Platform Engineer - IaC & CI/CD

This is a remote position. As Platform Engineer - IaC & CI/CD, you will build and maintain the infrastructure automation and software-delivery foundation supporting the reView Decision Intelligence platform. data² has standardized on AWS as its cloud platform. This role owns the engineering capabilities that allow reView environments to be provisioned, configured, built, tested, deployed, promoted, and recovered consistently through automation - in AWS, and in the on-premises, disconnected, and air-gapped environments our regulated and federal customers require. Your primary areas of ownership are Infrastructure as Code (IaC), CI/CD pipelines, container and Kubernetes deployment automation, artifact and release management, offline and air-gapped delivery packaging, observability integration, secrets and configuration patterns, and developer delivery workflows. Where this role sits. You own the patterns, standards, and reusable modules for infrastructure and delivery. The Junior CI/CD Engineer implements and operates within them. QA Automation owns the tests and evaluation harnesses that your gates execute. Operations provides AWS account-level administration and foundational cloud governance; this role establishes and maintains the automated infrastructure and delivery patterns used to operate reView within those environments. This role supports both the Global Product and Federal delivery tracks, creating a reusable platform-engineering foundation across data² software delivery. This position requires work within U.S.-controlled development and federal software-delivery environments. Responsibilities 1. Infrastructure as Code & Environment Automation Own the IaC foundation used to provision and maintain reView environments.

• Design, build, and maintain reusable Terraform and/or AWS CDK modules and infrastructure patterns.
• Automate provisioning of development, test, staging, production, and applicable federal environments.
• Manage application-level AWS infrastructure, Kubernetes/EKS resources, load balancing, routing, autoscaling, storage, and supporting services through code.
• Establish version-controlled, repeatable infrastructure configurations that minimize configuration drift.
• Maintain environment configuration, secrets integration, and infrastructure lifecycle automation.
• Define and maintain the infrastructure pattern for federal delivery, including the account, partition, and boundary model applicable to the environment (for example AWS GovCloud or a controlled commercial enclave).
• Support infrastructure validation, recovery, and controlled change management. Tools / Skills: AWS, Terraform and/or AWS CDK, Kubernetes/EKS, Docker, Git. 2. CI/CD & Release Engineering Build and maintain the automated delivery pipelines used to move reView from source code through release.
• Design and maintain build, test, deployment, promotion, and release pipelines.
• Integrate QA automation, security validation, and quality gates into CI/CD workflows.
• Automate container builds, artifact creation, versioning, signing, storage, and promotion.
• Establish repeatable deployment and rollback strategies.
• Support controlled promotion across development, test, staging, production, and federal release environments.
• Own the offline delivery path: reproducible, version-pinned installation bundles and mirrored dependency and registry content for on-premises and air-gapped customer environments where pipeline egress is unavailable.
• Maintain pipeline reliability, performance, traceability, and release evidence. Tools / Skills: CI/CD pipelines, Git, Docker, Kubernetes/EKS, AWS, artifact repositories, offline packaging and registry mirroring. 3. Platform Runtime & Developer Enablement Create reliable platform patterns that allow Engineering to develop and deploy reView efficiently.
• Establish reusable deployment templates, environment patterns, and developer workflows.
• Maintain container and Kubernetes deployment standards for reView services.
• Standardize runtime configuration, secrets integration, service connectivity, ingress, and application networking patterns.
• Enable consistent local, integration, and cloud deployment workflows.
• Improve developer self-service and reduce manual environment and deployment activities.
• Partner with Engineering to resolve platform and deployment issues. Tools / Skills: AWS, Docker, Kubernetes/EKS, Git, configuration and secrets management. 4. DevSecOps & Software Supply Chain Embed security and software-assurance controls throughout infrastructure and delivery automation.
• Integrate SAST, SCA, secrets scanning, container scanning, and applicable policy-as-code controls into CI/CD.
• Implement secure secrets and credential-management patterns.
• Support least-privilege IAM patterns within application and delivery environments.
• Maintain secure container build and artifact-management practices.
• Support artifact integrity, signing, provenance, and traceability requirements, including SBOM generation and the build evidence underpinning secure software development attestation applicable to federal delivery.
• Ensure delivery automation produces usable evidence for SOC 2 change-management controls and, where applicable, NIST 800-171 / CMMC requirements - so evidence is produced once and used everywhere.
• Partner with QA Automation and Operations to implement automated security and release controls required for Global Product and Federal delivery. Tools / Skills: AWS IAM, secrets management, CI/CD security tooling, SBOM and signing tooling, Docker, Kubernetes, IaC security practices. 5. Reliability, Observability & Platform Performance Ensure the platform engineering foundation provides visibility, resilience, and operational reliability.
• Integrate logging, metrics, health monitoring, and alerting into platform environments.
• Establish reusable observability patterns across reView services and deployments.
• Support autoscaling, resource management, availability, recovery, and resilience patterns.
• Own backup, restore, and disaster-recovery automation for stateful platform services, including the graph store - with defined recovery objectives and periodic restore testing, not backup configuration alone.
• Monitor infrastructure and pipeline performance and identify opportunities for improvement.
• Partner with QA Automation on performance, scalability, reliability, and failure testing.
• Support Operations with the telemetry and tooling required for production monitoring and initial triage. Tools / Skills: AWS, CloudWatch, Grafana, Loki, Kubernetes/EKS, Memgraph and other stateful services, container observability. 6. Platform Governance & Continuous Improvement Maintain a consistent, secure, and scalable platform-engineering foundation as reView evolves.
• Establish standards for IaC, pipelines, environments, deployment patterns, and infrastructure changes.
• Maintain documentation, reusable modules, templates, and platform runbooks.
• Identify and remediate infrastructure drift, manual processes, and delivery bottlenecks.
• Support release traceability and objective deployment evidence.
• Continuously improve automation, reliability, security, developer experience, and delivery speed.
• Maintain reusable capabilities supporting both the Global Product and Federal delivery tracks. Tools / Skills: Git, IaC module registries, documentation and runbook tooling, Jira.

Requirements

• Authorized to work in the United States and eligible to work within U.S.-controlled development and federal software-delivery environments, including access to export-controlled technical data.
• Strong experience as a Platform Engineer, DevOps Engineer, Cloud Engineer, or similar infrastructure-automation role.
• Strong hands-on experience with AWS and cloud-native application environments.
• Strong experience with Infrastructure as Code, including Terraform and/or AWS CDK.
• Strong experience designing and maintaining CI/CD pipelines.
• Experience with Docker and Kubernetes/EKS.
• Experience automating application infrastructure, environments, builds, deployments, and release workflows.
• Experience with Git-based software-development and infrastructure workflows.
• Experience with secrets management, IAM, and secure configuration practices.
• Experience integrating automated testing and security controls into CI/CD pipelines.
• Experience with observability, logging, metrics, and troubleshooting distributed environments.
• Experience with backup, restore, and recovery for stateful services.
• Understanding of modern DevOps, DevSecOps, IaC, immutable infrastructure, continuous delivery, and software supply-chain practices.
• Strong scripting and automation skills.
• Strong debugging and root-cause-analysis skills across infrastructure, pipelines, containers, and application environments.

• Strong written and spoken English for collaboration across a distributed engineering organization.