Sr. Platform Engineer

Mayo Clinic; Rochester (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Mayo Clinic is seeking a Senior Platform Engineer to design, build, and operate the reporting and tooling that keep cloud spend and vulnerabilities transparent across GCP, Azure, and on‑premises.

Reporting to the MCP DevOps Lead, you will implement cloud policy guardrails, monitor compliance, and develop cost dashboards while collaborating with FinOps, IT Security, and compliance partners to stay audit-ready.

This role spans policy, security, and cost governance across MCP programs.

Responsibilities

• Designs, implements, and maintains cloud policy guardrails across GCP, Azure, and on-premises in alignment with Mayo Clinic standards.
• Uses tooling to monitor policy compliance, track CMDB inventory, remediate drift, and assist with policy exceptions.
• Builds unified billing and cost dashboards for MCP programs, with tagging standards and cost-center mapping.
• Produces recurring cost/chargeback reports and identifies optimization opportunities.
• Provides reporting for Cloud reservations and capacity (including GPU); tracks usage and recommends rightsizing.
• Offers utilization trends and capacity forecasts from historical data to inform budgeting and planning.
• Operates and integrates Veracode, Prisma Cloud, and other Mayo IT security tools into pipelines.
• Maintains MCP dashboards in ServiceNow for vulnerability management and CMDB compliance.
• Triages security and compliance findings, assigns ownership, and tracks remediation to closure.
• Collects and maintains evidence supporting Mayo Clinic compliance requirements, security reviews, and audits.
• Supports the MCP DevOps Lead in directing risk register efforts, maintaining items, and reporting status.
• Translates technical, financial, and security findings into clear guidance for non-technical stakeholders.
• Develops and maintains runbooks, standards, and documentation for FinOps, SecOps, and compliance processes.
• Stays current with FinOps, cloud security, and compliance practices across GCP, Azure, and on-premises environments.

Job description

Reporting to the MCP DevOps Lead, Mayo Clinic Platform, the Senior Platform Engineer supports the Cloud financial operations (FinOps), security operations (SecOps), and Mayo Clinic compliance needs of the Mayo Clinic Platform across GCP, Azure, and on-premises environments. This role works closely with MCP program and product teams, Mayo Clinic Finance, Mayo IT Security, and enterprise compliance partners to keep platform resources governed, cost-accountable, and audit-ready.

Position Overview

Under the direction of the MCP DevOps Lead, this team member designs, builds and operates the reporting and tooling that keep Mayo Clinic Platform Cloud spend and vulnerabilities transparent, and Tech Ops aligned with Mayo Clinic policy. The Senior Platform Engineer serves as a technical liaison between platform engineering and other MCP teams, Mayo FinOps, Mayo OIS, Mayo ALM, along with other Mayo departments and compliance stakeholders.

The position will be responsible for the following essential functions:

• Designs, implements, and maintains cloud policy guardrails (e.g., organization policies, Azure Policy, policy-as-code) in conjunction with other MCP teams across GCP, Azure, and on-premises environments in alignment with Mayo Clinic standards.
• Utilizes and optimizes available tooling (e.g. ServiceNow, Cloudability, Archer, etc.) to monitor policy compliance, track CMDB inventory, remediates configuration drift, and assists with the policy exception process in partnership with platform and program teams.
• Builds and maintains unified billing and cost allocation dashboards and reports across MCP Programs, including tagging/labeling standards and cost-center mapping in partnership with MCP Finance.
• Produces recurring cost and chargeback reporting for MCP Program leaders and MCP Finance and identifies cost optimization opportunities.
• Builds reporting and operational support for managing Cloud resource reservations, commitments, and capacity (including GPU) utilization; tracks usage against commitments and recommends rightsizing.
• Provides utilization trends and capacity forecasts from historical data to inform budgeting and planning.
• Operates and integrates Veracode, Prisma Cloud, and other Mayo IT security and compliance tools into platform workflows and CI/CD pipelines.
• Operates, optimizes, and keeps current MCP built dashboards in ServiceNow that support vulnerability management and CMDB compliance
• Triages security and compliance findings, assigns ownership, and tracks remediation to closure with responsible teams.
• Collects and maintains evidence supporting Mayo Clinic compliance requirements, security reviews, and internal or external audits.
• Supports the MCP DevOps Lead in directing efforts against the risk register, including maintaining risk items, driving mitigation plans, and reporting status.
• Translates technical, financial, and security findings into clear guidance for non-technical stakeholders.
• Develops and maintains runbooks, standards, and documentation for FinOps, SecOps, and compliance processes.
• Stays current with FinOps, cloud security, and compliance practices across GCP, Azure, and on-premises environments.

The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties, and skills. Other duties may be added or assigned.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.