SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Saviynt is seeking a Principal Software Engineer for Platform Engineering to design and build the company's Internal Developer Platform (IDP) and multi-tenant SaaS infrastructure. This is a high-impact individual contributor role focused on centralizing developer tooling, enabling self-service capabilities, and establishing platform-first practices across the organization.
Key Responsibilities:
Internal Developer Platform & Developer Portal: Own the IDP architectural lifecycle, from service catalog creation to automated self-service environment provisioning. Build a centralized developer hub with TechDocs, software catalogs, and integrations with GitLab, Jira, and cloud management consoles. Develop "golden-path" templates for rapid microservice deployment with Kubernetes configurations, observability, and security guardrails. Champion platform adoption across engineering teams through feedback loops and analytics.
Multi-Tenant SaaS Architecture & Fleet Operations: Design cell-based deployment patterns and progressive ring-deployment strategies to isolate tenant workloads and limit blast radius. Automate zero-downtime global releases while supporting multi-region SaaS deployments.
Platform-as-a-Service on Kubernetes: Design and manage multi-tenant Kubernetes environments on AWS EKS and Azure AKS. Produce modular Helm libraries and infrastructure compositions that abstract cloud complexity. Enforce isolation and access control policies reflecting multi-tenancy security frameworks. Maintain high availability through automated cluster lifecycle operations.
GitOps, CI/CD, and Delivery Infrastructure: Drive CI/CD-as-a-service evolution with standardized GitLab CI and ArgoCD/Argo Rollouts pipeline templates. Deploy GitOps methodologies for rollback capabilities, drift detection, and audit trails. Incorporate supply-chain security (container signing, SBOM) into delivery infrastructure.
Platform Security & Compliance: Integrate zero-trust principles and workload identity using short-lived credentials and cloud-native network policies. Utilize policy-as-code (OPA, Gatekeeper, Kyverno) for cluster-level security enforcement. Streamline secrets management as a self-service platform capability. Build compliance-as-code into CI/CD pipelines for SOC 2, ISO 27001, and FedRAMP audit trails.
Event-Driven & Messaging Infrastructure: Manage shared Kafka and AWS MSK infrastructure, delivering topic provisioning and schema management as platform services. Construct reusable event-driven architecture patterns and scaffolds for product teams.
Requirements:
- 12+ years of experience across the software development lifecycle with focus on platform engineering, DevOps, and cloud-native infrastructure
- Proven IDP build experience: shipped or significantly contributed to a Backstage or Port portal (or equivalent) in production
- Deep Kubernetes expertise across EKS and AKS, including multi-tenant cluster design, Helm, Kustomize, and Crossplane
- Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring/canary deployment strategies
- Strong proficiency in Go (Golang) or Python for production-grade CLIs, custom operators, or platform backends
- GitLab CI + ArgoCD/Argo Rollouts pipeline implementation experience—building CI/CD-as-a-service
- Terraform/OpenTofu module authoring at scale: module registry design, state management, large IaC refactoring
- Background in Backstage plugin development or open-source developer platform ecosystem contributions
- Practical application of workload identity, SPIFFE/IRSA, and cloud-native zero-trust network architectures
- Implementation of OPA/Gatekeeper/Kyverno for policy-as-code in production Kubernetes clusters
- FinOps methodologies and tools (Kubecost, cloud cost exposure APIs)
- Experience managing Kafka or AWS MSK as a multi-tenant platform capability
- Proven platform-first mindset: history of centralizing tooling into core foundation layers, evangelizing adoption, collaborating across developers and SRE teams
- Professional exposure to identity security frameworks, SaaS delivery, and high-compliance environments (SOC 2, ISO 27001, FedRAMP)
