Platform Engineer - IaC & CI/CD

Own the IaC foundation used to provision and maintain reView environments.

• Design, build, and maintain reusable Terraform and/or AWS CDK modules and infrastructure patterns.
• Automate provisioning of development, test, staging, production, and applicable federal environments.
• Manage application-level AWS infrastructure, Kubernetes/EKS resources, load balancing, routing, autoscaling, storage, and supporting services through code.
• Establish version-controlled, repeatable infrastructure configurations that minimize configuration drift.
• Maintain environment configuration, secrets integration, and infrastructure lifecycle automation.
• Define and maintain the infrastructure pattern for federal delivery, including the account, partition, and boundary model applicable to the environment (for example AWS GovCloud or a controlled commercial enclave).
• Support infrastructure validation, recovery, and controlled change management.

Tools / Skills:AWS, Terraform and/or AWS CDK, Kubernetes/EKS, Docker, Git.

Build and maintain the automated delivery pipelines used to move reView from source code through release.

• Design and maintain build, test, deployment, promotion, and release pipelines.
• Integrate QA automation, security validation, and quality gates into CI/CD workflows.
• Automate container builds, artifact creation, versioning, signing, storage, and promotion.
• Establish repeatable deployment and rollback strategies.
• Support controlled promotion across development, test, staging, production, and federal release environments.
• Own the offline delivery path: reproducible, version-pinned installation bundles and mirrored dependency and registry content for on-premises and air-gapped customer environments where pipeline egress is unavailable.
• Maintain pipeline reliability, performance, traceability, and release evidence.

Tools / Skills:CI/CD pipelines, Git, Docker, Kubernetes/EKS, AWS, artifact repositories, offline packaging and registry mirroring.

Create reliable platform patterns that allow Engineering to develop and deploy reView efficiently.

• Establish reusable deployment templates, environment patterns, and developer workflows.
• Maintain container and Kubernetes deployment standards for reView services.
• Standardize runtime configuration, secrets integration, service connectivity, ingress, and application networking patterns.
• Enable consistent local, integration, and cloud deployment workflows.
• Improve developer self-service and reduce manual environment and deployment activities.
• Partner with Engineering to resolve platform and deployment issues.

Tools / Skills:AWS, Docker, Kubernetes/EKS, Git, configuration and secrets management.

Embed security and software-assurance controls throughout infrastructure and delivery automation.

• Integrate SAST, SCA, secrets scanning, container scanning, and applicable policy-as-code controls into CI/CD.
• Implement secure secrets and credential-management patterns.
• Support least-privilege IAM patterns within application and delivery environments.
• Maintain secure container build and artifact-management practices.
• Support artifact integrity, signing, provenance, and traceability requirements, including SBOM generation and the build evidence underpinning secure software development attestation applicable to federal delivery.
• Ensure delivery automation produces usable evidence for SOC 2 change-management controls and, where applicable, NIST 800-171 / CMMC requirements — so evidence is produced once and used everywhere.
• Partner with QA Automation and Operations to implement automated security and release controls required for Global Product and Federal delivery.

Tools / Skills:AWS IAM, secrets management, CI/CD security tooling, SBOM and signing tooling, Docker, Kubernetes, IaC security practices.

Ensure the platform engineering foundation provides visibility, resilience, and operational reliability.

• Integrate logging, metrics, health monitoring, and alerting into platform environments.
• Establish reusable observability patterns across reView services and deployments.
• Support autoscaling, resource management, availability, recovery, and resilience patterns.
• Own backup, restore, and disaster-recovery automation for stateful platform services, including the graph store — with defined recovery objectives and periodic restore testing, not backup configuration alone.
• Monitor infrastructure and pipeline performance and identify opportunities for improvement.
• Partner with QA Automation on performance, scalability, reliability, and failure testing.
• Support Operations with the telemetry and tooling required for production monitoring and initial triage.

Tools / Skills:AWS, CloudWatch, Grafana, Loki, Kubernetes/EKS, Memgraph and other stateful services, container observability.

Maintain a consistent, secure, and scalable platform-engineering foundation as reView evolves.

• Establish standards for IaC, pipelines, environments, deployment patterns, and infrastructure changes.
• Maintain documentation, reusable modules, templates, and platform runbooks.
• Identify and remediate infrastructure drift, manual processes, and delivery bottlenecks.
• Support release traceability and objective deployment evidence.
• Continuously improve automation, reliability, security, developer experience, and delivery speed.
• Maintain reusable capabilities supporting both the Global Product and Federal delivery tracks.

Tools / Skills:Git, IaC module registries, documentation and runbook tooling, Jira.