Tooling Engineer ("ONLY LOCAL TO GA")

Position Summary

We are seeking a highly experienced Tooling Engineer – Harness with 10–12 years of experience in software engineering, platform engineering, solution architecture, or related technical leadership roles. The ideal candidate will have strong hands-on experience owning and governing enterprise CI/CD platforms, with Harness as the primary platform.

Key Responsibilities

• Enterprise Harness Platform Ownership

• Own Harness as the enterprise software delivery platform, including:
• Platform architecture
• Configuration standards
• RBAC
• Governance model
• Module adoption roadmap
• Vendor relationship
• Establish enterprise-wide standards for Harness adoption and platform governance
• Define scalable architecture and operational standards for multi-team environments
• Drive platform modernization, upgrades, migrations, and capability adoption
• Establish governance that enables engineering teams while maintaining appropriate controls for regulated workloads
• Define scalable architecture and operational standards for multi-team environments
• Drive platform modernization, upgrades, migrations, and capability adoption
• Establish governance that enables engineering teams while maintaining appropriate controls for regulated workloads

• Continuous Integration (CI)

• Establish reusable Harness CI pipeline templates and shared libraries
• Define standards for:
• Build caching
• Parallelization
• Pipeline reuse
• Build optimization
• Develop CI patterns that maintain efficient build times as engineering organizations scale
• Establish golden paths for software delivery and standardize the supported developer experience
• Define enterprise deployment strategies, including:
• Progressive deployments
• Canary deployments
• Blue-Green deployments
• Establish GitOps workflows and environment promotion strategies
• Define artifact promotion paths and release governance
• Establish approval gates and change-control evidence required for regulated payment workloads
• Ensure deployment processes are secure, auditable, repeatable, and scalable

• Security & Software Supply Chain

• Integrate security testing into enterprise delivery pipelines
• Orchestrate:
• SAST
• DAST
• SCA
• Container scanning
• Secrets scanning
• Partner with Application Security teams to define vulnerability severity thresholds
• Determine which security findings should block deployments versus provide advisory feedback
• Establish security exemption workflows and remediation SLAs
• Ensure security findings have an effective triage and remediation process

• Cloud Cost Management / CCM

• Implement cloud cost visibility and management capabilities
• Establish:
• Budgets
• Cost anomaly detection
• Non-production resource auto-stopping
• Showback / Chargeback
• Connect architecture and engineering decisions to unit economics and cloud cost management
• Establish cost management as part of the engineering design process rather than a periodic reporting exercise
• Policy-as-Code
• Establish enterprise standards for policy-as-code
• Ensure pipeline governance is:
• Version controlled
• Reviewable
• Auditable
• Automated
• Reduce dependency on manually configured UI-based governance
• Experience with OPA/Rego or comparable policy-as-code technologies is highly desirable

• SDLC Toolchain Ownership

• Own and architect the broader software delivery toolchain, including:
• Source control
• Issue tracking
• Artifact management
• Static analysis
• Test infrastructure
• CI/CD
• Define integration architecture across the SDLC toolchain
• Manage tool entitlements, licensing, upgrades, and migrations
• Identify and consolidate redundant tools
• Establish supported enterprise tooling standards
• Define and maintain golden paths representing the documented and supported route from commit to production
• AI in Engineering Workflows
• Define and implement engineering delivery metrics, including:
• DORA metrics
• Flow metrics
• Lead time
• Review latency
• Establish appropriate governance around engineering metrics
• Ensure metrics are used to identify system-level constraints and process improvements, not to evaluate individual engineers
• Provide leadership with actionable insights into software delivery performance

• Required Qualifications

• 10+ years of experience in software engineering, solution architecture, platform engineering, or related technical disciplines
• Senior architecture or platform leadership experience with distributed, highly available systems
• Experience in payments, fintech, merchant services, or similarly regulated transaction-processing environments
• Proven ownership of an enterprise CI/CD platform, not merely experience using one
• Strong experience with:
• Pipeline-as-code
• Pipeline templates
• Reusable CI/CD components
• RBAC
• Secrets management
• Multi-team governance
• Enterprise-scale experience with one or more platforms such as:
• Harness
• GitLab
• Azure DevOps
• GitHub Actions + Argo/Spinnaker
• Jenkins
• Experience integrating security scanning into software delivery pipelines
• Experience establishing security policy gates and remediation workflows
• Strong understanding of DORA and engineering delivery metrics, including appropriate use and limitations
• Strong API and integration architecture experience, including:
• REST
• Asynchronous messaging
• Event-driven architectures
• API lifecycle governance
• Strong cloud-native architecture experience
• Production experience with Kubernetes
• Demonstrated ability to influence technical direction across teams without direct reporting authority
• Excellent ability to communicate technical trade-offs to executive leadership

• Preferred Qualifications

• Hands-on experience with multiple Harness modules, particularly:
• STO
• SEI
• CCM
• Experience with OPA/Rego or comparable policy-as-code frameworks
• Cloud cost management / FinOps experience
• Experience implementing showback or chargeback models
• Applied Generative AI or Agentic AI development patterns within engineering workflows
• Experience establishing AI governance
• Architecture leadership for large-scale API ecosystems, partner platforms, or merchant-facing onboarding systems
• Experience with PCI DSS-aligned controls
• IAM experience
• Fraud and risk integration experience
• Hands-on development experience with one or more:
• .NET
• Java
• Go
• Node.js
• Experience with GitHub or Atlassian toolchains