Platform Engineer at Jensen Hughes

United States

$100k - $125k

<p><strong>Company Overview</strong></p> <p>Throughout our worldwide network of experts, clients and communities, we are renowned for our leadership in fire protection engineering – a legacy of responsibility we have proudly upheld since 1939. Today, our expertise extends broadly across closely related security and risk-based fields – from accessibility consulting and risk analysis to process safety, forensic investigations, security risk consulting, emergency management, digital innovation and more.</p> <p>Our engineers and consultants collaborate to solve complex safety and security challenges, ensuring our clients can protect what matters most. For over 80 years, we have helped mitigate risks that threaten lives, property and reputations. Through technology, expertise and industry-leading research, we remain dedicated to our purpose of making our world safe, secure and resilient.</p> <p>At Jensen Hughes, we believe that creating and sustaining a culture of trust, integrity and professional growth starts with putting our people first. Our employees are our greatest strength, and we value the unique perspectives and talents they bring to our organization.&nbsp;</p> <p>Our wide range of Global Employee Networks connect people from across the organization, supporting career development and providing forums for individuals to share experiences on topics they're passionate about. Together, we are cultivating a connected culture where everyone has the opportunity to learn, grow and succeed together.</p> <p><strong>Job Overview</strong></p> <p>We’re hiring a Platform Engineer to build and operate our cloud platform on AWS, with Terraform as the infrastructure control plane. You will design and implement Infrastructure CI/CD and PR-driven infrastructure delivery (GitOps principles) for cloud infrastructure and platform configuration (Git as source of truth, automated checks, controlled applies, strong auditability). You’ll also own platform-grade observability (Splunk preferred) and help enable secure, production-ready agentic AI capabilities using Amazon Bedrock and Bedrock AgentCore, partnering with application teams to establish reliable patterns and guardrails.</p> <p><strong>Responsibilities:</strong></p> <p><strong>AWS platform engineering (multi-account) </strong></p> <ul> <li>Design, build, and operate secure, reliable AWS foundations across a multi-account AWS environment (AWS Organizations / Control Tower where applicable), including networking, IAM, KMS, secrets, tagging, and shared services</li> <li>Establish scalable patterns for compute, storage, and networking; enable repeatable environments across dev/stage/prod</li> <li>Improve developer experience through standards, templates, and clear platform documentation</li> </ul> <p><strong>Terraform (deep expertise)</strong></p> <ul> <li>Own Terraform architecture end-to-end: module strategy, state design, environment separation, provider/version management.</li> <li>Build and maintain a production-grade Terraform SDLC: <ul> <li>PR-driven workflows with plan previews, approvals, and promotion across environments</li> <li>Controlled apply mechanisms with audit trails and rollback plans</li> <li>Drift detection and safe reconciliation strategy • Import/migration/refactor patterns without downtime</li> <li>Implement baseline guardrails (tagging, encryption, access controls) as code wherever feasible</li> </ul> </li> </ul> <p><strong>Infrastructure CI/CD + PR-driven infrastructure delivery (GitOps principles)</strong></p> <ul> <li>Implement PR-driven infrastructure delivery using GitOps principles (not Kubernetes-only): <ul> <li>Git as the source of truth; PRs as change requests</li> <li>Automated validation/testing/security checks on every change</li> <li>Safe promotion model (dev → stage → prod) with appropriate gates</li> <li>Controlled applies for production (approval gates / break-glass procedures), with full traceability</li> <li>Standardize pipelines in the team’s primary CI/CD platform (GitHub Actions) and integrate with existing enterprise tooling where needed</li> <li>Establish repo structure, branching strategy, and operational runbooks for the infrastructure delivery workflow</li> </ul> </li> </ul> <p><strong>Observability (Splunk preferred)</strong></p> <ul> <li>Own the Splunk observability operating model: dashboards, alerting standards, SLOs/SLIs, runbooks, and on-call readiness</li> <li>Build/operate telemetry pipelines for reliability and cost efficiency (noise reduction, sampling/cardinality strategies, retention and routing).</li> <li>Partner with application teams to improve visibility, reduce MTTR, and drive incident learnings into platform improvements</li> </ul> <p><strong>Agentic AI enablement (Amazon Bedrock + AgentCore) </strong></p> <ul> <li>Partner with engineering teams to enable agentic AI use cases using Amazon Bedrock and AgentCore (tool integration patterns, secure operation, production readiness)</li> <li>Help establish foundational patterns for agent deployment and operations (environments, permissions, observability, and evaluation/reliability practices) aligned to enterprise controls</li> </ul> <p><strong>Operational excellence</strong></p> <ul> <li>Participate in incident response; lead postmortems and drive systemic, preventive fixes</li> <li>Measure and improve platform reliability, security posture, and cost efficiency over time</li> </ul> <p><strong>Requirements (must have):</strong></p> <ul> <li>8–10 years of experience in Platform Engineering / SRE / DevOps (or equivalent experience delivering platform outcomes)AWS expertise, including multi-account patterns (AWS Organizations / Control Tower preferred), networking, IAM/security, and operations</li> <li>Terraform expert with proven ownership of org-scale infrastructure-as-code (modules, state, CI controls, large refactors)</li> <li>Proven experience designing Infrastructure CI/CD and PR-driven infrastructure delivery (GitOps principles) for Terraform and cloud configuration: <ul> <li>PR-based automation with plan previews and security/policy checks</li> <li>Controlled apply processes with approvals and auditability</li> <li>Environment promotion patterns and rollback strategies</li> </ul> </li> <li>Strong production experience with observability platforms such as Splunk, Datadog, Grafana, or Dynatrace, including building and operating dashboards, alerting standards, and telemetry pipelines (logs/metrics/traces) in production</li> <li>Strong Linux and troubleshooting skills; proficiency in automation (Python or Go preferred)</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <ul> <li>Experience building agentic AI solutions using Amazon Bedrock Agents and/or Amazon Bedrock AgentCore (deployment/operations, tool integration patterns)</li> <li>OpenTelemetry at scale (standards, collectors/gateways, sampling, correlation across logs/metrics/traces)</li> <li>Policy-as-code experience (Conftest/Sentinel or similar) applied to Terraform and platform guardrails</li> <li>Experience building an Internal Developer Platform (IDP) / self-service workflows (golden paths, templates, paved roads).</li> <li>Databricks on AWS platform support (workspace/cluster policies, reliability, cost controls; Unity Catalog familiarity a plus)</li> </ul> <p>&nbsp;</p><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p>Please note that the salary range provided is a good faith estimate for the position at the time of posting and not a guarantee of compensation. Final compensation may vary&nbsp; based on factors, including but not limited to, responsibilities of the job, education, experience, knowledge, skills, and abilities, geographic location, internal equity, alignment with market data.</p> <p>&nbsp;</p> <p>Jensen Hughes offers a competitive total rewards package, which includes a retirement plan, healthcare coverage, and a broad range of other benefits. Incentives and/or benefit packages may vary depending on the position and location.</p></div><div class="title">National Pay Range</div><div class="pay-range"><span>$100,000</span><span class="divider">&mdash;</span><span>$125,000 USD</span></div></div></div><div class="content-conclusion"><p><em><strong>Jensen Hughes is an Equal Opportunity Employer. Qualified candidates will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.</strong></em></p> <p>&nbsp;</p> <p>At Jensen Hughes, we embrace innovation and understand that people are increasingly using artificial intelligence (AI) tools like ChatGPT and other generative platforms to learn, prepare and communicate.&nbsp; We have provided some guidelines regarding the responsible use of AI in the recruitment process.&nbsp; Please click <strong><a href="https://www.jensenhughes.com/careers/responsible-use-of-ai-in-the-jensen-hughes-recruitment-process">here</a></strong> to review.</p> <p><br>The security of your personal data is important to us. Jensen Hughes has implemented reasonable physical, technical, and administrative security standards to protect personal data from loss, misuse, alteration, or destruction. We protect your personal data against unauthorized access, use, or disclosure, using security technologies and procedures, such as encryption and limited access. Only authorized individuals may access your personal data for the purpose for which it was collected, and these individuals receive training about the importance of protecting personal data.&nbsp; Jensen Hughes is committed to compliance with all relevant data privacy laws in all areas where we do business, including, but not limited to, the GDPR and the CCPA.&nbsp; Additionally, our service providers are contractually bound to maintain the confidentiality of personal data and may not use the information for any unauthorized purpose.</p> <p>&nbsp;</p> <p>*Policy on use of 3rd party recruiting agency for direct placements<br><br>Jensen Hughes will occasionally augment a recruiting search through agencies for certain positions when business conditions warrant. Jensen Hughes will not accept resumes, inquiries or proposals from recruiting agencies as an acceptable method to consider a candidate. 3rd party recruiting agencies must sign a standard Jensen Hughes agreement after being evaluated and accepted by a Human Resources or Talent Acquisition manager, or member of the talent acquisition team. Hiring managers and employees of Jensen Hughes are not authorized to accept resumes, engage in fee-based searches through recruiting firms or sign a search agreement. Please note this policy does not apply to “staffing firms” or firms that are involved with hiring temporary staff. Any recruiting agency interested in being considered may contact our recruiting team at jensenhughesrecruiting.com.</p></div>