Senior Platform Engineer

Who you are

• 5+ years in platform, infrastructure, or cloud engineering, with demonstrated ownership of production cloud environments
• Hands-on experience with a major cloud provider (AWS, Azure, or GCP), including multi-account architecture
• Strong Infrastructure as Code experience (Terraform, Pulumi, or Ansible)
• Experience with GitOps-style delivery pipelines (GitHub Actions or similar)
• Solid grounding in networking and security fundamentals (VPC design, DNS, PKI, secrets management)
• Experience with observability tooling (e.g., Datadog, Prometheus, Grafana)
• Familiarity with cloud cost management (FinOps) practices
• Strong cross-functional collaboration and partnership skills with SREs, security, and developer productivity
• Nice to have: experience supporting non-engineering builders (e.g., citizen developers, AI-assisted tooling users) with infrastructure they can self-serve
• Prefer building the paved road over paving one request at a time
• Default to designing safe systems rather than approving individual exceptions
• Are comfortable being the sole owner and expert on critical infrastructure, with no direct reports and no safety net
• Can design for two audiences at once: engineers and non-technical builders
• Treat security and cost as design constraints, not cleanup work
• Get more done through good defaults and influence than through mandates
• Care as much about adoption as uptime
• Are comfortable defining a new discipline rather than inheriting an established one
• Stay curious and open to growth — demonstrating a proactive embrace of AI, and actively building and applying fluency in emerging technologies to elevate how we work, drive faster outcomes, and expand collective impact

What the job involves

• We’re looking for a Senior Platform Engineer, Infrastructure to build and own the foundational cloud and source control infrastructure that sits outside our product
• This role is distinct from our Product Infrastructure and Developer Productivity teams: rather than supporting product systems or professional engineering workflows, you'll stand up the corporate cloud foundation from the ground up — multi-account architecture, networking, DNS, PKI, and secrets management — along with the GitHub-based delivery pipelines that govern how infrastructure gets provisioned and changed
• You'll design the landing zone and the paved-road templates that make hosting and source control self-service by default. Builders on this platform range from engineers to AI-assisted teams across the business, so the guardrails you build — policy-as-code, scoped modules, tagging enforcement, cost controls, security baselines — carry the weight a human reviewer otherwise would. Making that system permissive enough to be useful and constrained enough to be safe is the central challenge of the role
• Reporting to the Senior Director, Information Technology
• Design and maintain foundational shared services — VPCs, DNS, PKI, and secrets management — that other teams and self-service pathways depend on
• Own the cloud landing zone: multi-region connectivity, account/resource structure, tagging standards, and cost-efficient scaling
• Build and maintain Infrastructure as Code pipelines (Terraform, Pulumi, or Ansible) so infrastructure changes are automated, tested, and repeatable
• Design self-service pathways for code hosting (templated repo creation with standards baked in — visibility, branch protection, CI hooks) so builders can get set up without platform team involvement
• Design self-service deployment pathways — a small set of golden-path hosting patterns (e.g., static sites, lightweight services, scheduled jobs) that provision automatically into the governed landing zone
• Build the guardrails that make self-service safe: policy-as-code, tagging enforcement, cost controls, and security baselines
• Develop foundational observability infrastructure — logging, metrics, and tracing — giving builders and application teams at-a-glance visibility into system health
• Partner with SRE on platform reliability: availability, resilience, and performance of the underlying infrastructure
• Manage cloud vendor and tooling relationships at the engineering level, flagging risk and cost issues early

The application process

• Applications accepted on an ongoing basis until position is closed and filled

Benefits

• Modern & inclusive healthcare coverage
• Retirement saving matches and financial planning
• Flexible paid time off
• Annual retreat and offsites
• WFH Office setup budget
• Health and wellness stipend
• Remote work reimbursements for phone & wifi
• Webflow subscription discount
• Remote-first flexibility