Senior Platform Engineer

Swivel•San Antonio, TX

About The Position

SWIVEL is seeking a Senior Platform Engineer with deep expertise in AWS, DevOps, and DevSecOps to design and maintain secure, scalable, and developer-friendly platforms. The role champions developer experience through self-service capabilities, golden paths, and automation for common workflows, while promoting platform reliability through SRE practices and compliance automation. This hands-on technical role will design and evolve a modern AWS-based platform, build internal developer platform capabilities, influence platform standards, and embed reliability and security throughout the engineering environment. The position works with tools and practices across DevOps, DevSecOps, observability, and platform engineering, with Atlassian Compass preferred or Backstage as an Internal Developer Portal option. The role also partners with engineering teams, mentors peers, and operates with minimal supervision to deliver solution-oriented outcomes.

Requirements

Bachelor’s degree in Computer Science or a related field from an accredited four-year college or university, or equivalent work experience may be considered.
At least 7 years of experience designing, building, and operating AWS-based cloud platforms using DevOps and DevSecOps practices, infrastructure as code, CI/CD pipelines, container orchestration, observability tooling, and secure, scalable platform engineering solutions.
Experience with AWS services including ECS, EKS, ECR, IAM, VPC, Lambda, API Gateway, S3, and RDS.
Experience with AWS CDK or Terraform for infrastructure as code.
Experience with GitHub, GitHub Actions, and GitHub Advanced Security.
Experience with one or more of C#, Python, Bash, Go, Java, or JavaScript.
Experience with container platforms and services including ECS, EKS, and ECR.
Experience with OpenTelemetry and Datadog.
Strong problem-solving and solution-oriented mindset.

Nice To Haves

Experience with Atlassian Compass or Backstage for internal developer portals.
Experience with policy as code using OPA (Open Policy Agent) and Conftest.
Experience with secrets management tools such as AWS Secrets Manager or Vault.
Experience with developer portals and platform standardization using Atlassian Compass or Backstage.
AWS certification such as Solutions Architect, DevOps Engineer, or Security Specialty.
GitHub certification in GitHub Actions or GitHub Advanced Security.
OPA/Policy-as-Code certification or equivalent governance/security automation credentials.

Responsibilities

Architect and maintain AWS-based infrastructure, including ECS, EKS, ECR, VPC, IAM, Lambda, API Gateway, S3, and RDS.
Implement modular, reusable infrastructure-as-code patterns using AWS CDK, AWS CloudFormation, and Terraform.
Optimize cost, performance, and security across environments.
Orchestrate containers, observability stacks, and scaling strategies across distributed systems to ensure reliability and high availability.
Build and standardize CI/CD pipelines using GitHub Actions, reusable workflows, and deployment strategies.
Integrate GitHub Advanced Security tools, including CodeQL, Secret Scanning, and Dependabot, into pipelines.
Enable OIDC-based deployments for secure, secretless AWS access.
Drive adoption of an internal developer platform such as Atlassian Compass or Backstage to provide developer self-service, service cataloging, scorecards, and golden paths.
Implement OpenTelemetry for distributed tracing and metrics.
Configure APM monitoring tools such as Datadog, including dashboards, alerts, and SLOs for application health and performance.
Improve MTTR through automated incident response and runbooks.
Embed security checks such as SAST, dependency scanning, secret scanning, and container image scanning into CI/CD pipelines to support SOC 2 and PCI compliance.
Apply AWS Well-Architected Framework principles to platform designs, including security, reliability, performance efficiency, cost optimization, and operational excellence.
Use SBOMs to support dependency transparency, compliance, and vulnerability management.
Use Cosign for cryptographic verification of container images to help prevent tampering and supply-chain attacks.
Work with AI MCP servers to automate operational workflows and enhance developer experience.
Partner with engineering teams to define platform standards and best practices.
Mentor peers and promote an automation-first culture.
Operate with minimal supervision and deliver solution-oriented outcomes.