Senior Software Engineer

Job Information:

Job Family: Research and Development

Job Function: Software Engineering

What you will build:

• Design and implement reusable Terraform modules, cloud landing-zone components, provisioning and lifecycle workflows across Azure, GCP and AWS; engineer resilient multi-region and dedicated-instance patterns.
• Build and maintain production Kubernetes foundations: clusters, node pools, networking, autoscaling, storage, workload identity, capacity, upgrades and recovery.
• Develop GitOps delivery platforms using Argo CD, Helm, GitHub Actions and automated validation, promotion, rollback and drift detection.
• Own platform services and their integration: Istio/service mesh, Keycloak/OIDC, cert-manager/PKI, API gateways, ingress/egress, DNS, secrets management and cloud-native networking.
• Engineer private networking, routing, firewall policy, WAF, VPN/private interconnect, TLS/mTLS, segmentation, load balancing and end-to-end connectivity troubleshooting.
• Codify zero-trust and least-privilege controls across identities, workloads, environments, networks, secrets, administrative access and service-to-service communication.
• Design and automate technical safeguards, traceable changes, evidence capture, continuous monitoring, vulnerability response and environment separation supporting FedRAMP, PCI DSS and SOC 2 requirements. Partner with GRC/Security to map implementations to applicable control obligations; do not equate platform features with certification or authorization.
• Engineer the observability stack end to end using Prometheus, Grafana, Loki, Thanos, Grafana Alloy and OpenTelemetry: metrics collection, long-term retention, centralized logs, alerting, dashboards, telemetry pipelines, capacity signals and incident diagnostics.
• Deploy, scale, tune, secure and troubleshoot stateful platform components, including Kafka, Redis, relational databases (e.g., PostgreSQL, MariaDB) and document databases (e.g., MongoDB), covering operators, persistence, replication, backup/restore, upgrades, availability, throughput and recovery.
• Own secure API gateway and ingress architecture: authentication and authorization, TLS termination, rate limiting, routing, API lifecycle integration, firewall/WAF policy, and service-mesh connectivity.
• Develop platform tooling in Python, Go or Bash; eliminate recurring operational toil with durable engineering fixes and self-service capabilities.
• Develop and integrate agentic platform-development capabilities, not just production-operations agents, including AI-assisted Terraform/module and Helm/chart authoring, platform API and controller development, architecture analysis, code review, test generation, infrastructure-plan validation, safe change proposals, developer-facing tools, and reusable agent workflows integrated with GitOps/CI/CD.
• Use and extend agentic development workflows across the full engineering lifecycle - architecture exploration, Terraform/Helm authoring, code reviews, automated tests, environment validation, pull requests and release readiness - not only production diagnosis and remediation.

Required experience:

• 8+ years in software, cloud, DevOps/SRE or platform engineering, with substantial hands-on design and implementation.
• Advanced Terraform and Kubernetes skills; production experience with Argo CD, GitOps, Helm and CI/CD.
• Deep experience with Azure plus GCP or AWS; ability to transfer architecture patterns across cloud providers.
• Strong Linux, networking, DNS, TLS, PKI, routing, firewall, IAM/RBAC and distributed-system troubleshooting.
• Hands-on with several platform components such as Istio, Keycloak, cert-manager, API gateways and secrets management, with ability to learn the others.
• Practical deployment, scaling, hardening and operational troubleshooting of Kafka, Redis and relational/document databases in Kubernetes or managed cloud services; experience with API gateways and secure API exposure.
• Hands-on experience with Prometheus, Grafana, Loki, Thanos, Grafana Alloy or equivalent metrics/logging pipelines, including cardinality, retention, alert quality and production troubleshooting.
• Demonstrated experience implementing security controls in regulated environments and supporting FedRAMP, PCI DSS, SOC 2 or comparably rigorous programs.
• Coding ability in Python, Go or equivalent; evidence of shipping automation and reusable engineering components.
• Ability to reason from application behavior through cluster, identity, certificate, network and cloud dependencies.
• Demonstrated ownership in a fast-paced, startup-like environment: rapid iteration, shifting priorities, independently driving work to production and balancing speed with security and reliability.

Preferred:

• Multi-tenant or customer-dedicated SaaS, hybrid/air-gapped architectures, Kubernetes operators/CRDs, cloud cost management.
• Compliance-as-code, automated audit evidence, policy engines, vulnerability scanning and supply-chain security.
• Hands-on experience building or extending agentic development workflows, agent tool integrations or shared engineering capabilities for infrastructure and Kubernetes, not only using AI coding assistants.

Success in the first 6-12 months:

• Deliver reusable cloud/Kubernetes capabilities that reduce custom environment work and deployment variability.
• Remove material gaps in security posture and make evidence collection and drift detection more repeatable.
• Improve deployment safety, platform upgradeability and production diagnostics with measurable outcomes.
• Build or substantially improve deployment, resilience, scaling and observability for Kafka, Redis, relational and document databases and gateway services; reduce operational bottlenecks.
• Build and share agentic platform-development workflows that help engineers design, implement, test and evolve secure infrastructure faster, with measurable quality and review controls.

Leveling:

Senior: independently owns significant subsystems and implementations. Principal: sets cross-platform architecture and standards, resolves cross-domain design decisions and mentors multiple teams.

Education:

Bachelor degree or equivalent experience. Advanced degree preferred.

Preferred Certifications:

Skills

Argo CD, GitOps, Kubernetes, Terraform