Sr. Platform Engineer

Mayo Clinic • Rochester, MN

11h • $127,900 - $185,500

About The Position

Mayo Clinic is seeking a Sr. Platform Engineer to develop foundational infrastructure, automation, and software to enable platform functionality supporting research, development, hosting, and integration capabilities on the Mayo Clinic Platform. This role reports to the Director - Platform Technology Mayo Clinic Platform and collaborates with the Principal Platform Integration Engineer to execute the technology roadmap. The position involves designing, building, and operating infrastructure primarily on Google Cloud, managing the cloud control plane, authoring Terraform modules, operating Kubernetes clusters, and administering Linux systems. Additionally, the engineer will design, build, and maintain platform APIs and services in Go, treat the platform as a product, produce documentation, build CI/CD pipelines, implement GitOps, automate manual tasks, write automated tests, participate in design and code reviews, define and instrument SLIs/SLOs, participate in on-call rotations, monitor cloud spend, maintain patching and vulnerability remediation, support compliance and audit requirements, apply least-privilege access, and help shape the Mayo Clinic Platform technical roadmap. The role also involves collaborating with product partners and mentoring other engineers.

Requirements

• Bachelor’s degree in a relevant information technology field or, in lieu of a degree, a minimum of 7 years of direct infrastructure, platform, or backend engineering experience of increasing complexity.
• 3–5 years of professional cloud engineering experience building and supporting production platform services.
• Experience delivering software within collaborative, cross-functional teams using iterative or Agile development practices.
• Production experience with Google Cloud Platform, or with another major cloud provider
• Experience designing, building, and operating APIs and backend services, including proficiency in Go or in another backend language with readiness to work primarily in Go.
• Production experience with infrastructure as code using Terraform
• Linux systems administration experience in a production environment.
• Experience with scripting languages such as bash and python
• Experience building and maintaining CI/CD pipelines, such as GitHub Actions or Azure DevOps.
• Familiarity with healthcare data, privacy, security, or interoperability concepts, or demonstrated experience applying secure engineering practices to sensitive data in another highly regulated domain.
• Demonstrated understanding of secure software development practices, including access control, data protection, auditability, responsible production-data handling, and timely escalation of security or compliance concerns.
• Ability to independently own services or components end to end, from design through production support, including problems that are ambiguous or span multiple teams.
• Strong problem-solving and communication skills, including the ability to seek context, incorporate feedback, identify risks, and explain technical decisions.

Nice To Haves

• Experience with Crossplane, Config Connector, or a similar control-plane approach to infrastructure provisioning.
• Working knowledge of healthcare privacy, security, and compliance requirements, including HIPAA.
• Experience with cloud-native application development and technologies such as Docker, Kubernetes, and service mesh or API gateway patterns.
• Experience contributing to the design of complex distributed systems, services, or technical integrations.
• Experience improving engineering practices through testing, automation, documentation, code review, or observability.
• Experience supporting teammates through pairing, technical guidance, or knowledge sharing.
• Experience with policy-as-code and admission control, such as OPA/Gatekeeper, Kyverno, or Sentinel.
• Experience with observability tooling such as Prometheus, Grafana, or OpenTelemetry.
• Experience operating in a multi-cloud or hybrid environment spanning Google Cloud and Azure.
• Google Cloud Professional Cloud Architect or Professional Cloud DevOps Engineer certification, or CKA/CKAD.

Responsibilities

• Design, build, and operate infrastructure primarily on Google Cloud, including networking, IAM, compute, storage, and managed data services
• Build, enhance, and manage the cloud control plane using Crossplane compositions and providers
• Author and maintain reusable Terraform modules with versioning, automated testing and policy validation
• Operate production Kubernetes clusters: versioning, capacity planning, networking, ingress, storage, autoscaling, and multi-tenancy controls
• Troubleshoot workload and cluster-level issues down to the node and container runtime
• Administer Linux systems, including hardened and managed node images, performance tuning, kernel and package management, systemd, networking, and filesystem troubleshooting
• Design, build, and maintain platform APIs, services, and controllers in Go that let product teams provision and manage cloud resources through self-service, with attention to API versioning, backward compatibility, and clear error handling
• Treat the platform as a product: gather requirements from consuming teams, define interfaces, version APIs
• Produce reference documentation, client examples, runbooks, and golden-path templates so adoption does not require a conversation with the platform team
• Build and maintain pipelines in GitHub Actions and Azure DevOps, including reusable workflows, templates, self-hosted runners, and secret management
• Implement GitOps-based deployment patterns and promotion flows across environments using tools such as Argo CD
• Reduce manual toil by automating provisioning, onboarding, certificate and credential rotation, and routine operational requests
• Write and maintain automated tests for both application and infrastructure code, and integrate dependency, container image, infrastructure-as-code, and static analysis scanning into CI
• Participate in design and code review, upholding standards for readability, testability, and maintainability across the team’s repositories
• Define and instrument SLIs and SLOs for platform services; build dashboards, alerting, logging, and tracing
• Participate in on-call rotation, lead incident response, and drive blameless postmortems
• Monitor and optimize cloud spend for owned services
• Maintain patching and vulnerability remediation cadence for base images, node pools, application dependencies, and Terraform and Crossplane provider versions
• Support compliance and audit requirements through policy-as-code and admission controls
• Apply least-privilege access and defense in depth across projects and clusters, including service accounts and Workload Identity, VPC Service Controls, private networking, and organization policy constraints
• Help shape and execute the Mayo Clinic Platform technical roadmap, providing technical input based on implementation experience, operational learning, and the needs of teams using the platform
• Collaborate with product partners to follow established Software Development Life Cycle and Product Development Life Cycle processes, helping keep technical delivery aligned with product goals and organizational requirements.
• Mentor engineers through pairing, design guidance, and code review, strengthening team practice in infrastructure as code, Go, and Kubernetes

Benefits

• Medical: Multiple plan options.
• Dental: Delta Dental or reimbursement account for flexible coverage.
• Vision: Affordable plan with national network.
• Pre-Tax Savings: HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior