Platform engineer in retail commerce

For retailers with thousands of shops, commerce platforms have historically fallen into two categories, each with significant drawbacks. Web-native platforms move fast but were never built for a shop floor. OneView is the third option: a headless commerce platform for physical retail that lets the world's largest retailers innovate just as quickly as the smaller ones. OneView is looking for a Senior Platform Engineer to join our DevSecOps team, which builds and secures the platform that every other OneView team depends on.

• Build and operate the cloud infrastructure our platform runs on, and take each backlog item through to running in production, documented and monitored.
• Write infrastructure as code and hold it to the same standard as application code: reviewed, tested, and version controlled.
• Build and improve the CI/CD pipelines our delivery teams ship through, and automate the manual steps in the delivery lifecycle.
• Build parts of our internal developer platform (IDP), which Platform Engineering is developing now, as its items reach the backlog.
• Build the monitoring, alerting, and dashboards that catch a problem before a customer reports it.
• Track consumption and cost against the throughput, concurrency, and headroom each service is sized for, and warn before a threshold is reached.
• Join the on-call rotation, provide first response and root cause analysis for incidents raised through our customer support portal, and handle production support work that arrives through on-call or the backlog.
• During an incident, share what you know about recent changes, including your own, so the team can find the cause and address it quickly.
• Test backup, archive, and disaster recovery by running restores and failovers against stated recovery point and recovery time objectives.
• Keep our production and development environments secure and in line with our security policies, and work with security engineering on hardening, guardrails, and remediation.
• Provision, refresh, and deploy environments through repeatable automation, including the non-production environments customers use for their own testing and acceptance.
• Keep them consistent, and keep production data out of non-production environments.
• Build and maintain automated compliance and non-functional validation checks in our pipelines, along with the release gates that hold a change when the required control evidence is missing.
• Produce the evidence that a control was applied and a requirement is met, in a form a customer's technology team or an auditor can review and sign off.
• Work with our test automation team on performance, scalability, resilience, security, and vulnerability testing.
• Supply the environments, instrumentation, and platform knowledge, and help interpret the results.
• Work with software engineering, QA, delivery, and customer implementation when a backlog item involves their systems, and mentor engineers earlier in their career.
• Bring improvement ideas to the team's technical product owner, and if you think an item is ranked incorrectly, make your case with evidence.

• 5+ years in DevOps, cloud engineering, platform engineering, site reliability engineering, or IT operations, running production systems for enterprise customers, with working experience in each of the following areas, using one or more of these or comparable tools:
• Version control: Git
• Cloud platforms: AWS, Google Cloud, including compute, networking, identity and access management, storage, and managed services
• Containers and orchestration: Docker, Kubernetes or a managed equivalent
• Infrastructure as code: Terraform with Terragrunt, CloudFormation, OpenTofu, Pulumi
• CI/CD: CircleCI, GitHub Actions, GitLab CI/CD, Jenkins, Bamboo
• Scripting: Python, Bash
• Operating systems: Linux, UNIX
• Monitoring and observability: Datadog, Splunk, Grafana, Prometheus, New Relic
• Has designed and built a backend service with a REST API, in TypeScript, Python, or a comparable language, and run it in production.
• Has written infrastructure as code modules, had them reviewed, and maintained them as requirements changed.
• Has built CI/CD pipelines covering build, test, and deployment, including automated policy or control checks that stop a change that fails a requirement.
• Can debug network problems such as those involving DNS, TLS, load balancing, or routing.
• Can size infrastructure against a throughput and concurrency model with headroom above forecast peak.
• Has been on call for a production system and led the initial response on a live incident through to a completed root cause analysis.
• Has working knowledge of cloud security practice: least privilege, identity and access controls, secrets handling, encryption in transit and at rest, network segmentation, web application firewalls, security logging, audit trails for privileged access, and pipeline guardrails.
• Has produced evidence that a third party accepted, such as an auditor, a regulator, or a customer's technology team.
• Has proven a recovery by running a restore or a failover against stated recovery objectives.
• Has worked alongside a test function on non-functional testing, whether performance, load, resilience, or security, and can build the environment and instrumentation a test needs.
• Can write documentation in Markdown, which we use for our production documentation.
• Будет плюсом: A cloud certification from AWS, Google Cloud, or Microsoft at associate level or above; GitOps and platform engineering practice: self-service infrastructure, declarative deployment, and internal developer platforms; FinOps practice, including reducing cloud costs without degrading performance; Security scanning inside a pipeline using tools such as Snyk, Semgrep, SonarQube, Trivy, or Checkov; Proficiency in a security discipline such as application security, defensive security, or threat intelligence; Has used AI in platform work, such as AI-assisted automation, predictive monitoring, or generating infrastructure code and reviewing it for correctness; Performance and resilience testing practice: load and soak testing, chaos engineering, or scheduled failover drills; Has integrated a platform with a customer's own monitoring, SIEM, or service management tooling, on an engagement where the customer's technology team formally signed off its non-functional requirements; Experience in retail technology or point of sale, or in another domain where software runs in physical locations such as stores or warehouses

• Условий в вакансии нет