office-hours - Platform Engineer
Requirements
• Cloud & Kubernetes: 5+ years running AWS and Kubernetes in production (EKS preferred), including platform add-ons and AWS-native integration. • IaC & GitOps: Strong with Terraform and Kubernetes manifests (Helm, Kustomize), plus GitOps Actions, plus GitOps delivery (Argo CD and/or Flux). • Security mindset: SAST/DAST, secrets management, least-privilege IAM, and vulnerability management as routine work. • Observability: Metrics, logs, and traces with Datadog, Sentry, or equivalents. • Programming: Node.js / TypeScript and Python, plus Bash scripting on Linux. • Data systems: PostgreSQL and MongoDB; messaging/workflows with Temporal. • Version control & collaboration: Git / GitHub workflows and a documentation-first, async communication style. • Networking fundamentals: TCP/IP, DNS, routing, load balancing. • AI / ML infrastructure (model-training pipelines, vector search) • Cloud cost and capacity management at scale • Compliance-sensitive environments (e.g., SOC 2, ISO 27001) • PAY TRANSPARENCY NOTICE • Full-time offers include base salary, equity, and benefits. • Don't meet every single requirement? Studies have shown that some candidates, especially underrepresented groups such as women and people of color, are less likely to apply to jobs unless they meet every single qualification. At Office Hours we believe in building a diverse and inclusive workplace, so if you're excited about this role but don't meet every qualification in the job description, we still encourage you to apply. You could still be the right candidate for this or other roles at Office Hours!
Responsibilities
• Cloud & Kubernetes: Run and scale production AWS and EKS — cluster lifecycle, autoscaling, and the platform add-ons that keep it healthy (ingress, DNS, certificates, secrets). • Infrastructure as Code: Manage cloud and cluster configuration declaratively with Terraform, Helm, Kustomize, eksctl and GitOps. • CI/CD & GitOps: Ship through GitHub Actions and GitOps (Argo CD / Flux), with automated build, test, and dependency gating. • Security & access: SAST/DAST scanning, secrets management, and least-privilege IAM (IRSA), plus routine dependency and vulnerability remediation. • Observability: Own metrics, logs, and traces across Datadog, and Sentry. • Data & messaging: Operate PostgreSQL, MongoDB / Atlas, OpenSearch / Elasticsearch, and Temporal. • Languages & tooling: Build automation and internal tooling in Python, Bash, Go, and Node.js / TypeScript; containerize with Docker.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT