Senior Platform Engineer II

Overview

Build and operate secure, reliable Linux platforms and automation that help engineering teams deliver software efficiently, leading platform improvements across enterprise environments.

What you'll do

• Build, operate, and troubleshoot enterprise UNIX/Linux platforms, from server provisioning through production readiness and lifecycle management.
• Lead Linux vulnerability remediation, security hardening, compliance validation, and audit readiness at enterprise scale.
• Plan and deliver operating system patching, upgrades, hardening, and fleet maintenance.
• Automate platform operations with Ansible, Python, Shell, APIs, and infrastructure as code; maintain Git-based workflows and CI/CD pipelines.
• Manage Linux workloads across AWS, Azure, and Google Cloud, including image and platform lifecycle activities.
• Improve availability with monitoring, diagnostics, auto-remediation, and self-healing capabilities.
• Resolve complex operating system, network, storage, authentication, and performance issues; lead root-cause analysis and preventive actions.
• Manage secure access controls, including SSH, sudo, PAM, certificates, and privileged access.
• Support incident, problem, and change management, production operations, and on-call response.
• Maintain platform standards, runbooks, procedures, and technical documentation; work across teams to improve platform stability and usability.

What you'll need

• 7+ years of hands-on Platform Engineering, including substantial enterprise Linux operations.
• Expert Linux administration across RHEL 8/9, Ubuntu 22.04/24.04, and Amazon Linux 2/2023, including security and kernel patching, canary rollouts, rollback (such as dnf history), users and sudo, SSH/sshd drop-in configuration, services, permissions, logging, and production troubleshooting.
• Experience applying and maintaining CIS benchmarks with Ansible Lockdown, remediating failed controls, and managing documented policy waivers with business justification and Ansible variable mapping.
• Strong Ansible skills for configuration management, patching, and hardening, including integrating hardening into golden images and onboarding third-party AMIs (bootstrap, automation keys, domain join, and agents).
• Advanced experience with AWS, Azure, and Google Cloud for Linux workloads, including EC2, user data/bootstrap, and private repositories.
• Advanced Terraform and Ansible skills, plus hands-on experience building standard Linux images with Packer or AWS Image Builder.
• Experience designing CI/CD pipelines, primarily with GitHub Actions, or with Azure DevOps, Jenkins, or similar tools, supporting patching, CIS workflows, and governed operational runbooks.
• Experience remediating Qualys vulnerability QIDs (CVE/package) and CIS compliance CIDs, and integrating security scanners such as SonarQube, Veracode, Snyk, and StackHawk into CI/CD where applicable.
• A track record of delivering automated platform solutions, such as large-scale vulnerability (VIT) remediation, waiver registers, and mirror or compliance diagnostics.
• Use of AI-assisted engineering tools to accelerate troubleshooting, scripting, log analysis, documentation, RCA, and automation development.

Nice to have

• AWS certifications or working knowledge of Azure and Google Cloud.
• Experience with immutable infrastructure, autoscaling, observability, monitoring, GitOps, or progressive delivery.
• Experience supporting mixed Windows/Linux environments and IT operations, with knowledge of DNS, load balancers, reverse proxies, Microsoft Active Directory, and ADFS.