for you on our team. We believe work should be meaningfuland fun — so if you're ready to make a difference while enjoying the journey, come join us and let's Tango!

We are looking for an Senior Platform Engineer to join our dynamic and growing Platform Engineering team.

RoleSummary:

We are building a platform engineering function from the ground up and this role is at the center of it. As a SeniorPlatform Engineer you will be a founding team member with a clear, three-part mission: fully rearchitect and codify ourcloud estate on AWS and Azure, stand up a world-class SRE and observability practice, and build an Internal DeveloperPlatform with golden paths that make shipping software fast, safe, and self-service.This is a high-ownership individual contributor role. You will work directly with the Platform Engineering Manager totranslate strategy into production infrastructure, drive adoption across engineering teams, and set the technical barfor how the platform is built and operated.

If you have strong opinions about infrastructure-as-code, love building things other engineers depend on every day, and want genuine end-to-end ownership — this role is for you.

Key Responsibilities:

• Migrate all existing AWS and Azure infrastructure to OpenTofu/Terraform and Ansible; establish module standards, remote state, and GitOps-based plan/apply pipelines — no unmanaged resources
• Audit the cloud estate against the AWS and Azure Well-Architected Frameworks; produce a remediation backlogand drive it to completion across networking, IAM, landing zones, account structure, and cost governance
• Implement policy-as-code (OPA/Conftest, AWS SCPs, Azure Policy) to enforce security, tagging, and complianceguardrails at the platform layer — governance embedded, not bolted on
• Build and maintain reusable Terraform modules for compute (EKS, AKS, EC2), networking, storage, databases, andidentity as shared building blocks for all engineering teams
• Define FinOps standards: tagging taxonomy, cost allocation dashboards, rightsizing recommendations, and reservedcapacity planning across both clouds

SRE & Observability

• Design and implement the full observability stack: metrics (Prometheus/Datadog), logs (Loki/OpenSearch), traces(Tempo/Datadog APM), and dashboards (Grafana) — instrumented end-to-end via OpenTelemetry
• Define SLIs and SLOs for all platform shared services and critical applications; build error budget dashboards andburn-rate alerting — alert on symptoms, not raw metrics
• Establish the SRE practice from scratch: incident runbooks, post-incident review templates, and at least one chaosengineering exercise (AWS FIS or equivalent)
• Partner with engineering teams to instrument their services, define meaningful alerts, and build operationaldashboards — reliability is a shared responsibility, not a platform team tax
• Build capacity planning models for compute and storage so engineering leadership can make data-driven scalingdecisions
• Deploy and operate a developer portal (Backstage, GitHub or equivalent) as the single front door: service catalog,scaffolding templates, runbooks, API docs, and on-call ownership all in one place
• Build and maintain golden paths for the highest-frequency developer workflows: new service creation, Kubernetesdeployment, database provisioning, secrets management, and CI/CD pipeline setup - opinionated defaults withescape hatches for legitimate edge cases
• Own the CI/CD platform layer: standardized pipeline templates (GitHub Actions, GitLab CI), reusable workflowlibraries, container image build and scan pipelines, and environment promotion workflows with security scanning(SAST, Snyk) built in by default
• Own Kubernetes platform operations: EKS and/or AKS cluster lifecycle, Helm chart standards, admission controllers,RBAC, network policies, and service mesh (Istio or Linkerd)
• Build the self-service provisioning layer — Backstage scaffolder actions and Terraform automation so developerscan provision approved resources without raising a ticket
• Measure adoption and run regular feedback sessions with engineering teams; iterate on golden paths based on realfriction, not assumptions

Cross-Cutting Responsibilities

• Partner with peer managers and teams to plan and support migration of existing workloads onto the platform;provide hands-on migration support, not just documentation
• Embed security by default across all platform work: IaC scanning (Checkov, tfsec), secrets management (Vault,AWS Secrets Manager, Azure Key Vault), RBAC, and container image hardening
• Write clear technical documentation, architecture decision records (ADRs), and runbooks; raise the documentationbar for the whole team
• Mentor and support more junior platform engineers; contribute to architecture reviews and build-vs-buy decisionsalongside the Platform Engineering Manager

Required Skills:

• 5+ years in platform, infrastructure, or DevOps engineering with direct production ownership on AWSand/or Azure
• IaC: Deep OpenTofu/Terraform proficiency: module authoring, state management, workspace strategy, remotebackends, and CI/CD integration; Terramate a plus
• Kubernetes: Strong Kubernetes operations: EKS and/or AKS cluster lifecycle, Helm, admission controllers, RBAC,network policies, and autoscaling
• Observability & SRE: Hands-on observability experience with two or more of: Prometheus, Grafana, Loki, Tempo,Datadog, or OpenTelemetry — including SLI/SLO definition and alert engineering
• CI/CD: CI/CD platform experience: GitHub Actions pipeline authoring, reusable workflow design, and containerbuild/scan pipeline ownership
• GitOps: GitOps: ArgoCD or Flux for Kubernetes continuous delivery; progressive delivery patterns (canary, blue-green) a strong plus
• IDP: IDP experience: Backstage or equivalent developer portal, GitHub, scaffolding templates, service catalogdesign, or self-service provisioning tooling
• Security: Security-first mindset: policy-as-code, IaC scanning, secrets management, container hardening, and shift-left security practices
• Strong communication and documentation skills; comfortable presenting architecture decisions to engineeringpeers and leadership

Nice to Have

• SRE background: chaos engineering (AWS FIS, Chaos Monkey), error budget management, incident command, andcapacity planning
• Service mesh depth: Istio or Linkerd — mTLS, traffic management, and observability integration
• FinOps tooling (Kubecost, CloudHealth) and reserved capacity planning experience
• Familiarity with AI/ML infrastructure basics: LLM API integration or model serving, as the platform will need tosupport these workloads
• Certifications: AWS Solutions Architect Associate/Professional, CKA/CKAD, Azure Administrator/SolutionsArchitect, HashiCorp Terraform Associate
• Python or Go for platform tooling and CLI development

What We Offer

We’recommittedtocreatinganenvironmentwhereyoucanthrive—professionallyandpersonally.Ourofferingsinclude:

• CompetitiveCompensationWerecognizeandrewardyourcontributionswithasalarypackagethatreflectsyourvalue.
• ComprehensiveBenefitsIncludinghealth,dental,andvisioninsurance,a401(k)planwithcompanymatch,andgenerouspaidtimeofftosupportyourwell-being.
• FlexibleWorkEnvironmentWhetherremote,hybrid,orin-office,wesupportworkarrangementsthatpromoteproductivityandbalance.
• Inclusive&CollaborativeCultureWefosteraworkplacewherediverseperspectivesarevalued,teamworkisencouraged,andeveryonehasavoice.

Tango is proud to be an equal opportunity employer. We are committed to equal opportunity regardless of race, ethnicity, religion, parental status, sexual orientation, age, citizenship, disability, or veteran status.

Basepayofferediscontingentonqualificationsandotheroperationalconsiderations.BasepayisjustonepieceofthefullcompensationstructureofferedatTango.Ifthispayrangeisoutsideofyourexpectations,westillencourageyoutoapplyandhaveaconversationwithus.

Base pay offered for this position is: $140,000 - $175,000

*ApplicantsmustbeauthorizedtoworkintheU.S.foranyemployer.

*Wecannotsponsoremployment-basedvisasatthistime.