Senior Platform Engineer

Overview

Senior Platform Engineer in IG's Platform Engineering team, building and operating secure, scalable, cost-effective cloud and container platform infrastructure across on-premises and AWS estates, and mentoring junior engineers.

What you'll do

• Design and build scalable, secure AWS infrastructure using Infrastructure as Code (Terraform), and contribute to cloud technology evaluation and standardisation.
• Build and maintain configuration management using open-source Puppet (roles, profiles and modules with Hiera), developing reusable modules with unit testing, linting, versioning and controlled promotion across environments.
• Use Ansible for orchestration and automation tasks where it is the better fit.
• Design, build and optimise GitLab CI/CD pipelines that test, validate and deploy infrastructure and configuration changes, embedding DevOps and DevSecOps practices such as secrets management and vulnerability scanning.
• Manage and automate AWS EC2 and Linux estates with AWS Systems Manager (State Manager, Run Command, Patch Manager, Parameter Store and automation documents), including instance configuration, hardening and lifecycle management.
• Manage the certificate lifecycle across platform services, including issuance, renewal, rotation and expiry monitoring, and automate these processes to reduce outages and manual effort.
• Build and run Kubernetes environments (EKS) and deliver self-service capabilities to development teams through platform tooling and an internal developer platform (for example Backstage).
• Lead infrastructure modernisation, including OS migrations, tooling upgrades and reducing configuration drift across environments.
• Manage the software and dependency lifecycle, including security patching, vulnerability management, open-source component updates and RPM package management, with a clear inventory of platform dependencies.
• Maintain organised, versioned and accessible artefacts and packages through repository tooling such as JFrog Artifactory.
• Define and apply monitoring, alerting and observability standards (for example Honeycomb, Prometheus and Grafana) so issues are found and understood before they affect users.
• Act as subject-matter expert in diagnosing and resolving complex infrastructure and configuration incidents, running root cause analysis and putting preventive measures in place.
• Partner with Platform Managers and development teams to understand their needs and deliver solutions that work, helping to bridge development and operations.
• Mentor junior engineers and write and maintain clear documentation to support continuous learning and engineering best practice.

What you'll need

• 6+ years in infrastructure engineering, configuration management and automation, including significant hands-on experience with Linux systems and AWS cloud.
• Strong hands-on expertise with open-source Puppet, including writing, testing and maintaining modules using roles, profiles and Hiera.
• Experience with module testing and release workflows (for example rspec-puppet and puppet-lint) is essential.
• Working experience with Ansible (playbooks, roles and inventory management).
• Hands-on experience managing the certificate lifecycle, including issuance, renewal, rotation and expiry monitoring, using internal or public certificate authorities and tooling such as AWS Certificate Manager.
• Ability to automate rotation safely across Linux, load balancer and Kubernetes environments.
• Solid hands-on experience designing and operating AWS platforms, especially EC2, with a good understanding of IAM, S3, VPC and networking (for example Transit Gateway and Direct Connect).
• Practical experience using AWS Systems Manager for configuration and state management (State Manager, Run Command, Patch Manager, Parameter Store and automation documents).
• Hands-on experience with Terraform.
• Experience designing multi-stage CI/CD pipelines, ideally in GitLab (or Jenkins or GitHub Actions), with good knowledge of security practice such as secrets management, vulnerability scanning and compliance.
• Strong experience with Red Hat Enterprise Linux 9, Rocky Linux 9 or equivalent, including systemd, SELinux and security hardening.
• Strong Python and Bash skills for automation.
• RPM package management and building, with experience administering RPM repositories and artefact repositories such as Artifactory or Nexus.
• Working experience administering Kubernetes (EKS preferred), including networking, RBAC, pod security and Docker image management.
• Hands-on experience with monitoring and observability tools (Honeycomb, Prometheus and Grafana) and defining alerting standards.
• Strong network fundamentals (TCP/IP, DNS, load balancing, traffic management and troubleshooting) and a good grasp of microservices and cloud architecture patterns.
• Experience managing security patching, vulnerability management and dependency hygiene.
• Proficient with Git (GitLab, GitHub and Bitbucket), able to work autonomously and contribute to engineering standards across teams.

Nice to have

• Terragrunt or equivalent tooling.
• Go.
• Service mesh (Istio).
• Familiarity with compliance frameworks such as PCI DSS.

Details

• Location: Bangalore, India.
• Hybrid work: three days in the office per week.
• Number of openings: 1.