Platform Engineer, Ai
Role details
Job location
Tech stack
Job description
About UsSUSE is a global leader of enterprise open source software. By transforming community innovations into secure, sovereign and AI?ready solutions, SUSE empowers customers to escape vendor lock?in and regain control of their IT destiny. Through industry?leading Linux, Kubernetes, Edge and AI infrastructure solutions, SUSE delivers the flexibility to innovate everywhere-from the data center to multi?cloud and out to the edge. Only SUSE also manages many Linux and Kubernetes distributions. At SUSE, Choice Happens because we prioritize community, interoperability and relentless innovation. Discover how we power mission?critical .Platform Engineer, AIInternal IT is hiring Platform Engineers to join the team building and operating our internal Agentic AI Platform.Job DescriptionAbout the Role: This is a hands?on engineering role. You will be equally responsible for building new platform capabilities, keeping the platform operationally healthy, and maintaining the infrastructure?as?code and documentation that underpins it. You will work with one other engineer as a pair: sharing ownership of the full platform, peer?reviewing each other's work, and developing complementary depth across the stack over time.The platform is in active delivery. You will join at a point where the core infrastructure is running and the next phase of security hardening, automation, and observability is under way. There is meaningful work to deliver from day one.Key ResponsibilitiesBuildImplement new platform capabilities from architectural designs, translating security, governance, and infrastructure requirements into production?grade infrastructure?as?codeDesign and build the platform security and secrets management layer, ensuring all workloads operate with least?privilege credentials and certificates issued through a governed PKI hierarchyImplement and enforce security policy across the cluster using admission control, covering workload configuration, image standards, network traffic, and resource constraintsBuild and establish the platform observability stack, providing consistent log aggregation, metrics, distributed tracing, and alerting across all platform componentsDesign and implement GitOps delivery automation, ensuring all platform changes flow through version?controlled, auditable pipelines with drift reconciliationBuild and configure workload autoscaling, ensuring AI workflow workers scale efficiently and cost?effectively in response to demandImplement the AI model routing and gateway layer, enabling governed, auditable routing of model traffic with per?consumer rate limitingOperateOwn the day?to?day operational health of the platform: monitor for issues, respond to incidents, conduct root?cause analysis, and implement lasting remediationMaintain the health of platform data services-database cluster, job queue, and object storage-including backup schedules, failover testing, and capacity managementMonitor and tune autoscaling and resource configuration as workload patterns evolve, ensuring the platform scales responsively without over?provisioningManage secrets rotation, certificate lifecycle, policy drift detection, and identity configuration as ongoing operational responsibilitiesParticipate in planned high?stakes operational procedures-such as secrets infrastructure initialisation and rotation events-applying disciplined, documented executionMaintainOwn and evolve the infrastructure?as?code for your areas of the platform; keep all configurations versioned, peer?reviewed, and aligned with the architectural designProactively identify and resolve technical debt-manual processes, undocumented configurations, legacy credential management, and gaps in observability coverageProduce and maintain operational runbooks for all platform procedures, ensuring any team member can execute them safely and independentlyPeer?review all platform infrastructure changes produced by your engineering counterpart, providing challenge and quality assurance across the full stackContribute to platform documentation and knowledge?sharing, supporting the wider team's understanding of the platform as it maturesRequired SkillsCandidates will need to demonstrate hands?on production delivery experience, not just conceptual familiarity. We expect evidence of real delivery against each of these areas at interview.Kubernetes - production cluster operation (RKE2, EKS, GKE, or equivalent); Helm, RBAC design, multi?namespace workload managementSecrets management - production deployment of a secrets management platform (HashiCorp Vault or equivalent), covering PKI, dynamic credentials, and workload secrets injectionPolicy?as?code - admission control policy authoring and enforcement in production Kubernetes environments (OPA/Rego, Kyverno, or equivalent)GitOps - Fleet, ArgoCD, Flux, or equivalent at production scale; declarative drift reconciliation, rollback strategy, multi?environment targetingObservability stack - log aggregation, log pipeline design, distributed tracing (OpenTelemetry or equivalent), and metrics dashboards (Prometheus/Grafana or equivalent)API gateway engineering - production deployment and operation of an API or AI gateway (Kong, Envoy, or equivalent); rate limiting, plugin/policy authoring, route managementLinux platform engineering - networking fundamentals, TLS and PKI, CSI storage operations, container runtimeWhat We OfferSUSE is a dynamic environment that is evolving rapidly, thus requiring agility, strong entrepreneurship and an open mind. This is a compelling opportunity for the right person to join us as we continue to scale and prosper.If you're a big thinker, obsessed by execution and thrive in a dynamic environment in which you can tangibly create a lasting legacy, then you will want to apply for this role.We give you the freedom to be yourself. You will work in a global community of unique individuals with different backgrounds, talents, skills and perspectives. A truly open community where everyone is welcome, has a voice and is encouraged to reach their full potential regardless of age, gender, race, nationality, disability, sexual orientation, religion, or any other characteristics.Sounds like the right fit for you? Click Apply to submit your resume. A recruiter will contact you if your skills match our current or any future positions. In the meantime, stay updated on the latest SUSE news and job vacancies by joining our Talent Community.SUSE ValuesSUSE's culture is centered on four key values - Choice, Community, Trust, and Innovation - which are deeply integrated with our open?source ethos. SUSE fosters a diverse and inclusive environment where our people are encouraged to be themselves.ChoiceWe are continuously making choice happenWe are accountable for our choicesWe never get complacentCommunityNobody is smarter than everybodyWe embrace diversity of thoughtWe are "open source first, upstream first" where collaboration benefits allTrustWe are trusted to deliver with integrityWe offer trust by default, and do not wait for it to be earnedWe foster an environment where everyone trusts each otherInnovationWe foster a culture of experimentation, and embrace change by challenging the normWe are committed to continuous improvement, creativity and adaptabilityIdeas are great, but without execution they are just ideas#J-*****-Ljbffr
Requirements
Candidates will need to demonstrate hands?on production delivery experience, not just conceptual familiarity. We expect evidence of real delivery against each of these areas at interview. Kubernetes - production cluster operation (RKE2, EKS, GKE, or equivalent); Helm, RBAC design, multi?namespace workload management Secrets management - production deployment of a secrets management platform (HashiCorp Vault or equivalent), covering PKI, dynamic credentials, and workload secrets injection Policy?as?code - admission control policy authoring and enforcement in production Kubernetes environments (OPA/Rego, Kyverno, or equivalent) GitOps - Fleet, ArgoCD, Flux, or equivalent at production scale; declarative drift reconciliation, rollback strategy, multi?environment targeting Observability stack - log aggregation, log pipeline design, distributed tracing (OpenTelemetry or equivalent), and metrics dashboards (Prometheus/Grafana or equivalent) API gateway engineering - production deployment and operation of an API or AI gateway (Kong, Envoy, or equivalent); rate limiting, plugin/policy authoring, route management Linux platform engineering - networking fundamentals, TLS and PKI, CSI storage operations, container runtime, If you're a big thinker, obsessed by execution and thrive in a dynamic environment in which you can tangibly create a lasting legacy, then you will want to apply for this role.