Senior Platform Engineer (DevOps)

About the role

A client is building a platform engineering function from the ground up, and this role is at its centre. As a Senior Platform Engineer you will be a founding team member working directly with the Platform Engineering Manager to turn strategy into production infrastructure, drive adoption across engineering teams and set the technical bar for how the platform is built and operated. The position is remote, open to Mexico and Argentina.

Key responsibilities

• Cloud modernization: migrate AWS and Azure infrastructure to OpenTofu/Terraform and Ansible, audit the cloud estate against the Well-Architected Frameworks, and implement policy-as-code (OPA/Conftest, AWS SCPs, Azure Policy)
• Build reusable Terraform modules for compute, networking, storage, databases and identity, and define FinOps standards
• Design the observability stack (metrics, logs, traces, dashboards) and define SLIs/SLOs, error budgets and alerting
• Establish the SRE practice: incident runbooks, post-incident reviews and at least one chaos engineering exercise
• Deploy a developer portal (Backstage, GitHub or equivalent) and build golden paths for common developer workflows
• Own the CI/CD platform (GitHub Actions, GitLab CI), container image build and scan pipelines, and Kubernetes operations (EKS/AKS, Helm, admission controllers, RBAC, service mesh)
• Partner with teams to migrate workloads, embed security by default, write documentation and mentor junior engineers

Required profile

• 5+ years in platform, infrastructure or DevOps engineering with direct production ownership on AWS and/or Azure
• Strong communication and documentation skills, able to present architecture decisions to peers and leadership

Required skills

• Deep OpenTofu/Terraform and Kubernetes (EKS/AKS, Helm, RBAC, network policies)
• Observability tools such as Prometheus, Grafana, Loki, Tempo, Datadog or OpenTelemetry
• CI/CD platforms (GitHub Actions, GitLab CI) and GitOps (ArgoCD or Flux)
• Developer portal (Backstage or equivalent) and security practices (policy-as-code, IaC scanning, secrets management)