You’ll act as a force multiplier at organizational scale: abstracting infrastructure complexity into paved roads, driving adoption of self-service platforms, and embedding reliability, security, costawareness, and observability. You are fluent with AI-assisted and agentic engineering workflows and are expected to help define how the broader engineering org adopts these tools safely and effectively. This role is critical to improving local-to-production parity, reducing cognitive load fleetwide, and sustaining high release velocity across our Kubernetes-based services and data platforms.
What makes this role distinctive
You’ll combine technical strategy, platform product thinking, and hands-on systems leadership to make reliable delivery the default for engineering teams.
RESPONSIBILITIES
Platform Strategy & Technical Leadership
Set and drive the technical roadmap for the Internal Developer Platform (IDP) – not just execute against one handed to you.
Author and review RFCs/design docs that other teams adopt; act as architecture reviewer for infrastructure-impacting changes org-wide.
Serve as the escalation point for the highest-severity production incidents involving platform infrastructure; lead retrospectives and turn findings into structural fixes, not one-off patches.
Mentor senior and staff-level engineers across teams, raising the technical bar for platform engineering, reliability, and secure software delivery org-wide.
Developer Platform & Workflow Enablement
Own and evolve Demandbase’s Internal Developer Platform (Backstage service/API/group catalog, goldenpath scaffolder templates, cicd-components ) as a product – measured by adoption, time-to-first-deploy, and reduction in platform-support toil.
Partner with software, data, security, and product engineering leadership to identify systemic friction across the SDLC and resolve it through automation and platform abstraction rather than one-off fixes.
Define what “good” looks like for AI-assisted development workflows across the org – evaluate, pilot, and roll out coding-agent tooling with the right guardrails.
CI/CD & Release Engineering
Own the architecture of CI/CD orchestration (GitLab CI/CD, shared cicd-components ) supporting high release velocity, strong security guardrails, and local-to-production parity across the engineering org.
Drive standardization of build, test, and deployment patterns across application and data workloads at scale.
Own GitOps-based deployment strategy and evolve it as the org’s service count grows.
Cloud Infrastructure & Kubernetes Platforms
Own the architecture and lifecycle of multi-cluster Kubernetes platforms across environments (EKS, and GKE where applicable) – upgrades, node lifecycle (Karpenter), networking, and security posture at fleet scale.
Own multi-account cloud IAM, networking, and security architecture; set the guardrails other teams build against.
Drive Infrastructure-as-Code strategy (Terraform, Crossplane) for consistency and security across accounts, not just individual environments.
Own service mesh (Istio) architecture across multi-cluster environments, including sidecar injection strategy and traffic policy.
Platform Reliability, Security & Cost
Own core platform components – GitOps tooling, secrets management, service mesh – as production systems.
Own observability platform strategy (Prometheus, Datadog, Grafana/Loki) – what’s collected, indexed, and actionable – balancing signal quality against cost.
Own FinOps practice for platform infrastructure – cost visibility, unit economics, and waste reduction – as a standing responsibility.
Define and evolve org-wide SLIs/SLOs and incident response practices; lead blameless postmortem culture at the organizational level.
Qualifications
10+ years of overall engineering experience, including meaningful hands-on software development (Go, Python, or Java) and 7+ years building and operating cloud infrastructure at scale.
Demonstrated track record operating as a technical leader across multiple teams – driving cross-team RFCs, architecture decisions, or platform strategy.
Deep, hands-on experience designing and operating multi-account, multi-cluster Kubernetes platforms in production (EKS and/or GKE) at meaningful scale (dozens+ of services/clusters).
Strong proficiency with Infrastructure as Code (Terraform, Crossplane) and GitOps practices (Flux or Argo CD) applied at organizational scale.
Deep experience designing and owning CI/CD systems supporting high release velocity and strong security guardrails (GitLab CI/CD preferred).
Hands-on experience with service mesh (Istio) in multi-cluster environments, including security/traffic policy.
Strong experience building and owning observability platforms (Prometheus, Datadog, Grafana, Loki/Mimir/Thanos) with a cost-aware lens.
What You’ll Bring
Working knowledge of container/supply-chain security practices (image scanning, hardened base images, vulnerability remediation).
Experience owning or meaningfully contributing to cloud cost governance/FinOps practice.
Fluency with AI-assisted/agentic development tooling (Cursor, Claude Code, Codex, or equivalent) and informed opinions on safe, effective rollout at organizational scale.
Solid understanding of SLIs/SLOs, alerting strategy, and incident response, with experience leading (not just participating in) blameless postmortems.
Excellent written and verbal communication – staff-level influence runs through docs and reviews as much as code.
Experience supporting data pipeline/batch platforms (Airflow, EMR, Dataproc) is a plus.
Tech Stack
AWS, GCP, Terraform, Crossplane, Kubernetes, Amazon EKS, Google GKE, Karpenter, Istio, GitLab CI/CD, GitOps (Flux, Argo CD), Backstage (Internal Developer Platform), Apache Airflow, Amazon EMR, Google Dataproc, Prometheus, Grafana, Loki, Mimir, Thanos, Datadog, Wiz, Vantage / Finout (FinOps), External Secrets Operator / cloud-native secrets managers, IAM, Go, Python, Java, and AI-assisted/agentic engineering tooling (Cursor, Claude Code, Codex).
Build the paved road.
Help shape the systems, standards, and developer experience that let engineering teams move quickly and safely.
Our Commitment to Diversity, Equity, and Inclusion at Demandbase
At Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis.
We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!
We acknowledge that true diversity and inclusion requires ongoing effort, and we are committed to doing the work required to make our workplace a safe and equitable space for all. Join us in building a community where we can learn from each other, celebrate our differences, and work together.
Unsolicited Submissions
At Demandbase, we value thoughtful partnerships and direct connections with candidates. We’re not accepting unsolicited resumes or outreach from third-party recruiting agencies. Any unsolicited submissions will not be reviewed, and no fees will be paid.
