Cloud-Native Platform Engineer

Role: Cloud-Native Platform Engineer

Location: Dearborn, MI (Onsite)

Position Description: As a Software Engineer on the Cloud Engineering team, you will be responsible for designing, developing, and maintaining the cloud platform and automation tooling that powers our platform transformation. Your contributions will directly impact the reliability, scalability, and cost-efficiency of a system serving millions of vehicles. This role is centered on Kubernetes-native and cloud-native platform engineering across AWS and Google Cloud Platform.

Key Responsibilities:

• Deep, hands-on experience provisioning and operating Kubernetes clusters (EKS and/or GKE) in production, including cluster lifecycle, upgrades, networking, security, and workload management.
• 5+ years managing cloud infrastructure on AWS and/or Google Cloud Platform.
• Strong Terraform skills - writing modular, production-grade IaC with GitOps workflows.
• Experience with Helm for packaging and deploying multi-environment Kubernetes workloads.
• Strong debugging and problem-solving skills for cloud infrastructure and distributed systems.
• Experience with monitoring and observability tools (Prometheus, Grafana, Datadog, or equivalent)
• Platform Development & Automation Design and build cloud-native solutions that enable automated, repeatable shard provisioning - including cluster bootstrapping, network configuration, service mesh setup, and health validation.
• Build the control plane tooling that allows a new shard to be provisioned and traffic-ready in under 24 hours with zero manual steps.
• Infrastructure as Code Own and extend production Terraform modules for multi-cloud environments (AWS and Google Cloud Platform).
• Maintain GitOps-driven infrastructure workflows using Atlantis or similar tooling.
• Ensure infrastructure changes are reviewed, tested, and auditable before reaching production.
• Kubernetes & Service Mesh Provision, manage, and automate Kubernetes cluster lifecycle (EKS and GKE).
• Write Helm charts for multi-shard deployments parameterized by shard ID, region, and environment.
• Configure and operate Istio service mesh including traffic management, mTLS enforcement, and observability.

Google Cloud Platform Platform Engineering Build and operate Google Cloud Platform-native platform components:

• GKE workload deployment, Pub/Sub integration, Cloud Storage, Secret Manager, workload identity federation, and VPC-SC perimeter controls.
• Support the phased migration from AWS to Google Cloud Platform as the architecture evolves.
• API Gateway & Ingress Configure and operate API gateway infrastructure (Tyk, Apigee, or NGINX) including routing policies, mTLS enforcement, rate limiting, and SLI/SLO metric replication. Drive zero-downtime ingress migrations with automated runbook validation.
• CI/CD Automation & GitOps Familiarity with using CI/CD systems (ArgoWorkflows, ArgoCD, Atlantis, Concourse) to reliably apply infrastructure and platform changes.

Experience Preferred:

• Google Cloud Platform experience: GKE, Pub/Sub, Cloud Storage, workload identity, VPC-SC, Cloud Operations.
• API gateway experience: Tyk, Apigee, or NGINX - routing, policy management, mTLS, SLI replication.
• Service mesh experience: Istio traffic management, mTLS, and observability.
• Experience with CI/CD platforms: ArgoWorkflows, ArgoCD, Atlantis, Concourse, or similar GitOps tooling.
• Programming proficiency in Python, Go, Java (Spring Boot).
• Security: IAM role isolation, mTLS, OAuth2/OIDC, securing multi-cloud environments at scale.
• Experience with Atlantis, Terragrunt, or similar collaborative Terraform workflows