Sr. Platform Engineer-PH

Please login or register as jobseeker to apply for this job.

TYPE OF WORK

Full Time

SALARY

N/A

HOURS PER WEEK

40

DATE UPDATED

Jul 24, 2026

JOB OVERVIEW

About the Role

Pandoblox delivers enterprise-quality data platforms to mid-market companies in weeks, not months — a lean team amplified by AI. We're hiring a Senior Platform Engineer to own the infrastructure the entire client-delivery pipeline runs on, and to evolve it so a small team can stand up and operate many concurrent, fully-isolated client environments without scaling headcount.


This is a senior IC role: ~70% hands-on platform/infra/DevOps, 20% architecture & security, 10% reliability. You live in Terraform, GCP IAM, CI/CD, and Cloud Run. The mandate isn't infrastructure for its own sake — it's infrastructure that gets client outcomes shipped faster, safer, and more repeatably.

This role goes deep on infrastructure, not up into the app layer. If you'd rather be shipping product features and UI, this is the wrong seat.

Responsibilities:

In this role you'll get to...

- execute and own the following:
- IaC (signal-iac)— the Terraform/OpenTofu estate; provision a new client with a one-line flag flip. Every change is a PR with a plan diff; prod applies only through a gated workflow. Build the paved road so the delivery team onboards a client through a safe, gated path, not a ticket to you.
- GCP multi-tenancy— a two-tier project model with one isolated project per client; physical, per-project isolation enforced by IAM.
- Runtime isolation at scale— the shared services (signal-agents,signal-mcp, Supabase) serve every client at once, so one client's load can never degrade another: per-tenant quotas, fairness, noisy-neighbor protection.
- Identity & secrets— the keyless model (Workload Identity Federation, impersonated service accounts). No long-lived keys, no secrets in Git, no path from laptop to prod.
- CI/CD— GitHub Actions: build-once-promote, OIDC/keyless auth, trunk-based with environment promotion.
- Observability & cost— SLOs, freshness/failure alerting, evidence-first i ---------- response, and per-client cost attribution so margin stays visible as clients stack up.
- collaborate with the project team 
- perform other duties or responsibilities  needed by the role

Requirements:

On day one, we'll expect you to...

- have 8+ years of platform / infra / DevOps / SRE, owning cloud architecture end-to-end
- have expertise in  Terraform / OpenTofu — production modules, multi-env, gated apply
- possess deep GCP — IAM & SA design, WIF, Cloud Run, networking, Secret Manager, BigQuery admin
- have strong CI/CD — GitHub Actions (or equivalent), OIDC/keyless, build-once-promote, trunk-based
- have expertise in security & identity judgment — keyless, least-privilege, gated-prod posture you own
- have experience in multi-tenant isolation at both the data and runtime tiers
- provide proactive observability & i ---------- response — alerting, SLOs, evidence-first debugging, on-call coverage
- be experienced in per-client cost attribution / FinOps instincts
- work with AWS alongside GCP (QuickSight reporting path, Secrets Manager)
- possess a delivery-first mindset: infra right-sized to delivery outcomes, not over-engineered
- have excellent written and verbal English communication skills
- have a fully functional and up-to-date computer with which to perform duties
- be willing to install next generation end point protection on the computer
- be a current resident of the Philippines and can perform work from there
- be willing to work within US Pacific timezone (8am - 5pm PST, 12AM - 9AM Manila time) or during client hours as required
- be willing to undergo a 90-days probationary period upon initial hire

Required Stack: Terraform/OpenTofu, GCP (Cloud Run, BigQuery, IAM, WIF, Secret Manager), GitHub Actions, Supabase, Vercel,  AWS (Quick, Secrets Manager), Claude (Anthropic API), and modern, opinionated, no legacy click-ops.

These are preferred experiences:

Multi-client/consulting delivery pipelines
- Supabase/Vercel ops 
- Cloud Run cold-start & scaling tuning 
- AI-agent / LLM runtime infra (MCP, model APIs) 
- AI-augmented engineering workflows

This is a remote, work from home job.

TO APPLY: ** DO NOT SEND YOUR APPLICATION HERE IN INDEED** Follow the instructions below:

1. COPY & PASTE this link to your browser: ----------
2. Fill out the form and submit your resume to our system.

We will reach out to you via email using our system!
Thank you!

VIEW OTHER JOB POSTS FROM:
SHARE THIS POST
facebook linkedin
  BENCHMARKS  
Loading Time: Base Classes  0.0012
Controller Execution Time ( Jobseekers / Job )  0.0663
Total Execution Time  0.0683
  GET DATA  
No GET data exists
  MEMORY USAGE  
1,521,336 bytes
  POST DATA  
No POST data exists
  URI STRING  
jobseekers/job/Sr-Platform-Engineer-PH-1684235
  CLASS/METHOD  
jobseekers/job
  DATABASE:  onlinejobs (Jobseekers:$db)   QUERIES: 13 (0.0572 seconds)  (Hide)
0.0003   SELECT *
                                
FROM exrates
                                WHERE rate_name 
'USD-PHP' 
0.0005   SELECT *
FROM `employer_jobs`
WHERE `job_id` = 1684235
 LIMIT 1 
0.0013   SELECT *
FROM `employers`
WHERE `employer_id` = 386750
 LIMIT 1 
0.0017   SELECT COUNT(*) AS `numrows`
FROM `t_thread` `t`
LEFT JOIN `t_thread_misc` `miscON `t`.`id` = `misc`.`thread_id`
WHERE `t`.`job_id` = 1684235
AND `misc`.`idIS NULL 
0.0005   SELECT e.business_namee.logoe.websitee.rebill_datee.date_added member_datehitsDATEDIFF('2026-07-27',ej.date_added) duration_daysDATEDIFF('2026-07-27',e.rebill_date) duration_rebillej.*, e.deactivate FROM employers eemployer_jobs ej WHERE e.employer_id ej.employer_id AND
                                   ((
e.user_level >= '500' AND ej.date_added <= e.rebill_date)
                                   OR 
e.employer_id '' OR (ej.date_approved <> '2000-01-01' and DATEDIFF('2026-07-27',ej.date_added) <= 14 ))
                                   AND 
e.deactivate != AND ej.deleted AND job_id '1684235' 
0.0003   SELECT *
FROM `employer_jobs_skills` `ejs`
LEFT JOIN `skills_categories` `scON `ejs`.`skill_id` = `sc`.`id`
WHERE `job_id` = 1684235 
0.0010   UPDATE employer_jobs SET hit_counts '***Jul-07-2026=218***Jul-08-2026=19***Jul-09-2026=10***Jul-10-2026=3***Jul-11-2026=4***Jul-12-2026=3***Jul-13-2026=3***Jul-14-2026=5***Jul-15-2026=307***Jul-16-2026=11***Jul-17-2026=11***Jul-18-2026=6***Jul-19-2026=1***Jul-20-2026=5***Jul-21-2026=1***Jul-22-2026=2***Jul-23-2026=2***Jul-24-2026=214***Jul-25-2026=49***Jul-27-2026=1' WHERE job_id'1684235'  
0.0006   UPDATE employer_jobs SET monthly_hits '***Jul-2026=875' WHERE job_id'1684235'  
0.0008   SELECT date_sent FROM jobseeker_sent_emails WHERE jobseeker_id '' AND job_id '1684235' AND status LIKE 'sent%' ORDER BY id DESC  
0.0003   SELECT *
FROM `employer_jobs_skills` `ejs`
LEFT JOIN `skills_categories` `scON `ejs`.`skill_id` = `sc`.`id`
WHERE `job_id` = 1684235 
0.0492   SELECT COUNT(*) AS `numrows`
FROM `employer_jobs`
WHERE `employer_id` = '386750'
AND `date_added` >= '2022-06-08' 
0.0004   select from teasers 
0.0003   SELECT FROM skill_categories WHERE skill_cat_id='' 
  HTTP HEADERS  (Show)
  SESSION DATA  (Show)
  CONFIG VARIABLES  (Show)