Senior Platform Engineer, Webflow

• 5+ years in platform, infrastructure, or cloud engineering, with demonstrated ownership of production cloud environments
• Hands-on experience with a major cloud provider (AWS, Azure, or GCP), including multi-account architecture
• Strong Infrastructure as Code experience (Terraform, Pulumi, or Ansible)
• Experience with GitOps-style delivery pipelines (GitHub Actions or similar)
• Solid grounding in networking and security fundamentals (VPC design, DNS, PKI, secrets management)
• Experience with observability tooling (e.g., Datadog, Prometheus, Grafana)
• Familiarity with cloud cost management (FinOps) practices
• Strong cross-functional collaboration and partnership skills with SREs, security, and developer productivity
• Nice to have: experience supporting non-engineering builders (e.g., citizen developers, AI-assisted tooling users) with infrastructure they can self-serve

Desirable

• We’re looking for a Senior Platform Engineer, Infrastructure to build and own the foundational cloud and source control infrastructure that sits outside our product
• This role is distinct from our Product Infrastructure and Developer Productivity teams: rather than supporting product systems or professional engineering workflows, you'll stand up the corporate cloud foundation from the ground up — multi-account architecture, networking, DNS, PKI, and secrets management — along with the GitHub-based delivery pipelines that govern how infrastructure gets provisioned and changed
• You'll design the landing zone and the paved-road templates that make hosting and source control self-service by default. Builders on this platform range from engineers to AI-assisted teams across the business, so the guardrails you build — policy-as-code, scoped modules, tagging enforcement, cost controls, security baselines — carry the weight a human reviewer otherwise would. Making that system permissive enough to be useful and constrained enough to be safe is the central challenge of the role
• Reporting to the Senior Director, Information Technology
• Design and maintain foundational shared services — VPCs, DNS, PKI, and secrets management — that other teams and self-service pathways depend on
• Own the cloud landing zone: multi-region connectivity, account/resource structure, tagging standards, and cost-efficient scaling
• Build and maintain Infrastructure as Code pipelines (Terraform, Pulumi, or Ansible) so infrastructure changes are automated, tested, and repeatable
• Design self-service pathways for code hosting (templated repo creation with standards baked in — visibility, branch protection, CI hooks) so builders can get set up without platform team involvement
• Design self-service deployment pathways — a small set of golden-path hosting patterns (e.g., static sites, lightweight services, scheduled jobs) that provision automatically into the governed landing zone
• Build the guardrails that make self-service safe: policy-as-code, tagging enforcement, cost controls, and security baselines
• Develop foundational observability infrastructure — logging, metrics, and tracing — giving builders and application teams at-a-glance visibility into system health
• Partner with SRE on platform reliability: availability, resilience, and performance of the underlying infrastructure
• Manage cloud vendor and tooling relationships at the engineering level, flagging risk and cost issues early

• Applications accepted on an ongoing basis until position is closed and filled