Principal Platform & Infrastructure Engineer

In this senior role you will own the end-to-end platform architecture for a greenfield orchestration platform, spanning bare-metal through cloud and networking. You will define how on-prem and Azure-based resources are provisioned, secured, and operated, setting patterns for the team. You will partner with software engineers to define clean interfaces between infrastructure and application logic, and you will mentor the team on best practices. This position offers impact across security, scalability, and reliable workflow execution in a hybrid environment.

• Own end-to-end platform architecture across bare-metal, virtualization, networking, cloud, and orchestration infrastructure
• Design and implement on-prem virtualization layer (Proxmox, VMware or equivalent) for compute clusters and control-plane services
• Architect hybrid cloud setup (primarily Azure) including compute bursting, cost controls, and workload placement
• Define network topology, firewall rules, DMZ boundaries, and secure ingress/egress between on-prem and cloud
• Design and implement identity, authentication, authorization (RBAC, SSO/federation, service principals) and secrets management
• Develop and maintain IaC (Terraform) and configuration management (Ansible) for repeatable provisioning
• Define security baselines: patch cadence, vulnerability scanning, network hardening, audit logging
• Collaborate with application lead to define interfaces between infrastructure and application logic
• Mentor team on infrastructure and security patterns, accelerate delivery
• Participate in incident response and capacity planning for production workloads
• Evaluate build-vs-buy decisions for infrastructure tooling
• Support secure, scalable deployment and operation in hybrid HPC/HTC environments

• Extensive experience in infrastructure/platform engineering with end-to-end ownership of production systems
• Hands-on experience with on-prem virtualization (Proxmox, VMware or similar)
• Strong production experience with Azure (compute, networking, IAM, storage) and hybrid/multi-cloud patterns
• Solid networking fundamentals (subnets, VLANs, routing, firewall design, DMZ, VPN)
• Practical experience designing RBAC, authentication/authorization systems (OAuth2/OIDC, SAML, service principals) and secrets management (Vault, Key Vault)
• Strong Terraform experience (modules, state, multi-environment) and Ansible for provisioning
• Linux-centric with strong shell scripting
• Experience securing systems bridging on-prem and cloud (HPC/HTC)
• Understanding of container runtimes (Docker, Apptainer/Singularity) and relevant networking/security implications

• Excellent communicator and collaborator
• Mentor to the team, helping unblock others with proven patterns
• Curious, solutions-oriented, and able to translate complex problems into actionable plans
• Proxmox or VMware on-prem virtualization
• Azure compute, networking, IAM, storage
• RBAC, OAuth2/OIDC, SAML, service principals