Platform Engineer

Full-time remote from anywhere in the U.S.

About the role

The Platform Engineer is a mid-level member of the Atorus Research engineering team, taking meaningful ownership of the design, development, and maintenance of our cloud platform. You will operate with increasing autonomy, delivering platform work end-to-end while working closely alongside senior engineers on more complex architectural challenges. You will work across development, data science, and security teams to help ensure Atorus can reliably deliver high-quality clinical data science solutions in a regulated environment. You will contribute to platform standards, support security and compliance initiatives, and proactively identify and implement improvements to tooling and processes. You will collaborate with stakeholders across the business to plan and prioritize work, contributing to project delivery with clear communication and a strong sense of ownership throughout.

Responsibilities

• Platform Design & Architecture
  • Contribute to the design and evolution of the Atorus cloud platform including Kubernetes architecture, networking, storage, and compute provisioning.
  • Implement and uphold infrastructure standards, patterns, and guardrails across the platform.
  • Evaluate and propose new technologies and tools to improve platform reliability, security, and developer productivity.
  • Build and configure cloud environments for multiple use cases, both internal to Atorus and client facing, with a focus on repeatability and resilience.
• Infrastructure & Cloud Engineering
  • Own and operate cloud infrastructure including Kubernetes, networking, databases, and access controls across AWS, with plans to expand to additional providers.
  • Manage Kubernetes cluster lifecycle tasks including upgrades, node provisioning, security hardening, and observability configuration.
  • Implement and maintain GitOps workflows and CI/CD pipelines, contributing to the reliability and quality of the deployment process.
  • Manage and optimize in-cluster service mesh configuration for security and performance.
  • Provision and configure cloud resources including compute, networking, and storage, developing reusable templates and design patterns to standardize deployment.
• Security & Compliance
  • Support platform-level security hardening initiatives across the full stack from application to data layer to meet regulatory compliance requirements.
  • Manage identity and access management configurations including OIDC, SAML, and LDAP integrations with fine-grained authorization policies.
  • Build and maintain RBAC policies across the cloud estate, covering user access controls and application-level permissions.
  • Contribute to vulnerability management processes, integrating scanning tooling and tracking remediation to defined SLAs.
  • Implement and maintain audit logging, monitoring, and alerting across platform components.
  • Support evidence collection and documentation processes to demonstrate operational effectiveness to auditors.
• Data Science Platform Support
  • Support the administration and evolution of the Posit Professional suite (Posit Workbench, Posit Connect, Posit Package Manager) running inside the platform.
  • Manage storage integrations including NetApp FSx ONTAP and EFS, including ACL management and high availability configurations.
  • Identify and implement platform improvements, taking ownership of tasks from design through to delivery.
• Developer Experience & Collaboration
  • Work with development and operational teams to implement CI/CD pipelines, deployment standards, and platform onboarding processes.
  • Provide technical support and guidance to engineering and data science teams on infrastructure and application-related questions.
  • Produce and maintain accurate technical documentation for platform components, runbooks, and operational procedures.
  • Consult with stakeholders to understand requirements and translate them into well-designed, scalable infrastructure solutions.
  • Contribute to project planning and prioritization, managing assigned work from initial scoping through to delivery with clear communication throughout.

Requirements

• Core Infrastructure
  • Solid hands-on experience with AWS (EKS, IAM, networking, RDS/Aurora, S3, and related services).
  • Working knowledge of Kubernetes including cluster operations, RBAC, network policies, storage, and workload management.
  • Practical experience with infrastructure-as-code tooling (Terraform and Helm).
  • Familiarity with GitOps practices and tools such as ArgoCD and GitHub Actions.
  • Good understanding of Linux system administration, ACLs, and storage concepts.
• Security & Identity Management
  • Experience configuring and maintaining identity providers using OIDC, SAML, or LDAP.
  • Familiarity with service mesh concepts (Istio or similar) including mTLS and JWT-based authentication.
  • Some exposure to compliance frameworks (SOC 2, ISO 27001, or similar) and the types of evidence required.
  • Understanding of secrets management, certificate lifecycle, and network security controls.
• Observability & Reliability
  • Experience with observability tooling such as Prometheus, Grafana, Elasticsearch, or OpenSearch.
  • Comfortable working to defined SLOs and SLAs and contributing to reliability improvements.
  • Incident management experience including participation in post-mortems and remediation planning.
• Soft Skills
  • Clear written and verbal communication, with the ability to explain technical concepts to non-technical colleagues.
  • Collaborative and pragmatic approach to working across different teams and disciplines.
  • Self-directed with a strong sense of ownership, able to manage tasks with moderate supervision.
  • Commitment to documentation, knowledge sharing, and continuous improvement.

Qualifications

• Experience with Posit Professional products (Workbench, Connect, Package Manager) or similar data science platform tooling.
• Experience with SAS installations and configurations.
• Familiarity with NetApp ONTAP including SVM management and audit logging.
• Exposure to Crossplane or other Kubernetes-native infrastructure provisioning approaches.
• Familiarity with change management processes and procedures.