Senior Platform Engineer

SWBC•San Antonio, TX

15h

About The Position

SWIVEL is seeking a talented individual who will have deep expertise in AWS, DevOps, and DevSecOps practices, can design and maintain secure, scalable, and developer-friendly platforms. This role will champion developer experience by building self-service capabilities, golden paths, and automation for common workflows, while ensuring platform reliability through SRE practices and compliance automation. The ideal candidate will have experience with Atlassian Compass (preferred) or Backstage for Internal Developer Portals, strong CI/CD skills, and a solution-oriented mindset. Why you'll love this role: In this role, you’ll design and evolve a modern AWS‑based platform that prioritizes developer experience, automation, and secure‑by‑default practices. You’ll have the opportunity to build internal developer platforms, golden paths, and self‑service capabilities that meaningfully accelerate engineering teams. This is a hands‑on, highly technical role where you’ll influence platform standards, embed reliability and security into every layer, and work with cutting‑edge tooling across DevOps, DevSecOps, and observability. If you’re motivated by solving complex infrastructure challenges and creating scalable platforms that empower developers, this role offers both impact and ownership.

Requirements

Bachelor’s degree in Computer Science or related of study from an accredited four-year college or university or equivalent work experience may be considered.
Minimum of seven (7) years of experience designing, building, and operating AWS-based cloud platforms utilizing DevOps and DevSecOps practices, infrastructure as code, CI/CD pipelines, container orchestration, observability tooling, and secure, scalable platform engineering solutions.
Cloud: AWS (ECS, EKS, ECR, IAM, VPC, Lambda, API Gateway, S3, RDS).
IaC: AWS CDK (preferred), Terraform.
CI/CD: GitHub, GitHub Actions, GitHub Advanced Security (GHAS).
Languages: C#, Python, Bash, Go, Java, JavaScript.
Containers: ECS, EKS, ECR.
Observability: OpenTelemetry, Datadog.
IDP: Atlassian Compass (preferred) or Backstage.
Strong problem-solving and solution-oriented mindset.

Nice To Haves

AWS services and observability tools like Datadog.
Policy-as-Code experience (OPA, Conftest).
Secrets management (AWS Secrets Manager, Vault).
Experience with developer portals and platform standardization (Atlassian Compass or Backstage).
AWS Certification (Solutions Architect, DevOps Engineer, or Security Specialty) would be preferred.
GitHub Certification (GitHub Actions or GitHub Advanced Security) would be preferred.
OPA/Policy-as-Code Certification (or equivalent governance/security automation credentials) would be preferred

Responsibilities

Architect and maintain AWS-based infrastructure (ECS, EKS, ECR, VPC, IAM, Lambda, API Gateway, S3, RDS).
Implement Infrastructure as Code (IaC) using AWS CDK (preferred), AWS cloud formation and Terraform for modular, reusable patterns.
Optimize cost, performance, and security across environments.
Orchestrate containers, observability stacks, and scaling strategies across distributed systems to ensure reliability and high availability.
Build and standardize CI/CD pipelines using GitHub Actions, reusable workflows, and deployment strategies.
Integrate GitHub Advanced Security (CodeQL, Secret Scanning, Dependabot) into pipelines for proactive security.
Enable OIDC-based deployments for secure, secretless AWS access.
Drive adoption of internal developer platform (IDP) such as Atlassian Compass (Preferred) or Backstage to enable developer self service, service cataloging, scorecards, and golden paths.
Implement OpenTelemetry for distributed tracing and metrics.
Configure APM monitoring tooling (e.g Datadog ), including dashboards, alerts, and SLOs for application health and performance.
Improve MTTR through automated incident response and runbooks.
Embed security checks in CI/CD pipelines (e.g., SAST, dependency scanning, secret scanning, container image scanning, etc.) to support SOC 2 and PCI compliance
Apply AWS Well-Architected Framework principles across all platform designs to ensure security, reliability, performance efficiency, cost optimization, and operational excellence.
SBOM (Software Bill of Materials): Ensures transparency of all dependencies for compliance and vulnerability management.
Cosign (Image Signing): Provides cryptographic verification of container images to prevent tampering and supply chain attacks.
Work with AI MCP servers to automate operational workflows and enhance developer experience.
Partner with engineering teams to define platform standards and best practices.
Mentor peers and promote automation-first culture.
Operate with minimal supervision and deliver solution-oriented outcomes.