Sr Platform Engineer

Air-tek is a Canadian-based software company with a powerful suite of unique products that have already achieved a significant share of a huge global market. The product market fit is excellent, and customers are lining up to buy. Although our global customers know us, we intentionally operate in stealth mode during this growth phase.

Our diverse team shares a collective passion for solving complex problems with a drive to innovate and a desire to create the passenger-centric travel industry. Based in Toronto, our inclusive culture is built on trust, collaboration, delivering a great product, and continuous personal development. We love what we do, and we support the team around us.

 

 

The Platform Engineering team is a highly collaborative group of software engineers committed to building, scaling, and maintaining the foundations on which other teams can build Air-Tek's software solutions on. We focus one developing secure, scalable and efficient infrastructure, leveraging modern development practices. Our impact reaches broadly across the company, working closely with operations, support, product, and other engineering teams to achieve Air-tek's company objectives.

As a Platform Development Engineer, you will play a key role in the design, development, and operation of our core platform services, helping us deliver powerful and reliable infrastructure solutions to support the growing needs of our products.

Terraform and infrastructure as code: Experience managing AWS infrastructure for EKS, MSK, and shared services using reusable modules with typed inputs and validation, for_each, and provider aliases for cross-account deployments. Strong understanding of dependency graphs, plan-time unknowns, lifecycle controls, and replacement behavior. Proficiency in secure remote state and locking, dependency version management, declarative imports, moved blocks, state migrations, drift remediation, and module testing with terraform test or an equivalent framework.

AWS architecture and security: Strong knowledge of multi-account architecture, VPCs, subnets, routing, DNS, security groups, private endpoints, and cross-account connectivity. Experience implementing least-privilege IAM, role trust policies, KMS encryption, secrets management, network isolation, security scanning, policy enforcement, and audit logging.

Containers, Kubernetes, and Amazon EKS: Hands-on experience building Docker images and operating production EKS clusters, including cluster and node upgrades, add-on compatibility, pod networking, persistent storage, autoscaling, scheduling, and disruption management. Working knowledge of Kubernetes RBAC, pod security, EKS access entries, Pod Identity, and IAM roles for service accounts (IRSA).

GitHub Actions and self-hosted runners: Experience developing reusable GitHub Actions CI/CD workflows with automated testing, security scanning, artifact management, environment protection, and OIDC-based AWS authentication. Experience operating self-hosted Kubernetes runners with Actions Runner Controller (ARC), including scale sets, ephemeral runners, autoscaling, image maintenance, resource and network configuration, and job isolation.

Argo CD and application delivery: Experience managing declarative GitOps delivery with Argo CD and Helm or Kustomize, including application definitions, sync policies and waves, health checks, drift reconciliation, and environment promotion. Strong understanding of rolling, blue-green, and canary deployments, including verification and rollback procedures.

Programming and automation: Proficiency in writing and maintaining scripts and automation using Bash, PowerShell, or a general-purpose programming language.

Messaging and database operations: Experience operating Amazon MSK and Apache Kafka, including broker configuration, upgrades, partitions, replication, retention, capacity planning, secure connectivity, and producer and consumer behavior. Ability to maintain self-hosted RabbitMQ and MongoDB in non-production environments, including configuration, upgrades, persistent storage, access controls, resource management, and monitoring.

Datadog and observability: Hands-on experience configuring Datadog infrastructure and Kubernetes monitoring, log collection, application performance monitoring (APM), and distributed tracing. Ability to manage dashboards and monitors through Terraform, define service-level indicators and objectives, and create actionable alerts for application health, Kafka consumer lag, RabbitMQ queues, and MongoDB performance and availability.

Reliability and operations: Strong troubleshooting and performance analysis skills across infrastructure, networking, identity, Kubernetes, messaging systems, databases, and applications. Experience with incident response, operational runbooks, capacity and cost management, and tested backup and restore procedures.

Bachelor’s degree in computer science, software engineering, or related fields (or equivalent work experience)

Additional experience (optional)

All experience listed below is optional. We welcome applications from candidates with strong core technical skills and a willingness to learn, including those with no prior experience in these areas.

Working knowledge of the build, configuration, deployment, and runtime requirements of C#/.NET and Node.js applications.

Experience with disaster recovery (DR) planning, including cross-region data replication, recovery time objectives (RTOs), recovery point objectives (RPOs), and failover and failback strategies.

Familiarity with Pulumi, Amazon SQS, Amazon RDS, MySQL, or policy-as-code frameworks such as OPA or Sentinel.