Reports to Head of Platform & Co-Founder
This is a new way to think about Ops. Agents handle the toil, which frees you up to think about how the platform should work, where it’ll fall over as we grow, and what we probably shouldn’t build at all. Once you’ve worked that out, agents do the building.
The work compounds. If you spot a problem in one review, you can turn it into a check or a convention that every future agent session follows, so you’re not fixing the same thing twice. That’s pretty rare in Ops.
The problems are genuinely hard. It’s a distributed platform with an extension ecosystem that carries real supply-chain risk, and we release often enough that security and performance have to be automated to hold up. You’ll be part of design decisions from the start, rather than inheriting them after the fact.
If you’ve ever wanted to fix the thing that keeps causing incidents, and not just the incidents themselves, this is that job.
How Platform is Built
Swamp runs every facet of the business, from Finance to Engineering, and Platform is no different. Swamp extensions drive every infrastructure change, every data migration, every alert, and every single deployment for all services and products. Every rough edge you hit is product feedback the team, including you, can act on immediately.
From the lens of Platform, there is significant surface area where the platform perspective is critical to the success of Swamp:
- Supply chain Integrity: The CLI, extension trust chain, and our own release pipeline are what users rely on to know that what they run is what was published.
- Execution: Remote execution, workers, and workflows run untrusted or semi-trusted logic. Isolation, auth, and secrets handling have to be right.
- Scale: Swamp serve and the worker system need to stay fast and predictable as usage grows, without anyone hand-tuning them.
- Swamp Club: The community and services that support SSO, organization and authentication management, and the event-driven system.
Platform at Swamp Club is a linchpin of the organization’s success. Outside of managing and running swamp-club.com and all its supporting services, it provides the systems and architecture for:
- Engineering to ship as quickly, safely, and quietly as possible.
- Financial operations to have access to the data they need for analysis and reporting.
- Understanding system health and error patterns, including CI, flake, and performance reporting.
- Providing compliance reporting evidence outputs and processes.
Here are two articles by John Watson, Head of Platform & Co-Founder and hiring leader for this role, that describe how we have approached Platform at Swamp Club.
- Alert Triage @ Swamp Club
- Architecture @ Swamp Club
What You’d Do on a Given Day
The Platform team owns the performance and security of the organization and its products, and is embedded in how they’re built rather than bolted on afterward. We’ve built structured workflows that help agents produce code following our architecture conventions. Your job is to make sure those workflows, and the platform underneath them, hold up. A typical day might include:
- Catch the scaling cliff in a plan. An agent’s plan to fan workflows out across more workers has passed adversarial review. You spot that each job opens its own datastore connection: fine today, but at 10x load it exhausts the pool and takes swamp serve down. You send it back with two sentences on why, and the revised plan arrives in minutes.
- Shape decisions, not just outcomes. Product wants extensions to call remote services mid-workflow. Before anyone writes an issue, you work through the trust chain, credential exposure, and isolation with the product engineer. It ships with a security model, not a patch three weeks later.
- Make the safe path the fast path. CI time has crept up 20% in a month and two acceptance scenarios flake, but no single PR did it. Your reporting shows where the time and retries go, performance budgets block regressions automatically, and agents get pointed at the worst offenders.
- Turn a finding into a convention. An agent handles secrets inconsistently across two production deployments. You fix the underlying vault misimplementation and encode the convention as a skill reference, review check, or acceptance test, so the next 500 agent sessions get it right.
- Make SOC 2 evidence a by-product. No screenshots. Proof that every change was reviewed and every dependency patched within policy is wired out of systems we already run, so the auditor can self-serve any day of the year.
- Keep an eye on spend. Automated checks flag anomalies in any bill across every provider. Finance never has to ask why the cloud bill jumped.
- Keep a clean house. The business depends on a platform that is well understood, documented, performant, and reliable.
- Keep the platform healthy. You own alerting, patching, and first response: first in when an alert fires, critical CVEs patched the same day. We don’t expect every rollout to succeed, so risky changes ship with a plan for failure, and every postmortem becomes a better alert, guardrail, skill, or workflow. You build the guardrails into the machine that builds the machine.