Sr. Software Engineer - Platform

VerifyYou is building infrastructure that keeps the internet human by solving online identity and helping platforms stop bots and fake accounts. The Senior Platform Engineer will own the company’s infrastructure, deployment path, access model, security posture, reliability, observability, and edge controls while building Terraform, CI/CD, IAM, backup, and disaster recovery capabilities.

Responsibilities:

• Own IAM and the access model. Move off individually granted permissions onto groups, with Google Workspace as the source of truth and every other system binding to groups rather than people
• Get Terraform onto a gated path. Build an auditable apply flow using Workload Identity Federation, plan on PR, and approval before anything reaches production. The reusable workflows already exist and nothing calls them yet
• Own secrets and the credential store, working toward no human holding a long-lived credential anywhere
• Own the edge. WAF posture, rate limiting and bot mitigation. Adversarial traffic is our product domain, so this work sits close to the thing we sell
• Build controls that produce their own evidence, so access reviews and change management run as queries against real systems instead of spreadsheets somebody keeps up by hand
• Own reliability as pilot customers scale. You help us ensure we find out before the customer does
• Infrastructure as Code. Terraform conventions, module structure, and building out the CI apply path
• Reliability. Capacity planning, synthetic health checks, alerting, and standing up on-call properly
• Observability. Structured logs, traces joining the edge to the app, and the audit trail in BigQuery
• Edge policy hardening. Taking our edge policy from deployed-and-observable to actually enforcing, without breaking live traffic
• Identity and access. Environment-scoped groups, human database IAM, API-key hashing and rotation
• Backups and DR. Recovery objectives, restore drills, and making the commitments and the infrastructure agree
• You'll write Python and Terraform. You'll integrate with the frontends but you won't own them. You get to decide what we adopt next
• You'll build and operate what it measures

Requirements:

• 5+ years running cloud infrastructure in production, with deep and current GCP and/or AWS
• Terraform in a team setting: modules, state, review, and the discipline of never applying by hand
• A CI/CD path you built and would defend, including gated applies and rollback that actually works
• Cloud IAM as a design problem: least privilege, group-based access, workload identity, and why humans shouldn't hold long-lived credentials
• SRE or DevOps practice in production. You've carried a pager and run incident response
• Hands-on serverless experience: Cloud Run, Lambda, Azure Functions, or equivalent
• Observability you've instrumented yourself, OpenTelemetry included, and a view on what's actually worth alerting on
• You read and write application code. Python here. This is not a pure ops role
• You work effectively with AI tooling and know where it's wrong. Coding agents and AI-assisted review are part of how we ship. We also don't take a bot's severity rating at face value, and neither should you
• Time inside a SOC 2 or ISO 27001 estate, enough to know why an auditor asks for what they ask for
• Abuse prevention at the edge: WAF, rate limiting, bot mitigation
• Database Administration: connection pooling, read replicas, failover
• Cost engineering: attribution, unit economics, spend that scales sub-linearly with customers
• Operating without a platform team around you. You were the person, or one of two