Senior Platform Engineer (DevOps) — GCP, Kubernetes & Pulumi

Quick Facts

• Role: Senior Platform Engineer (DevOps)

• Focus: GCP, Kubernetes, Pulumi, GitOps/CI-CD, observability, incident response, secrets lifecycle

Description

You will independently deliver infrastructure tasks that keep production systems reliable, secure, and operationally efficient. The role combines Kubernetes operations on GKE, Infrastructure as Code with Pulumi (including secure environment/secrets/config management), GitOps and CI/CD, incident handling, and compliance-minded security work across services. You will also contribute to monitoring and alerting with Grafana and manage Cloudflare in a code-driven way.

Responsibilities

• Operate production Kubernetes on GKE: daily cluster administration, troubleshooting, maintenance, and reliability improvements

• Build and maintain Infrastructure as Code with Pulumi, including Pulumi ESC for environments, secrets, and configuration (primarily TypeScript and Python)

• Manage GitOps workflows in ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline-level race conditions

• Administer GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager

• Tune Pub/Sub subscriptions (ack deadlines, dead-letter queue/redrive behavior, and backlog alerting)

• Manage Cloudflare as code (Workers and DNS) and clean up outdated preview environments

• Own secrets and configuration lifecycle across services: provisioning, rotation, naming conventions, and prevention of authentication drift

• Respond to production incidents (triage, escalation, documentation/runbooks, incident.io workflows)

• Review and approve PRs with infrastructure changes, ensuring security, correctness, and operational readiness

• Create and maintain Grafana dashboards and alerts, including use of an agent/collector layer such as Grafana Alloy

• Perform infrastructure and security work aligned with SOC2, including separation for regulated/sensitive data environments

• Read and contribute to systems using Go, TypeScript, and Python

Requirements

• Proven experience operating production Kubernetes on GKE in an infrastructure/platform engineering role

• Strong GCP knowledge: IAM, Pub/Sub, Cloud SQL, VPC, Secret Manager, and Pub/Sub subscription tuning/alerting

• Hands-on Pulumi experience including Pulumi ESC for environments, secrets, and configuration; ability to work in TypeScript and Python

• Experience with ArgoCD and GitOps workflows; CI/CD pipeline debugging including race conditions

• Experience operating Pub/Sub subscriptions and understanding DLQ/redrive behavior

• Experience managing Cloudflare Workers and DNS as code, including cleanup of stale preview environments

• Ability to independently triage and handle production incidents using runbooks and incident.io workflows

• Experience reviewing infrastructure PRs and working with Grafana dashboards/alerts and an agent/collector layer such as Grafana Alloy

• Knowledge of security/compliance and SOC2-driven operations in regulated or sensitive data environments

• Ability to read Go and navigate TypeScript/Python codebases

• Focus on security, correctness, and operational readiness in every infrastructure change

• Availability during main European overlap hours (CET/CEST) and willingness to join on-call rotation

Benefits

• Remote-first work in a global team

• Company notebook and flexible time off

• $1,500 one-time contribution for home office equipment during collaboration

• $200 contribution to an AI program and $75 monthly for internet or phone