# Senior Platform Engineer, Operator

**Company:** [Ditto](https://hotfix.jobs/companies/ditto)
**Location:** Remote
**Role:** DevOps / SRE
**Salary:** $223k – $259k/yr
**Skills:** Rust, Kubernetes, Controller-Runtime, Kubebuilder, Kube-Runtime, Prometheus, Ingress, Servicemonitor, Statefulset, Gateway Api, Olm, Operatorhub, Strimzi, Cert-Manager, Cosign
**Posted:** 2026-04-23

> Designs, builds, and maintains enterprise-grade Kubernetes operator in Rust for SMBP, focusing on API architecture, networking, security, observability, multi-cloud deployment, and operational tooling. Collaborates with customers to meet production Kubernetes needs.

## Job Description

## Responsibilities
- Own the architecture and evolution of the SMBP Operator's CRD API surface, designing extensions for enterprise needs including status conditions, security contexts, network configuration, and admission validation.
- Design and implement flexible network configuration patterns supporting various ingress controllers, load balancers, and traffic management without prescribing specific Kubernetes components.
- Build observability integration: Prometheus metrics, ServiceMonitor CRDs, Kubernetes Events, and pre-built dashboards.
- Harden security posture: pod security contexts, network policies, supply chain integrity (image signing, SBOM), and auditable configurations.
- Make SMBP deployable across EKS, GKE, AKS, OpenShift, on-prem with OLM support, OperatorHub, and multi-distribution testing.
- Build operational tooling: must-gather diagnostics, kubectl plugins, compatibility matrices, documented upgrade paths.
- Partner with customer-facing teams and engage enterprise customers for deployment requirements and technical escalations.

## Requirements
- Production Rust experience with large multi-crate workspaces, async Rust, lifetimes, and ownership in reconciliation loops.
- Deep Kubernetes internals: controllers, reconciliation loops, watches, owner references, finalizers, admission webhooks, status subresources.
- Kubernetes operator development using controller-runtime, kube-runtime, kubebuilder or equivalent.
- Kubernetes networking: Service types, Ingress, IngressClass, ingress controllers, trade-offs with LoadBalancer, Gateway API.
- StatefulSet management: rolling updates, PVC lifecycle, pod disruption budgets, topology changes.
- Observability: Prometheus metrics, ServiceMonitor CRDs, Prometheus Operator.
- Enterprise customer orientation: security reviews, compliance, operational expectations.

## Nice-to-Haves
- kube-runtime experience.
- Strimzi (Kafka operator) familiarity.
- Cert-manager integration.
- Property-based testing (proptest).
- OLM and OpenShift operator certification.
- Kubernetes Gateway API.
- Supply chain security: Cosign, SBOM (Syft, SPDX).
- Distributed systems: CRDT, eventually consistent stores, P2P replication.
- Open source contributions to cloud-native, Kubernetes, or Rust tooling.

## Similar roles

- [Senior Software Engineer, FDE](https://hotfix.jobs/jobs/550859c8-02c6-48b5-bb3a-9027ddbe7146) - Ditto - San Diego, CA - $223k – $259k/yr
- [Senior Software Engineer, Cloud](https://hotfix.jobs/jobs/53b0a0ef-de2d-4ff8-98c7-1c84fe776d0c) - Ditto - Remote - $223k – $259k/yr
- [Senior Site Reliability Engineer](https://hotfix.jobs/jobs/8e6ff133-7e78-40a9-8de1-e51443a0801f) - Teleport - Remote - $222k – $342k/yr
- [Sr. Manager - Production Engineering](https://hotfix.jobs/jobs/0c5a5f89-071b-4cff-9010-57832016ecbd) - Databricks - Remote - $222k – $300k/yr
- [Senior Software Integration Engineer](https://hotfix.jobs/jobs/82677c96-fbff-4ef6-a6b2-2bf5db97f151) - Zoox - Foster City, CA - $225k – $249k/yr

**Apply:** https://hotfix.jobs/jobs/25d6eb87-1fe3-4274-b0fc-6546cf68784a
**Canonical:** https://hotfix.jobs/jobs/25d6eb87-1fe3-4274-b0fc-6546cf68784a