[Hiring] Senior Platform Engineer @Central Health

Role Description

The Senior Platform Engineer is an experienced individual contributor responsible for the reliability, scalability, security, and performance of enterprise systems and cloud platforms. This role draws on Systems Engineering, Cloud Engineering, Site Reliability Engineering (SRE), DevOps, and Security Engineering disciplines to support highly available, resilient, and secure production environments within a regulated healthcare enterprise.

Working as part of the Platform Engineering team, this position partners closely with infrastructure, application, cybersecurity, data, and clinical teams. The role emphasizes automation, observability, operational excellence, secure-by-design architecture, and proactive risk reduction while supporting mission-critical healthcare workloads across multi-site Azure regions and edge data center environments.

Remote: Individuals in this position may work at an approved off-site location; however, they may be required to occasionally visit an on-site location in Austin, Texas.

To be considered for this remote role, you must live in one of these states: Texas, North Carolina, Georgia, Florida, Arizona, Ohio, Michigan, and Connecticut. All applicants from other states will not be considered.

Qualifications

• Bachelor's Degree (higher degree accepted) in Computer Science, Information Technology, Engineering, Cybersecurity, or related field OR equivalent professional experience (typically 7+ years) in enterprise systems, cloud, DevOps, SRE, or security engineering - Required
• Postsecondary Vocational Award (higher degree accepted) - Preferred
• 5 years of experience as a Site Reliability Engineer, DevOps Engineer, Platform Engineer, Cloud Engineer, or Systems Engineer in an enterprise environment - Required
• 7 years of experience as a Site Reliability Engineer, DevOps Engineer, Platform Engineer, Cloud Engineer, or Systems Engineer in an enterprise environment - Preferred
• Hands-on experience with Azure (multi-region deployments strongly preferred) or AWS - Preferred
• Proficiency in Python, PowerShell, Bash, Go, or Java - Preferred
• Experience with Infrastructure as Code using Terraform and/or Bicep, including multi-region module management - Preferred
• Experience building and supporting CI/CD pipelines - Preferred
• Solid incident management, monitoring, and production support experience - Preferred
• Familiarity with enterprise BCDR principles and DR testing in cloud environments - Preferred
• Exposure to enterprise AI platform deployment, governance, or automation (e.g., Azure OpenAI), or demonstrated ability to operationalize emerging cloud capabilities in a regulated environment - Preferred
• Excellent communication, documentation, and problem-solving skills - Preferred
• Equivalent combinations of education, certifications, and hands-on experience demonstrated on resume accepted - Preferred

Requirements

• Support high availability, reliability, scalability, and performance of production systems across multi-site Azure regions and light edge data center infrastructure
• Contribute to the definition and tracking of Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets
• Design and maintain monitoring, logging, alerting, and observability solutions, including telemetry for metrics, logs, and traces across cloud, edge, and hybrid systems
• Implement Azure Monitor, Log Analytics, and Application Insights across workloads with KQL-based alerting and workbook dashboards
• Implement Azure service health and resource quota monitoring across subscriptions for early warning of capacity constraints and service degradation
• Participate in incident response, on-call rotations, outage resolution, and root cause analysis (RCA); contribute to post-incident reports and corrective action plans
• Create and maintain runbooks, operational documentation, and incident playbooks
• Support operational readiness, capacity planning, and disaster recovery alignment with Central Health BCDR requirements
• Help balance reliability, feature velocity, and operational risk within team priorities
• Apply FinOps practices including right-sizing, reserved instance optimization, shutdown scheduling, and cost anomaly detection to reduce cloud spend
• Contribute to the implementation and testing of Central Health's Azure-based Business Continuity and Disaster Recovery (BCDR) program
• Support multi-region Azure failover strategies with tiered RTO/RPO targets aligned to HIPAA compliance and operational criticality
• Develop and maintain DR runbooks, recovery playbooks, and failover procedures for cloud and hybrid workloads
• Participate in BCDR testing cycles including tabletop exercises, partial failover tests, and full DR drills
• Maintain backup integrity and recovery capability across Azure Backup, Azure Site Recovery (ASR), and edge data center systems
• Coordinate with third-party system owners and clinical application teams to support end-to-end recovery coverage
• Automate ASR deployment and lifecycle management across paired regions, including replication configuration and source-to-target mapping
• Automate Azure Policy exemption workflows to support DR cutover and migration windows
• Develop tooling and runbooks for Azure Key Vault content portability across regions (secrets, keys, certificates)
• Design and support cloud infrastructure across multi-site Azure regions (primary and DR) and AWS as applicable
• Support Azure services including Azure FHIR, Logic Apps, Functions, Event Hubs, Key Vault, and Azure AD / Entra ID
• Support light edge data center infrastructure including local compute, networking, and failover capabilities
• Support Citrix Cloud and Virtual Desktop Infrastructure (VDI)
• Administer Active Directory, Group Policy, identity governance, and access controls
• Implement and maintain Infrastructure as Code with Terraform and Bicep, including standardized module libraries for repeatable multi-region deployments
• Design and maintain Azure hub-and-spoke network topologies spanning primary and DR regions, including centralized Private DNS Resolver, conditional forwarding, and DNS zone linking across subscriptions
• Implement and govern Azure Policy at scale across subscriptions for tagging enforcement, resource compliance, and regulatory alignment (HIPAA, NIST, PCI-DSS)
• Manage Azure Firewall (including IDS/IPS), NSGs, and route tables for east-west and north-south traffic segmentation
• Deploy and manage Azure Private Link and Private Endpoints for secure, non-internet-routable connectivity to PaaS services
• Support VPN Gateway and ExpressRoute configurations including BGP peering, Active-Active high availability, and hybrid connectivity migrations
• Implement Privileged Identity Management (PIM) governance, including group-based role activation, access reviews, and Just-In-Time (JIT) elevation; conduct RBAC audits across management group hierarchies
• Support Azure Arc for hybrid and multi-cloud server management, policy enforcement, and monitoring agent deployment
• Manage Azure Bastion for secure administrative access without public IP exposure
• Implement VNet flow log collection and analysis for traffic visibility, compliance auditing, and anomaly detection
• Plan and execute large-scale cloud migrations across multiple subscriptions and regions, including discovery, design, execution, and validation phases
• Develop migration tracking, reporting, and stakeholder communication artifacts such as workbooks, dashboards, and executive summaries
• Perform cloud SKU, geo-replication, and capacity cost analysis to inform DR region and landing zone design
• Support the deployment and governance of the Central Health Azure OpenAI Enterprise Platform
• Implement keyless authentication, RBAC-based model access controls, and audit logging for AI workloads
• Collaborate with clinical, data, and security teams to ensure responsible and compliant use of generative AI services
• Contribute to AI platform reliability, scalability, and observability in alignment with enterprise standards
• Support Azure AI Foundry for model deployment, evaluation, and lifecycle management across environments
• Develop prompt engineering standards, templates, and governance frameworks for enterprise LLM consumption
• Design multi-agent orchestration patterns for automated workflows leveraging Azure OpenAI endpoints
• Build LLM cost and token usage observability to forecast spend and enforce per-team budgets
• Implement content filtering, model version pinning, and deployment slot strategies for safe rollout of model updates
• Build automation tools and self-service capabilities to reduce operational toil
• Develop and maintain CI/CD pipelines and deployment automation across Azure DevOps and GitHub using GitOps practices
• Support DevSecOps CI/CD automation environments
• Manage Terraform and Bicep modules and state for multi-region Azure deployments, enforcing versioning, testing, and reuse patterns
• Collaborate with engineering teammates on reliable system and application architecture
• Implement OIDC federation for CI/CD service principals, eliminating long-lived credentials and aligning pipeline authentication with Zero Trust principles
• Build IaC testing and validation frameworks including plan-stage gating, policy-as-code checks, and automated drift detection
• Develop PowerShell and Bash automation for governance, hygiene, and operational reporting tasks
• Build integrations with work item, ticketing, and collaboration platforms via REST APIs and Microsoft Graph
• Support security operations processes including triage, threat detection, and incident response
• Support Microsoft Sentinel architecture, SOAR automation, and UEBA capabilities
• Develop Logic App workflows and Sentinel automation playbooks
• Write and optimize KQL queries for analytics, hunting, and behavioral detection
• Integrate Sentinel with EDR, IAM, firewalls, and ticketing systems
• Apply Zero Trust, NIST CSF, and MITRE ATT&CK principles in day-to-day engineering work
• Implement and govern Conditional Access policies aligned to Zero Trust architecture across Entra ID tenants
• Tune Azure Firewall IDS/IPS configurations to meet PCI DSS 4.0.1 and other regulatory requirements
• Automate security posture reporting using Microsoft Defender for Cloud secure score tracking and remediation workflows
• Automate RBAC and identity governance discovery (active assignments, PIM-eligible roles, custom roles, managed identities, service principals) to support disposition and lifecycle management
• Support Microsoft SQL Server, Great Plains (Dynamics GP), Boomi, and eFax/RightFax
• Support claims-based workflows, identity-integrated applications, and APIs
• Develop and support API integrations using JSON/YAML
• Collaborate effectively with peers across systems, cloud, and platform engineering teams
• Contribute to documentation, runbooks, status updates, and team knowledge bases
• Participate in architectural reviews and provide constructive technical feedback
• Support a culture of continuous improvement, learning, and operational excellence

Company Description