Platform Engineer

• Provision complete infrastructure stacks for new product launches. Recent examples include full EKS buildouts (Karpenter, Istio, Crossplane), PostgreSQL/Redis data stores with IAM authentication, CloudFront distributions, and Datadog instrumentation across multiple concurrent initiatives.
• Lead Kubernetes platform evolution. Drive cluster upgrades, add-on lifecycle (Karpenter, Istio, Crossplane), pod identity migration, and namespace management across all environments.
• Design secure, scalable abstractions that hide infrastructure complexity and define the golden paths other teams build on.
• Own authentication infrastructure for internal and external products: Auth0 SSO, Azure AD/Entra, AWS IAM, EKS Pod Identity, and OIDC federation.
• Drive zero-trust infrastructure patterns. Rotating IAM credentials for RDS, per-app Istio authorization policies, and network isolation.
• Enable LLM-powered workflows (Bedrock, Claude Code, and similar) that let engineering teams move faster without sacrificing governance.

Senior Platform Engineer

• Provision and manage cloud infrastructure across compute, networking, storage, and managed databases
• Maintain consistency across development, staging, and production environments
• Plan and execute workload migrations across cloud providers with minimal disruption
• Identify and implement infrastructure cost optimization opportunities
• Build and maintain CI/CD pipelines across a multi-repository environment
• Implement deployment strategies such as blue/green, canary, and rolling deployments
• Develop automation tooling and scripts to reduce manual effort and improve delivery speed
• Write and maintain Terraform infrastructure across multi-account, multi-environment systems
• Establish IaC standards, module reuse patterns, and state management practices
• Drive infrastructure changes through version-controlled, peer-reviewed workflows
• Participate in on-call rotation and lead incident response efforts
• Maintain observability through dashboards, alerting, logging, and SLO tracking
• Conduct post-incident reviews and implement long-term remediations
• Manage secrets, certificates, and access controls using least-privilege principles
• Apply security best practices across infrastructure, containers, and CI/CD pipelines
• Support audit and compliance initiatives through documentation and access reviews
• Partner with engineering teams on infrastructure guidance and service design
• Create architecture documentation, runbooks, and operational guides
• Help build self-service platform capabilities for engineering teams

• Own the operational lifecycle of AI agents deployed across PEMCO: deployment, monitoring, scaling, incident response, and retirement.
• Build and maintain observability for the AI layer, including cost tracking, latency, error rates, model performance, token usage, and production monitoring for agent workers.
• Manage agent orchestration infrastructure, including configuration, versioning, connection management, and tool registration. Current stack includes MCP-based orchestration and Azure OpenAI services.
• Establish runbooks and incident response procedures for AI agent failures. When an agent supporting a business workflow goes down, this role owns the recovery.
• Implement prompt governance controls and role-based model access per Information Security standards: PII exposure monitoring, prompt injection detection, and access enforcement. Contribute requirements and technical capabilities to InfoSec for AI-specific policy development.
• Build the enterprise agent marketplace: deploy and manage AI agents within an enterprise UI framework, ensuring discoverability, versioning, and access controls.
• Evaluate new model releases, track capability evolution, and make recommendations on model selection. Maintain a knowledge management layer for AI operations including decision logs, model inventories, and governance documentation.
• Contribute directly to AI governance and the AI Governance Working Group. Operationalize security, governance, and compliance standards defined by Information Security and Data & AI leadership across all AI deployments.
• Optimize AI infrastructure costs through model selection, caching strategies, batching, and token budget management.
• Partner with the Data & AI team on production readiness for models and agents. Data & AI owns model development, training, and AI governance policy. This role owns the operational deployment, monitoring, fallback behavior, graceful degradation, and knowledge layer integration.
• As the function matures, define team structure, secure headcount, and build a team.
• Demonstrate behaviors consistent with PEMCO's policies, values, code of ethics, and business conduct.
• Authentically support the PEMCO Brand and constantly are on the lookout for top talent to join us to achieve our Mission to Worry Less and Live More.
• Other duties as assigned.

See all jobs on JobTailor

Senior Platform Engineer

Senior Platform Engineer

Principal AI Platform Engineer