Senior Platform Engineer

Responsibilities

• Design and deliver network infrastructure across DNS, edge, ingress, and service mesh
• Build tooling and abstractions that let other engineering teams provision and manage their own networking needs
• Ensure the network is observable, hardened, and resilient by default
• Deliver network stack projects end-to-end (service mesh, DNS, ingress/egress, CDN, edge protection, L4/L7 policy)
• Shape technical vision, execute delivery, and maintain operability
• Integrate networking into self-service platforms, streamlining workflows and enabling engineering teams to operate independently
• Participate in the on-call rotation, driving incident resolution and continuous improvement through postmortem analysis
• Collaborate with cross-functional partners in security, platform, and product engineering
• Foster a collaborative team culture by conducting design reviews, sharing knowledge, and mentoring

Requirements

• 5+ years of hands-on experience with cloud networking and distributed systems at SaaS or similar scale
• Deep knowledge of internet architecture and modern web services (DNS, CDN, WAF, Load Balancing, Ingress, Service Mesh)
• Proficiency in Go (or similar languages) and Infrastructure as Code (Terraform)
• Experience building reliable, observable platforms, defining SLIs/SLOs, and establishing these practices as team standards
• On-call experience, including incident resolution and driving architectural improvements through postmortems
• Consistently apply a security-first approach, implementing least-privilege policies, ensuring encryption in transit, and evaluating attack surfaces

Nice-to-Haves

• Experience designing self-service network abstractions (DNS provisioning, ingress configuration, network policy tooling)
• Experience with CDN, edge protection (cache strategy, WAF, origin shielding), VPNs, and wide-area connectivity in cloud environments
• Familiarity with tools like Envoy, Linkerd, Cloudfront, or Cloudflare
• Open source contributions and experience applying compliance frameworks (SOC 2, ISO 27001) to networking and policy as code