Senior Platform Engineer

• Own GCP infrastructure with the team — GKE clusters, multi-region setup, global load balancing, autoscaling, VPC networking, DNS, firewall rules and IAM.
• Build and maintain GitLab CI/CD pipelines and shared CI templates consumed across every service team.
• Help shape company-wide standards for how services get deployed, secured, monitored and rolled back.
• Operate and harden the cluster — node pool upgrades, namespace/RBAC/resource-quota design, rolling updates, health probes, and supply-chain security.
• Run the platform security stack — gateway policies, secret rotation, dependency scanning, workload identity, and IAM least-privilege.
• Own observability and incident response on GCP — structured logging, metrics, dashboards, alerting, post-mortems and on-call runbooks.
• Build internal developer tooling — CLIs, self-service workflows and golden-path automation.
• Treat AI tooling as a daily collaborator, building platform tooling, runbooks and structured logs that both humans and AI agents can work against.

What You'll Need To Be Successful:

• Strong production ownership on GCP — operating real workloads, not just standing up demos.
• Kubernetes in production (GKE) — deployments, Helm, RBAC, resource quotas, rolling updates, multi-region setups and rollbacks.
• Terraform as a daily tool, with clean management of IAM, networking, Pub/Sub, Cloud SQL and secrets.
• CI/CD pipeline depth — GitLab CI at scale, with security and dependency scans built into the pipeline.
• Cloud networking depth — VPC design, load balancing, DNS, firewall rules and network security groups.
• Production observability and reliability on GCP — structured logs, metrics, SLIs/SLOs/error budgets, on-call rotations, and post-mortems.
• Operational PostgreSQL and asynchronous messaging on GCP Pub/Sub, plus scripting in Bash and Python or Go.
  • Excellent written and spoken English, comfortable working across time zones; GCP certification, gRPC/Envoy experience, FinOps practice, or a background in IP/legal-tech/regulated B2B SaaS all an advantage.