Sr Platform Engineer

Key Responsibilities

• Help design, build, and improve the CI/CD capabilities used by our engineering teams to ensure the delivery of Air-tek's software
• Work with cloud technologies (AWS) to deploy and manage Air-tek's services.
• Develop automation and tools to streamline software builds, client integrations, deployments, and operations.
• Fine tune and optimize platform components to improve their efficiency and cost effectiveness.
• Collaborate with other engineering teams to troubleshoot errors and streamline the process of getting from code to client.
• Drive adoption of best practices for DevOps, continuous integration, quality, scalability, and maintainability across the entire engineering org.

Skills and Experience

Terraform and infrastructure as code: Experience managing AWS infrastructure for EKS, MSK, and shared services using reusable modules with typed inputs and validation, for_each, and provider aliases for cross-account deployments. Strong understanding of dependency graphs, plan-time unknowns, lifecycle controls, and replacement behavior. Proficiency in secure remote state and locking, dependency version management, declarative imports, moved blocks, state migrations, drift remediation, and module testing with terraform test or an equivalent framework.
AWS architecture and security: Strong knowledge of multi-account architecture, VPCs, subnets, routing, DNS, security groups, private endpoints, and cross-account connectivity. Experience implementing least-privilege IAM, role trust policies, KMS encryption, secrets management, network isolation, security scanning, policy enforcement, and audit logging.
Containers, Kubernetes, and Amazon EKS: Hands-on experience building Docker images and operating production EKS clusters, including cluster and node upgrades, add-on compatibility, pod networking, persistent storage, autoscaling, scheduling, and disruption management. Working knowledge of Kubernetes RBAC, pod security, EKS access entries, Pod Identity, and IAM roles for service accounts (IRSA).
GitHub Actions and self-hosted runners: Experience developing reusable GitHub Actions CI/CD workflows with automated testing, security scanning, artifact management, environment protection, and OIDC-based AWS authentication. Experience operating self-hosted Kubernetes runners with Actions Runner Controller (ARC), including scale sets, ephemeral runners, autoscaling, image maintenance, resource and network configuration, and job isolation.
Argo CD and application delivery: Experience managing declarative GitOps delivery with Argo CD and Helm or Kustomize, including application definitions, sync policies and waves, health checks, drift reconciliation, and environment promotion. Strong understanding of rolling, blue-green, and canary deployments, including verification and rollback procedures.
Programming and automation: Proficiency in writing and maintaining scripts and automation using Bash, PowerShell, or a general-purpose programming language.
Messaging and database operations: Experience operating Amazon MSK and Apache Kafka, including broker configuration, upgrades, partitions, replication, retention, capacity planning, secure connectivity, and producer and consumer behavior. Ability to maintain self-hosted RabbitMQ and MongoDB in non-production environments, including configuration, upgrades, persistent storage, access controls, resource management, and monitoring.
Datadog and observability: Hands-on experience configuring Datadog infrastructure and Kubernetes monitoring, log collection, application performance monitoring (APM), and distributed tracing. Ability to manage dashboards and monitors through Terraform, define service-level indicators and objectives, and create actionable alerts for application health, Kafka consumer lag, RabbitMQ queues, and MongoDB performance and availability.
Reliability and operations: Strong troubleshooting and performance analysis skills across infrastructure, networking, identity, Kubernetes, messaging systems, databases, and applications. Experience with incident response, operational runbooks, capacity and cost management, and tested backup and restore procedures.
Bachelor’s degree in computer science, software engineering, or related fields (or equivalent work experience)
Additional experience (optional)
All experience listed below is optional. We welcome applications from candidates with strong core technical skills and a willingness to learn, including those with no prior experience in these areas.
Working knowledge of the build, configuration, deployment, and runtime requirements of C#/.NET and Node.js applications.
Experience with disaster recovery (DR) planning, including cross-region data replication, recovery time objectives (RTOs), recovery point objectives (RPOs), and failover and failback strategies.
Familiarity with Pulumi, Amazon SQS, Amazon RDS, MySQL, or policy-as-code frameworks such as OPA or Sentinel.