Senior Platform Engineer

About the role

We are looking for someone with a strong SaaS product background who is passionate about continuous innovation, scaling a product, and delivering long-term value to customers, beyond just short-term project work. 

Someone that is willing to work hard but also learn. Our goal is to make you great so that you can do great things at Orchestry. 

Someone that thinks out of the box especially when it comes to Microsoft 365. We love Microsoft, but we also know that we can learn outside our domain and make the best solution possible. 

Someone that is so driven they are a little bit crazy. If bad software keeps you up at night, then we are looking for you! We want passionate, inclusive, and empathetic individuals to come on this journey with us. 

The individual to fulfill this position must be a self-assured independent worker who can clearly understand complex requirements and work with the Developers and Product Managers to develop business applications. This role is responsible for the delivery and creation of code artefacts utilizing the Microsoft Technology Stack as well as development and support of DevOps. They must be able to work closely with Developers, Product Management, Business Requirements Analysts, and QA to develop and support product offerings based on broad client needs. 

This person should have superior analytical capabilities, the ability to understand complex business processes, the ability to work collaboratively, and possess strong problem-solving skills. 

What you'll do

• Convert existing development-only Dockerfiles into production-ready, multi-stage container builds with health checks and graceful shutdown handling (including draining in-flight background jobs before termination). 

• Stand up and administer a container registry, including access policies, image tagging conventions, and retention/cleanup automation. 

• Extend CI/CD pipelines to add container build-and-push steps, and migrate deployment targets from traditional package-based deployment to container-based App Service deployments. 

• Author Infrastructure-as-Code modules from scratch covering compute, database, storage, secrets, and monitoring resources. 

• Build provisioning automation for identity/app-registration setup, database initialization, and environment bootstrapping. 

• Implement liveness and readiness health endpoints that verify downstream dependency connectivity (database, queue, background job processing). 

• Build a telemetry pipeline that exports sanitized, PII-free operational metrics to a centralized monitoring system, with configurable scope and destination. 

• Design and maintain a tracking/registry system for infrastructure deployments, capturing version, status, and configuration state across many environments. 

• Extend deployment pipelines to support automated, tag-based promotion and staged/canary rollout strategies, with per-environment failure isolation and rollback. 

• Build a controlled mechanism for pushing critical patches outside the normal release cadence, with audit logging, notification workflows, and approval gates. 

• Partner with engineering to audit core subsystems (background job processing, database partitioning/sharding, secrets access patterns, external integrations, feature-flag and analytics tooling, licensing/validation logic, notifications, scheduled tasks) for portability across deployment environments. 

• Optimize databases (Azure SQL, Cosmos DB) for performance and scalability, including sharding and partitioning strategies. 

• Ensure horizontal scaling strategies to handle SaaS growth efficiently. 

• Implement caching (Redis, CDN) and performance tuning techniques. 

• Lead incident response and root cause analysis (RCA) efforts, reducing mean time to recovery (MTTR). 

• Participate in the on-call rotation as a first responder to production incidents and emergency scenarios, providing timely triage and resolution outside of standard business hours. 

• Work closely with Engineering, Security, and Product teams to align platform goals with business objectives. 

• Act as a technical mentor for junior and mid-level engineers, fostering best practices in DevOps, cloud, and automation. 

• Advocate for reliability engineering practices (SRE principles, SLAs, SLOs, error budgets). 

Qualifications

• 6+ years DevOps experience. 

• At least 4 years DevOps Production experience working for a SaaS product-led company. 

• Hands-on experience building Infrastructure-as-Code from scratch is highly valued. 

• Experience taking a service from non-containerized to production-grade containerized deployment is highly valued. 

• Nice-to-have: 3+ years .NET platform experience. 

Technical Competencies

• Containerization: Hands-on experience converting non-containerized services to production-grade containers — multi-stage Docker builds, health checks, and graceful shutdown handling that drains in-flight background work before termination. 

• Container Registries: Experience standing up and administering a container registry, including access policies, image tagging conventions, and retention/cleanup policies. 

• Infrastructure as Code (IaC): Hands-on experience authoring Terraform/Bicep modules from scratch in environments with no pre-existing IaC, covering compute, database, storage, secrets, and monitoring resources. 

• Provisioning Automation: Experience building scripts/tooling for identity and app-registration setup, database initialization, and environment bootstrapping. 

• CI/CD Pipelines: Proficiency in GitHub Actions, Azure DevOps Pipelines, or similar, including extending pipelines with container build/push steps and migrating deployment targets from package-based to container-based deployment. 

• Deployment & Release Strategies: Experience with tag-based image promotion, staged/canary rollout, per-environment failure isolation, and automated rollback. 

• Health & Observability Instrumentation: Experience implementing liveness/readiness endpoints that check downstream dependency health (database, queue, background job processing), plus structured, correlation-ID-based logging across application workflows. 

• Deployment Tracking: Experience designing registries or tracking systems that capture version, status, and configuration state across a fleet of environments. 

• Patch & Hotfix Mechanisms: Experience building controlled release mechanisms for pushing critical fixes outside the normal release cadence, with audit logging and approval gates. 

• Azure Services: Deep experience with Azure App Services, Azure Kubernetes Service (AKS), Azure Functions, Virtual Machines, Cosmos DB, Azure SQL, Redis, Azure Storage, and Azure Virtual Networks. 

• Networking & Security: Strong understanding of Azure networking (VNets, NSGs, Private Endpoints, Load Balancers, VPNs, ExpressRoute, etc.), Zero Trust principles, and API security. 

• Secrets Management: Knowledge of Azure Key Vault, HashiCorp Vault, and secure credential management. 

• SOC 2/ISO 27001 & Compliance Awareness: Ability to implement and maintain logging, access controls, and audit trails in alignment with SOC 2/ISO 27001 requirements. 

• Database Management: Experience with Azure SQL and Cosmos DB, including sharding/partitioning, scaling, indexing, and query optimization. 

• Caching Strategies: Implementation of Redis and CDN caching for performance improvements. 

• Data Resiliency & Backup Strategies: Knowledge of backup, recovery, high availability, and disaster recovery planning. 

• Codebase Portability Audits: Experience reviewing subsystems (job processing, secrets access, external integrations, feature-flag/analytics tooling, licensing, notifications, scheduled tasks) to identify environment-specific assumptions. 

• Scripting & Automation: Proficiency with PowerShell and Azure CLI. 

Why Orchestry?

• Work that matters: Join a growing, remote-first SaaS company solving real problems for
• organizations navigating the complexity of Microsoft 365.
• Real ownership: Build and scale the product delivery and discovery discipline at scale.
• Flexibility with accountability: We trust people to work in the way that works best for them while staying accountable for meaningful outcomes.
• A smart, kind, no-ego team: People show up, work across departments, and care more about getting to the right answer than being the person who had it first.
• Competitive compensation, equity, and benefits.