Principal Platform Engineer (Cloud)

Our organisation is executing an all-in AWS strategy: migrating our flagship Encore ERP to a multi-account, account-per-customer AWS architecture, operating LabelTraxx as a multi-tenant SaaS platform, and retiring legacy private-cloud infrastructure. Platform Engineering owns the landing zone, infrastructure as code, and the golden-path tooling that product teams build on.

The Principal Platform Engineer is our senior-most hands-on cloud technologist. You will own the technical architecture of our AWS platform: the landing zone, the account-per-customer Encore hosting model, the golden-path IaC stack, and the migration roadmap that retires our remaining private-cloud footprint. This role carries organisation-wide technical authority without people management. You will make the architecture decisions that hold for years, de-risk them through prototyping and review, and raise the engineering bar across a distributed U. S. and India team. You will also be a primary technical interface to AWS, consulting partners, and executive leadership.

The candidate will have responsibilities across the following functions:

Architecture and Technical Strategy:

• Own end-to-end AWS platform architecture: multi-account organisation design, landing zone, networking, DNS and certificate architecture, identity, and tenancy model.
• Set the technical roadmap for Encore-on-AWS environment builds (temp, production, demo) on a shared golden IaC stack, and for LabelTraxx platform evolution.
• Define the migration architecture and sequencing that completes our exit from legacy private-cloud infrastructure.
• Write and defend architecture decision records; kill weak options early with evidence.
• Evaluate and integrate emerging capabilities, including AI/agentic tooling and MCP-based integration patterns, under our AI governance program.

Platform Engineering and Delivery:

• Author the highest leverage Terraform modules and reference implementations personally; review the rest.
• Set standards for CI/CD (GitHub Actions), progressive delivery, environment promotion, and secrets management.
• Design for reliability with SRE-track peers: SLO frameworks, observability architecture (OpenTelemetry, OpenObserve), and PagerDuty service models.
• Drive platform cost architecture with FinOps: tenancy economics, Savings Plans strategy input, and unit cost visibility.

Security, Compliance and Risk:

• Design security architecture with Information Security: IAM boundaries, network segmentation, encryption, and data governance for customer data.
• Ensure the platform satisfies SOC 2 and ISO 27001 obligations by design, with audit evidence generated through automation.
• Assess and articulate technical risk for executive decisions: migration sequencing, vendor dependencies, and single points of failure.

AI Competency:

• Design agentic and AI-assisted engineering workflows with autonomy tiers, policy-as-code guardrails, rollback, and end-to-end auditability; measure ROI against baselines.
• Define platform AI standards: where AI sits in the delivery lifecycle, validation layer architecture (schema, rules, model-graded, human review), and evaluation harnesses.
• Prevent AI-generated code from degrading platform quality at fleet scale: eval harnesses, complexity metrics, and AI-attributed defect tracking.
• Contribute to enterprise AI strategy and standards under our AI governance program.

Technical Leadership and Influence:

• Mentor senior engineers and raise design-review quality across U. S. and India pods.
• Serve as the senior technical counterpart to AWS, consulting partners, and third-party providers on funded programs.
• Translate platform strategy into terms executives and investors can act on; support diligence and integration work for acquisitions.
• Ensure knowledge is durable: documentation, runbooks, and deliberate succession of critical knowledge, avoiding single-person dependencies.

Requirements:

• 10+ years of progressive engineering experience with deep AWS platform expertise; recognised as the strongest technologist in prior roles.
• Proven ownership of multi-account AWS architecture at organisational scale (landing zones, Control Tower or equivalent, account vending, SCPs).
• Expert Terraform and IaC program design: module ecosystems consumed by multiple teams, testing, and versioning strategy.
• Demonstrated success architecting and executing large migrations (data centre or private cloud to AWS), including ERP-class or other stateful enterprise workloads.
• Strong software engineering foundation (Python, Go, or similar) and fluency with modern CI/CD (GitHub Actions or equivalent).
• Working command of cloud security architecture and compliance-driven design (SOC 2 ISO 27001).
• Track record of technical leadership without formal authority: mentoring seniors, driving decisions through writing and review, and influencing executives.
• Designed AI-assisted or agentic engineering systems with guardrails, autonomy tiers, and measured ROI; L4+ AI competency by industry frameworks.
• Bachelor's degree in Computer Science, Engineering, or a related discipline, or equivalent demonstrated skills.
• AWS Certified Solutions Architect Professional or DevOps Engineer Professional.
• Experience with multi-tenant SaaS and account-per-customer tenancy economics.
• Experience in private equity portfolio, M& A integration, or investor-facing technical diligence contexts.
• Experience establishing AI/LLM platform capabilities or agent-based automation under formal governance.
• Experience directing consulting partners on funded cloud programs (for example, AWS MAP).