Overview:

The Platform Engineering Manager owns the infrastructure LegitScript runs on and the developer experience that lets every engineer ship great software - from how code is built and deployed to how infrastructure is governed and proven. This is a hands-on player-coach role: you lead the platform engineering team while staying in the systems yourself, writing infrastructure code, debugging deploys, and setting the standard by doing the work. Your immediate mandate is building a standardized Kubernetes deployment path and self-service tooling that removes infrastructure hand-holding from application engineers, reducing the operational drag that consumes nearly half of engineering capacity today. You partner closely with engineering leadership and every squad whose work flows through your pipelines, driving toward infrastructure thats more reliable, more automated, and better understood - and change processes that produce audit-ready evidence without a fire drill.

What Youll Do:

• Lead the platform engineering team: own its delivery, reliability commitments, health, and the growth and career development of its engineers, while remaining hands-on in the infrastructure and tooling yourself.
• Make LegitScripts infrastructure auditable: own environment separation, change control, access management, and audit logging so that changes to production are traceable and defensible, and so the controls hold up to the Secure SDLC Policy, the Change Management Policy, and SOC 2 evidence requirements.
• Drive the migration to a standardized Kubernetes deployment path, delivered incrementally at natural replacement points while maintaining operational continuity for the teams and services that depend on it. No big-bang cutovers.
• Build and own the developer tooling and self-service deployment paths that let engineers ship application code to production without hand-managing infrastructure: the paved road, the golden paths, and the guardrails that make the safe way the easy way.
• Own and improve the CI/CD pipeline and its controls, including branch protection, required peer review, automated security and quality testing, and gated deployment, so the pipeline enforces our engineering and security standards at scale.
• Establish infrastructure-as-code standards in Terraform and bring manual or unmanaged production changes under version control and change management, eliminating the drift that creates technical debt and audit gaps.
• Reduce business-as-usual toil through automation and replatforming, so that volume growth stops being a headcount equation and engineering capacity shifts toward higher-value work.
• Own reliability, monitoring, alerting, and incident response for infrastructure as first-class concerns; serve as an escalation point and coordinate response for infrastructure incidents.
• Hold the boundary with the application platform: provide the infrastructure substrate and tooling that the application-platform and domain teams consume, and partner with the Staff Engineer who owns that platform rather than duplicating or absorbing their scope.
• Set and enforce the standard for infrastructure code quality, testing, documentation, and review, and raise the bar for the engineers and partners who work in the platform through clarity and example.
• Manage cloud cost and capacity deliberately, making the tradeoffs between performance, reliability, and spend explicit rather than incidental.
• Foster a culture of accountability, collaboration, and continuous improvement.

What Youll Bring:

• Deep, hands-on platform and infrastructure engineering experience across AWS, Linux, and container-first workflows, including running Kubernetes in production.
• Production Kubernetes experience: not only operating clusters, but giving other engineering teams a safe, standardized path to deploy onto them.
• Strong infrastructure-as-code practice with Terraform, including bringing existing or unmanaged infrastructure under version control and change management.
• CI/CD pipeline design and ownership, including the security, quality, and approval gates that enforce engineering standards on every change.
• A track record of building internal developer tooling and self-service deployment that abstracts infrastructure away from application engineers.
• Experience designing infrastructure and change processes for audit-ability and compliance: environment separation, access control, audit logging, and producing evidence for frameworks such as SOC 2.
• Strong command of observability, monitoring, alerting, and incident response for infrastructure.
• Experience with authentication and authorization platforms such as Okta or Auth0.
• Demonstrated ability to inherit unfamiliar, legacy, or poorly maintained infrastructure and make it materially better, with strong troubleshooting and root cause analysis.
• People leadership: managing, mentoring, and growing engineers while staying technically hands-on, and building consensus across teams to establish shared infrastructure and security practices.
• Proven ability to influence without direct authority and to set standards that other engineers and teams adopt.
• Comfort operating through change: leading an incremental migration cleanly, and establishing durable engineering practices from the ground up.
• Ability to communicate technical concepts and tradeoffs clearly to non-technical stakeholders, including leadership.
• Well-developed ability to speak, read, comprehend, and write English

We succeed together, care deeply, stay curious, and inspire trust - and we look for those qualities in the people we hire. LegitScript offers competitive compensation, flexible work options, and a team thats genuinely invested in your success. If our mission resonates with you, wed love to hear from you.

This job description is not designed to cover or contain a comprehensive listing of all activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.

Please note that visa sponsorship is not available for this position. We cannot support international remote work.

We do not accept unsolicited applications from third-party recruiters or agencies for this job posting. Any candidate submission without a prior agreement will be considered the property of our company, and we will not be responsible for any fees or obligations related to such submissions. We encourage interested candidates to apply directly through our official channels.

The pay range for this role is:

160,000 - 185,000 USD per year (Remote (United States))