Software Engineer II - Platform Engineering (Foundation)

In this role, you'll:

• Build and maintain cloud infrastructure across AWS and GCP using Terraform — designing the modules and patterns that provision the substrate our services run on, and thinking beyond the immediate use case to how your work is consumed across the organization

• Operate and evolve multi-tenant Kubernetes clusters (EKS) serving the entire engineering organization — owning node lifecycle, upgrades, security contexts, and networking decisions that affect every team

• Own the operational side of our streaming infrastructure migration from managed Kafka (MSK) to WarpStream, building and maintaining the tooling that supports it

• Contribute to platform tooling and reconcilers that underpin our platform contract model — writing Go, working with the Kubernetes API, and building high-quality self-service primitives that engineering teams rely on to declare what their services need

• Design and maintain foundational networking and security infrastructure — transit gateways, GCP interconnect, ingress, security groups, IAM policies, and IRSA — getting the invisible plumbing right so nobody has to think about it

• Participate in on-call rotations and drive operational excellence — responding to infrastructure incidents, writing and improving runbooks, and feeding every incident pattern back into automation so the same class of issue never repeats

We're looking for candidates who have:

• 3+ years of software engineering or infrastructure engineering experience

• Hands-on experience with AWS services (EC2, EKS, IAM, S3, VPC, or similar) — we're looking for people who have built and operated real infrastructure, not certifications

• Working knowledge of Kubernetes in production — you have operated or deployed workloads on K8s clusters beyond a local environment

• Experience with infrastructure-as-code (Terraform strongly preferred; Pulumi or CloudFormation acceptable)

• Proficiency in at least one of Go, Python, or shell scripting — Go is preferred because our reconciler work is in Go, but you should be ready to turn your hand to whatever the problem demands

• Comfort with CI/CD pipelines (GitHub Actions, Argo, Jenkins, or similar) and hands-on experience with on-call and incident response — you understand what it means to be accountable for production systems

You might also have:

• Experience building Kubernetes operators or controllers — CRDs, reconcilers, and the controller-runtime library

• Familiarity with streaming infrastructure (Kafka, WarpStream, or similar event-driven systems) or depth in networking (VPCs, transit gateways, ingress controllers, DNS, load balancing, and security groups)

• Experience in regulated environments (SOC 2, ISO-27001, or similar compliance frameworks) or familiarity with GitOps patterns (ArgoCD, Flux)

• A passion for platform engineering as leverage — you care about making other engineers more productive, and when you see toil, your instinct is to eliminate it

Technologies we use:

• Languages: Go, Python, Bash/Shell, HCL (Terraform)

• Cloud: AWS (EC2, EKS, IAM, S3, VPC, Lambda), GCP

• Infrastructure as Code: Terraform

• Kubernetes: EKS, Helm, CRDs, controller-runtime

• Streaming: Kafka, WarpStream (migrating from MSK)

• Networking: Transit Gateway, GCP Interconnect, Ingress Controllers, DNS, Security Groups

• Identity & Security: IAM, IRSA, Secrets Management

• CI/CD: GitHub Actions

• GitOps: ArgoCD, Flux