Sr. Platform Engineer-PH
RemoteManila, Metro Manila, Philippines
Job Summary
Own the infrastructure for the client-delivery pipeline by executing IaC with Terraform/OpenTofu to provision new clients via a one-line flag flip and enforcing gated workflow production applies. Manage GCP multi-tenancy through physical project isolation and IAM, while implementing runtime isolation for shared services to prevent noisy-neighbor degradation. Establish identity and secrets using a keyless model with Workload Identity Federation, and maintain CI/CD via GitHub Actions with OIDC and build-once-promote patterns. Deliver proactive observability with SLOs, freshness alerting, evidence-first incident response, and per-client cost attribution. This role focuses on deep infrastructure, security, and DevOps rather than application features. The position requires 8+ years of platform experience, a delivery-first mindset, and availability for US Pacific timezone hours.
Required Qualifications
- 8+ years of platform / infra / DevOps / SRE, owning cloud architecture end-to-end
- expertise in Terraform / OpenTofu — production modules, multi-env, gated apply
- deep GCP — IAM & SA design, WIF, Cloud Run, networking, Secret Manager, BigQuery admin
- strong CI/CD — GitHub Actions (or equivalent), OIDC/keyless, build-once-promote, trunk-based
- expertise in security & identity judgment — keyless, least-privilege, gated-prod posture you own
- experience in multi-tenant isolation at both the data and runtime tiers
- proactive observability & incident response — alerting, SLOs, evidence-first debugging, on-call coverage
- experience in per-client cost attribution / FinOps instincts
- work with AWS alongside GCP (QuickSight reporting path, Secrets Manager)
- delivery-first mindset: infra right-sized to delivery outcomes, not over-engineered
- excellent written and verbal English communication skills
- a fully functional and up-to-date computer with which to perform duties
- willing to install next generation end point protection on the computer
- be a current resident of the Philippines and can perform work from there
- willing to work within US Pacific timezone (8am - 5pm PST, 12AM - 9AM Manila time) or during client hours as required
- willing to undergo a 90-days probationary period upon initial hire
- Terraform/OpenTofu
- GCP (Cloud Run, BigQuery, IAM, WIF, Secret Manager)
- GitHub Actions
- Supabase
- Vercel
- AWS (Quick, Secrets Manager)
- Claude (Anthropic API)
- modern, opinionated, no legacy click-ops
Desired Qualifications
- Multi-client/consulting delivery pipelines
- Supabase/Vercel ops
- Cloud Run cold-start & scaling tuning
- AI-agent / LLM runtime infra (MCP, model APIs)
- AI-augmented engineering workflows
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.