Platform Engineer

Responsibilities

• Design and scale the networking and on-site computing setup for automated labs including GPU and storage systems that move very large volumes of scientific data.
• Automate network setup and management using Terraform and Ansible covering pfSense and MikroTik environments.
• Own security for the labs robotic equipment and physical hardware working alongside the cloud setup (AWS VPC and IAM).
• Build and protect cloud environments and keep lab systems and cloud systems securely connected.
• Create ready-to-use infrastructure plans so new laboratory sites can be launched quickly securely and in different regions.
• Run security activities such as vulnerability management testing and incident response across both lab hardware and web applications.

Requirements

• 7 years in platform infrastructure systems or DevSecOps engineering.
• Hands-on experience with physical hardware environments such as labs factories robotics or data centers. A background only in software-as-a-service (SaaS) is not enough.
• Strong networking knowledge: routing VLANs firewalls and tools like pfSense and MikroTik.
• Strong Infrastructure-as-Code skills using Terraform Ansible Python and Bash.
• Able to work from the South San Francisco office 3 days a week.
• Must be legally authorized to work in the US (US citizen or Green Card holder). Visa sponsorship is not available.

Skills Required

• Network engineering (routing VLANs firewalls high-speed networking)
• pfSense & MikroTik
• Infrastructure-as-Code (Terraform Ansible)
• Python & Bash scripting
• AWS (VPC IAM ECS Lambda Secrets Manager)
• CI/CD (GitHub Actions)
• DevSecOps & vulnerability management
• Security testing (OWASP SAST/DAST WAF)
• Incident response
• On-site compute and GPU infrastructure
• VPN & secure access (Tailscale WireGuard)