This is a Principal position within the Platform Engineering organization. Our core mission is to build the foundational, core common layer across Saviynt engineering, consolidating and centralizing scattered platform tools, workflows, and infrastructure primitives. Wearing a dedicated Platform Engineering hat, this role will proactively find opportunities to eliminate operational friction and standardize capabilities into a seamless, unified developer experience.
A primary focus of this role is designing, developing, implementing, rolling out, and supporting our Internal Developer Platform (IDP), fitting all foundational tooling into a cohesive, self-service ecosystem. You will build and implement "golden paths" for developers, creating self-serve platforms embedded with essential security and operational guardrails. Crucially, you will act as a partner across engineering—working closely with developers, Embedded SREs (E-SREs), and Central SRE teams—while actively evangelizing platform products to accelerate adoption throughout the organization.
WHAT YOU BRING
12+ Years of experience across the Software Development lifecycle with a focus on platform engineering, DevOps, and cloud-native infrastructure.
Proven IDP build experience: you have shipped or significantly contributed to a Backstage or Port portal (or equivalent) used in production.
Deep Kubernetes expertise across EKS and AKS, including multi-tenant cluster design, Helm, Kustomize, and Crossplane.
Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring/canary deployment strategies.
Strong proficiency in Go (Golang) or Python for building production-grade CLIs, custom operators, or platform backends.
GitLab CI + ArgoCD / Argo Rollouts pipeline implementation experience—building CI/CD-as-a-service for engineering teams.
Terraform / OpenTofu module authoring at scale—module registry design, state management, and refactoring large IaC codebases.
Background in developing Backstage plugins or contributing to open-source developer platform ecosystems.
Practical application of workload identity, SPIFFE/IRSA, and cloud-native zero-trust network architectures.
Implementation of OPA/Gatekeeper/Kyverno for policy-as-code within production-grade Kubernetes clusters.
Proficiency in FinOps methodologies and tools such as Kubecost or cloud cost exposure APIs.
Experience managing Kafka or AWS MSK as a multi-tenant platform capability.
Proven platform-first mindset with a history of centralizing scattered tooling into core foundation layers, evangelizing platform adoption, and collaborating effectively across developers, Embedded SREs, and Central SREs.
Professional exposure to identity security frameworks, SaaS delivery, and high-compliance operational environments (SOC 2, ISO 27001, FedRAMP).
WHAT YOU WILL BE DOING
- Internal Developer Platform (IDP) & Developer Portal
- Take ownership of key aspects of the IDP architectural lifecycle, from service catalog creation to automated, self-service environment provisioning.
- Construct and manage a centralized developer hub featuring TechDocs, software catalogs, and seamless integrations with GitLab, Jira, and cloud management consoles.
- Develop and implement "golden-path" templates to rapidly deploy new microservices equipped with Kubernetes configurations, observability tools, and automated security guardrails.
- Champion and evangelize the adoption of platform products across engineering units using developer feedback, usage analytics, and active outreach. Multi-Tenant SaaS Architecture & Fleet Operations
- Design and support cell-based deployment patterns and progressive ring-deployment strategies across multi-tenant and single-tenant customer fleets to isolate tenant workloads and limit blast radiuses.
- Automate continuous zero-downtime release deployments globally while providing platform abstractions that support multi-region SaaS deployments. Platform-as-a-Service on Kubernetes
- Design and supervise multi-tenant Kubernetes environments on AWS EKS and Azure AKS, ensuring a unified cluster management experience for internal users.
- Produce modular Helm libraries and infrastructure compositions that mask underlying cloud complexities for product development teams.
- Enforce robust isolation and access control policies that reflect our multi-tenancy security framework at the namespace level.
- Maintain high availability through automated cluster lifecycle operations, including seamless scaling and blue/green deployment rotations. GitOps, CI/CD, and Delivery Infrastructure
- Drive the evolution of CI/CD-as-a-service by providing standardized pipeline templates via GitLab CI and ArgoCD / Argo Rollouts for effortless team consumption.
- Deploy GitOps methodologies to establish default rollback capabilities, continuous drift detection, and transparent audit trails across environment workflows.
- Incorporate supply-chain security measures, such as container signing and SBOM creation, directly into our core delivery infrastructure. API Gateway, Traffic Management & Edge Infrastructure
- Manage edge, ingress, and service-to-service communication infrastructure (API gateways, service mesh), incorporating built-in mTLS, rate limiting, distributed tracing context propagation, and circuit breaking as platform primitives.
- Configure global load balancing and edge protection (CDN/WAF) as standardized defaults across developer paths. Infrastructure Automation & IaC
- Curate a centralized Terraform / OpenTofu registry for multi-cloud resources that adheres to stringent FinOps and security standards by default.
- Enable self-service infrastructure provisioning via Kubernetes-native workflows by implementing advanced provider compositions (Crossplane).
- Engineer custom Go-based CLI tools and operators to automate critical platform tasks, including cost tracking and credential rotation. Platform Observability, FinOps & Resilience
- Launch a unified observability suite using Grafana, Prometheus, and OpenTelemetry to provide teams with essential self-service performance metrics.
- Establish logging and distributed tracing as foundational platform primitives, integrated automatically through standard developer paths.
- Create detailed FinOps reporting mechanisms and real-time cost anomaly guardrails to enable precise cloud expenditure attribution for teams and tenants.
- Integrate chaos testing and automated disaster recovery (DR) failover verification to meet strict enterprise SaaS uptime requirements. Platform Security & Compliance Guardrails by Default
- Integrate zero-trust principles and workload identity into the platform fabric using short-lived credentials and cloud-native network policies.
- Utilize policy-as-code (OPA, Gatekeeper, Kyverno) and admission controllers to enforce security standards at the cluster level without impeding development velocity.
- Streamline secrets management by providing a secure, automated, self-service platform capability.
- Build compliance-as-code into CI/CD pipelines to automatically generate audit trails and SBOM documentation required for SOC 2, ISO 27001, and FedRAMP certifications. Event-Driven & Messaging Infrastructure
- Manage shared messaging infrastructure systems like Kafka and AWS MSK, delivering topic provisioning and schema management as a robust platform service.
- Construct reusable patterns and scaffold templates that allow product teams to easily implement event-driven architectures from within the IDP.
Security & Compliance
This role requires adherence to Saviynt’s information security and privacy policies and procedures, including annual security training.
Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Skills Required
- 12+ years of software development lifecycle experience focused on platform engineering, DevOps, and cloud-native infrastructure
- Production experience building or significantly contributing to an Internal Developer Platform using Backstage, Port, or an equivalent portal
- Deep Kubernetes expertise, including EKS, AKS, multi-tenant cluster design, Helm, Kustomize, and Crossplane
- Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring or canary deployments
- Strong proficiency in Go or Python for production CLIs, custom operators, or platform backends
- Experience implementing GitLab CI and Argo CD or Argo Rollouts pipelines
- Terraform or OpenTofu module authoring at scale, including registries, state management, and refactoring
- Experience developing Backstage plugins or contributing to developer platform open-source ecosystems
- Practical experience with workload identity, SPIFFE, IRSA, and cloud-native zero-trust networking
- Production experience implementing OPA, Gatekeeper, or Kyverno policy-as-code
- Proficiency with FinOps methodologies and tools such as Kubecost or cloud cost APIs
- Experience managing Kafka or AWS MSK as a multi-tenant platform capability
- Experience centralizing platform tooling, driving adoption, and collaborating with developers and SRE teams
- Exposure to identity security frameworks, SaaS delivery, and compliance environments such as SOC 2, ISO 27001, or FedRAMP
Saviynt Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Saviynt and has not been reviewed or approved by Saviynt.
-
Leave & Time Off Breadth — Flexible or unlimited PTO, generous parental leave, paid holidays, and periodic mental health days point to a wide range of time‑off options. These policies are positioned to support rest and balance when teams can make use of them.
-
Healthcare Strength — Medical, dental, and vision coverage are provided alongside options like FSAs, reflecting comprehensive core health benefits. Affordability and plan quality are often highlighted as positives.
-
Retirement Support — A 401(k) program with employer contributions is available, reinforcing long‑term financial security. This complements equity and ESPP elements within total rewards.
Saviynt Insights
What We Do
Saviynt’s Enterprise Identity Cloud helps modern enterprises scale cloud initiatives and solve the toughest security and compliance challenges in record time. The company brings together identity governance (IGA), granular application access, cloud security, and privileged access to secure the entire business ecosystem and provide a frictionless user experience.
.jpeg)
