Principal Platform & Infrastructure Engineer

Job summary

Own the architecture and implementation of a greenfield orchestration platform that runs long-lived, resource-intensive compute jobs across on-premises HPC/HTC infrastructure and cloud, with elastic capacity scaling. Set technical direction for deployment, security, and operations across virtualization, primarily Azure hybrid cloud, networking, identity and secrets management, and Terraform and Ansible automation. Establish security baselines and contribute to production incident response and capacity planning.

Qualifications

• Extensive infrastructure or platform engineering experience, including end-to-end ownership of production systems.
• Hands-on experience with bare-metal on-premises virtualization, such as Proxmox, VMware, or an equivalent hypervisor.
• Production experience with Azure compute, networking, identity and access management, and storage; familiarity with hybrid or multi-cloud patterns.
• Knowledge of subnetting, VLANs, routing, firewall design, DMZ architecture, and VPN or site-to-site connectivity.
• Experience with RBAC, OAuth2/OIDC, SAML, service principals, and secrets management platforms such as Vault or Azure Key Vault.
• Strong Terraform experience, including modules, state management, and multi-environment patterns, and experience with Ansible or equivalent configuration management.
• Linux experience and strong shell scripting ability.
• Experience securing systems that bridge on-premises and cloud environments, such as HPC/HTC compute farms or hybrid data planes.
• Understanding of container runtimes, such as Docker or Apptainer/Singularity, and their networking and security implications.
• Experience with Kubernetes for cloud-burst or elastic compute scenarios.
• Familiarity with workflow orchestration tools such as Prefect, Airflow, or Dagster.
• Exposure to HPC/HTC schedulers, license-managed software, or compute farms.
• Experience with observability stacks such as Prometheus/Grafana or ELK.
• Experience in a regulated or IP-sensitive industry where security is critical.

Responsibilities

• Own end-to-end platform architecture across bare-metal and hypervisor layers, networking, cloud, and orchestration infrastructure.
• Design and implement on-premises virtualization for compute clusters, control-plane services, and developer and test environments.
• Design Azure-focused hybrid cloud architecture, including compute bursting, cost controls, and workload placement.
• Architect subnetting, VLAN segmentation, firewalls, DMZ boundaries, and secure connectivity between on-premises resources, cloud environments, and external services.
• Implement RBAC, service accounts, SSO and federation, and least-privilege access policies.
• Manage secrets management strategy and prevent secrets from being hard-coded or exposed in logs and artifacts.
• Build and maintain Terraform infrastructure as code and Ansible configuration management for repeatable, auditable provisioning.
• Define and enforce security baselines for patching, vulnerability scanning, network hardening, and audit logging.
• Coordinate infrastructure interfaces with the application development lead.
• Mentor team members on infrastructure and security practices.
• Participate in production incident response and capacity planning.
• Evaluate infrastructure tooling and make build-versus-buy decisions.

Skills

Industry

Relocation