DevOps Platform Engineer

About the Job

The DevOps Platform Engineer builds and operates the shared engineering tooling that product teams use to build, test, secure, deploy, and run applications. This is a hands-on engineering role at the center of how software is delivered across the enterprise.

The platform is run both as an internal product and as a managed service. Engineers in this role design reusable pipelines, golden paths, and self-service capabilities, then support them in production against defined service levels. The emphasis is on removing manual steps and ticket-based provisioning so that product teams can move quickly on a paved road that is secure and compliant by default.

In a regulated pharmaceutical and healthcare environment, the DevOps Platform Engineer also ensures that all platform activities adhere to compliance, audit, and data integrity standards (including GxP, 21 CFR Part 11, and SOX where applicable).

The role operates across Microsoft Azure and Amazon Web Services, with cloud-agnostic tooling - GitHub, Terraform, and Kubernetes ?? as the strategic core.

What You Will Be Doing

• Design, build, and maintain reusable CI/CD pipelines and pipeline templates using GitHub Actions and Azure DevOps.
• Consolidate and migrate legacy Jenkins and GitLab pipelines onto the strategic toolchain.
• Integrate automated testing, code quality, and security scanning into every stage of the delivery lifecycle.

• Build and maintain Terraform modules and Ansible content for repeatable, peer-reviewed infrastructure provisioning across Azure and AWS.
• Implement policy as code to enforce security, tagging, cost, and configuration standards at deployment time.
• Replace ticket-based requests with self-service automation that product teams can consume directly.

• Engineer and operate container platforms on Kubernetes, AKS, EKS, and OpenShift.
• Build and maintain Helm charts, GitOps workflows, ingress, autoscaling, and workload onboarding patterns.
• Support product teams containerizing and migrating applications onto the platform.

• Contribute to the internal developer platform and developer portal, including Backstage templates, scaffolding, and golden paths.
• Write and maintain clear documentation, reference implementations, and onboarding guides.
• Turn recurring pain points raised by product teams into prioritized platform improvements.

• Embed static and dynamic analysis, dependency scanning, and SBOM generation into pipelines using SonarQube, Snyk, and equivalent tooling.
• Implement secrets and certificate management using HashiCorp Vault, CyberArk, and cloud-native key services.
• Remediate vulnerabilities and misconfigurations surfaced by cloud security posture tooling.

• Own the availability, performance, and capacity of the platform services in scope.
• Instrument platform services using Datadog, Dynatrace, Prometheus, Grafana, Splunk, and OpenTelemetry.
• Contribute to incident response, root-cause analysis, problem management, and corrective actions.

• Write clean, tested, peer-reviewed automation code managed in Git using trunk-based practices.
• Use AI-assisted engineering tools such as GitHub Copilot and Claude Code to accelerate development, testing, and documentation, applying appropriate review and technical judgement.
• Continuously reduce toil, technical debt, and duplication across the platform estate.

• Work within an agile product team with a shared backlog, defined customers, and service-level objectives.
• Partner with Cybersecurity, Cloud, Architecture, and Operations teams on approved engineering patterns.
• Mentor less experienced engineers and share knowledge through demonstrations, guilds, and documentation.

About You

• Demonstrated capability in DevOps, platform, or cloud engineering, typically gained across five to eight years of professional experience.
• Strong hands-on experience with CI/CD tooling, ideally GitHub Actions or Azure DevOps.
• Practical Infrastructure as Code experience with Terraform, together with configuration management using Ansible.
• Production experience with Kubernetes and application containerization.
• Working knowledge of at least one major public cloud, with exposure to a second.
• Proficiency in at least one scripting or programming language such as Python, Bash, Go, or PowerShell.
• Experience integrating security and quality controls into automated pipelines.
• Clear written and verbal communication in English.

• Experience with OpenShift, Backstage or another developer portal, and GitOps tooling such as Argo CD or Flux.
• Experience with observability platforms including Datadog, Dynatrace, Prometheus, Grafana, Splunk, Cribl, or Observe.
• Experience with policy as code, software supply-chain security, DevSecOps, SRE, or FinOps practices.
• Experience delivering within a validated, GxP, or otherwise regulated environment, including awareness of data-protection obligations such as GDPR.
• Certifications such as AWS or Azure associate or professional level, Certified Kubernetes Administrator or Application Developer, or HashiCorp Terraform Associate.
• A bachelor's degree in computer science, engineering, information technology, or a related discipline.

• Automation-first and API-first mindset
• Strong engineering discipline and attention to quality
• Customer focus toward internal engineering teams
• Pragmatic problem-solving under production pressure
• Bias toward reuse, simplification, and standardization
• Collaborative and generous with knowledge
• Continuous learning and adaptability

• Reduced application onboarding and deployment lead time
• Increased deployment frequency and change success rate
• Increased adoption of standardized pipelines and golden paths
• Reduced manual provisioning and platform ticket volumes
• Improved platform availability and developer satisfaction
• Reduced vulnerabilities, security findings, and audit exceptions
• Increased automation coverage, reuse, and engineering productivity