Build and maintain observability coverage (metrics, logs, alerting) so that platform and application health are measurable and actionable, not just instrumented.
Apply policy-as-code to enforce security, compliance, and operational standards across the platform, and reduce reliance on manual review gates.
Design and review Identity and Access Management patterns, including workload identity, least-privilege access models, and secrets management -- with a clear bias away from static credentials.
Participate in business continuity and disaster recovery planning for platform services, including failover design, RTO/RPO definition, and recovery testing.
Contribute to CI/CD pipeline design and standards used across engineering teams building on the platform.
Use AI-assisted engineering tools (e.g., Claude Code, GitHub Copilot, or equivalent) as part of the standard workflow, and evaluate where AI-driven platform capabilities (automated remediation, intelligent alerting, natural-language operational tooling) can be responsibly introduced into the platform itself.
Mentor junior and mid-level engineers through code/design review, pairing, and informal technical coaching. Help less experienced engineers build sound judgment around idempotency, error handling, and migration candidacy when evaluating legacy automation.
Required Qualifications
8+ years in platform, infrastructure, or site reliability engineering roles, with demonstrated Principal-level scope (technical leadership without formal management).
Deep hands-on experience with Azure, building cloud native architectures using managed services rather than defaulting to IaaS.
Production experience running and operating Kubernetes at scale, ideally AKS specifically.
Strong GitOps experience (ArgoCD, Flux, or equivalent) -- all infrastructure and cluster changes should trace to a git commit as a matter of practice, not preference.
Experience leading or significantly contributing to a data center-to-cloud migration, including business continuity and disaster recovery planning.
Working fluency in policy-as-code tooling (Kyverno, OPA/Gatekeeper, or equivalent) for security and compliance enforcement.
Strong Identity and Access Management background: workload identity federation, least-privilege IAM design, secrets management patterns that avoid static credentials.
Experience building and maintaining an observability stack (Prometheus, Grafana, Thanos, or equivalent).
Solid Terraform experience, including designing reusable modules consumed by other teams, not just single-project usage.
Practical, current experience using AI-assisted development tools in daily engineering work.
Demonstrated ability to mentor other engineers -- through review, pairing, or informal technical leadership -- without formal authority.
Preferred Qualifications
Experience designing or operating hub-and-spoke network architectures in Azure.
Familiarity with CI/CD pipeline design for multi-team, multi-repo environments (e.g., GitHub Actions-based runner infrastructure).
Exposure to evaluating or building genuinely AI-driven operational tooling (as distinct from rules-based automation mislabeled as AI).
Experience presenting technical tradeoffs to both engineering and business stakeholders.
