Sr Platform Engineer

About Us   Air-tek is a Canadian-based software company with a powerful suite of unique products that have already achieved a significant share of a huge global market. The product market fit is excellent, and customers are lining up to buy. Although our global customers know us, we intentionally operate in stealth mode during this growth phase.   Our diverse team shares a collective passion for solving complex problems with a drive to innovate and a desire to create the passenger-centric travel industry. Based in Toronto, our inclusive culture is built on trust, collaboration, delivering a great product, and continuous personal development. We love what we do, and we support the team around us.   About the Team   The Platform Engineering team is a highly collaborative group of software engineers committed to building, scaling, and maintaining the foundations on which other teams can build Air-Tek's software solutions on. We focus one developing secure, scalable and efficient infrastructure, leveraging modern development practices. Our impact reaches broadly across the company, working closely with operations, support, product, and other engineering teams to achieve Air-tek's company objectives.   As a Platform Development Engineer, you will play a key role in the design, development, and operation of our core platform services, helping us deliver powerful and reliable infrastructure solutions to support the growing needs of our products.Key Responsibilities

Help design, build, and improve the CI/CD capabilities used by our engineering teams to ensure the delivery of Air-tek's software

Work with cloud technologies (AWS) to deploy and manage Air-tek's services.

Develop automation and tools to streamline software builds, client integrations, deployments, and operations.

Fine tune and optimize platform components to improve their efficiency and cost effectiveness.

Collaborate with other engineering teams to troubleshoot errors and streamline the process of getting from code to client.

Drive adoption of best practices for DevOps, continuous integration, quality, scalability, and maintainability across the entire engineering org.

Skills and Experience

Terraform and infrastructure as code: Experience managing AWS infrastructure for EKS, MSK, and shared services using reusable modules with typed inputs and validation, for_each, and provider aliases for cross-account deployments. Strong understanding of dependency graphs, plan-time unknowns, lifecycle controls, and replacement behavior. Proficiency in secure remote state and locking, dependency version management, declarative imports, moved blocks, state migrations, drift remediation, and module testing with terraform test or an equivalent framework.

AWS architecture and security: Strong knowledge of multi-account architecture, VPCs, subnets, routing, DNS, security groups, private endpoints, and cross-account connectivity. Experience implementing least-privilege IAM, role trust policies, KMS encryption, secrets management, network isolation, security scanning, policy enforcement, and audit logging.

Containers, Kubernetes, and Amazon EKS: Hands-on experience building Docker images and operating production EKS clusters, including cluster and node upgrades, add-on compatibility, pod networking, persistent storage, autoscaling, scheduling, and disruption management. Working knowledge of Kubernetes RBAC, pod security, EKS access entries, Pod Identity, and IAM roles for service accounts (IRSA).

GitHub Actions and self-hosted runners: Experience developing reusable GitHub Actions CI/CD workflows with automated testing, security scanning, artifact management, environment protection, and OIDC-based AWS authentication. Experience operating self-hosted Kubernetes runners with Actions Runner Controller (ARC), including scale sets, ephemeral runners, autoscaling, image maintenance, resource and network configuration, and job isolation.

Argo CD and application delivery: Experience managing declarative GitOps delivery with Argo CD and Helm or Kustomize, including application definitions, sync policies and waves, health checks, drift reconciliation, and environment promotion. Strong understanding of rolling, blue-green, and canary deployments, including verification and rollback procedures.

Programming and automation: Proficiency in writing and maintaining scripts and automation using Bash, PowerShell, or a general-purpose programming language.

Messaging and database operations: Experience operating Amazon MSK and Apache Kafka, including broker configuration, upgrades, partitions, replication, retention, capacity planning, secure connectivity, and producer and consumer behavior. Ability to maintain self-hosted RabbitMQ and MongoDB in non-production environments, including configuration, upgrades, persistent storage, access controls, resource management, and monitoring.

Datadog and observability: Hands-on experience configuring Datadog infrastructure and Kubernetes monitoring, log collection, application performance monitoring (APM), and distributed tracing. Ability to manage dashboards and monitors through Terraform, define service-level indicators and objectives, and create actionable alerts for application health, Kafka consumer lag, RabbitMQ queues, and MongoDB performance and availability.

Reliability and operations: Strong troubleshooting and performance analysis skills across infrastructure, networking, identity, Kubernetes, messaging systems, databases, and applications. Experience with incident response, operational runbooks, capacity and cost management, and tested backup and restore procedures.

Bachelor’s degree in computer science, software engineering, or related fields (or equivalent work experience)

Additional experience (optional)

All experience listed below is optional. We welcome applications from candidates with strong core technical skills and a willingness to learn, including those with no prior experience in these areas.

Working knowledge of the build, configuration, deployment, and runtime requirements of C#/.NET and Node.js applications.

Experience with disaster recovery (DR) planning, including cross-region data replication, recovery time objectives (RTOs), recovery point objectives (RPOs), and failover and failback strategies.

Familiarity with Pulumi, Amazon SQS, Amazon RDS, MySQL, or policy-as-code frameworks such as OPA or Sentinel.

The salary range for this role is $150,000 to $180,000 annually. In addition to salary, new hires may be eligible to receive stock options. The salary range shared is intended as a guide; the final salary offered may vary based on factors including the experience and skillset of the candidate. Our company is committed to providing a fair, equitable, and competitive salary that reflects the value an individual brings to the organization.