JOB DESCRIPTION:You will own the physical infrastructure and delivery layer for a new commercial data platform serving institutional clients. This means cloud platform architecture, compute and storage provisioning, API and data delivery infrastructure, security and access controls, multi-tenancy design, and operational reliability. You are responsible for everything that makes the data accessible, secure, performant, and commercially deliverable - the bridge between internal data pipelines and external client consumption. You sit within the Technology organization but are fully dedicated to this initiative.
Key Responsibilities:- Platform Architecture: Design and maintain the end-to-end technical infrastructure - compute layer, storage layer, orchestration services, caching, and networking. Ensure the platform supports multiple product streams with distinct performance profiles (real-time APIs, bulk data delivery, embedded analytics)
- API & Delivery Infrastructure: Build and operate the data delivery layer for external clients - REST APIs for real-time position data, bulk file delivery (SFTP), cloud data sharing (e.g., Snowflake Data Sharing), and webhook-based event notifications. Own API versioning, rate limiting, SLA monitoring, and client onboarding
- Security & Access Controls: Design and implement role-based (RBAC) and attribute-based (ABAC) access controls to ensure strict client data isolation. Clients accessing their own operational data must never see other clients' data; market-facing products must expose only anonymized/aggregated outputs. Implement encryption at rest and in transit, key management, and secrets handling
- Multi-Tenancy & Isolation: Architect the platform to support thousands of external users across multiple client organizations, with logical (or physical) data isolation, per-tenant configuration, and audit logging
- Reliability & Observability: Build monitoring, alerting, and incident response infrastructure. Define and maintain SLAs for uptime, latency, and data freshness. Implement health checks, circuit breakers, and graceful degradation patterns
- Scalability: Ensure the platform scales from a small number of pilot clients to 2,000+ users without architectural rework. Design for horizontal scaling, auto-provisioning, and cost optimization
- Compliance & Governance: Support SOC 2 compliance, data residency requirements, and security audit processes. Collaborate with Legal on data-use provisions and technical consent enforcement
- Collaboration: Work with the Data Engineer (who builds pipelines that run on your platform), the Data Architect (who defines the logical model you physically instantiate), and the Quantitative Director (whose outputs you deliver to clients)
Requirements:- 6+ years in platform engineering, infrastructure engineering, or DevOps/SRE - ideally supporting external-facing data products
- Expert knowledge of cloud platforms (AWS, Azure, or GCP) - infrastructure-as-code (Terraform, or CloudFormation), containerization (Docker, Kubernetes), and serverless patterns
- Strong API engineering experience - building, operating, and scaling REST APIs for external commercial consumption. Experience with API gateways, OAuth2/JWT authentication, rate limiting, and versioning
- Experience designing multi-tenant architectures with strict data isolation and per-client access control
- Proficiency in at least one systems programming or scripting language (Python, Go, or similar)
- Hands-on experience with observability stacks (Datadog, Prometheus/Grafana, CloudWatch, or equivalent)
- Understanding of security best practices - RBAC/ABAC, encryption, secrets management, SOC 2 controls
- Experience with cloud data platforms (Snowflake, Databricks) from an infrastructure/provisioning perspective
Desirable:- Experience building platforms that serve financial services clients (banks, asset managers, institutional investors)
- Familiarity with data delivery patterns - SFTP, Snowflake Data Sharing, streaming (Kafka/Kinesis), webhooks
- Experience with cost optimization for cloud infrastructure at scale
- Understanding of data privacy architectures and how platform controls enforce anonymization/consent rules
- Prior experience at a data vendor, SaaS company, or fintech where the platform is the product
WHAT WE OFFER:We are committed to supporting your development, advancing your career, and providing benefits that matter to you.
Our industry-leading Alter Domus Academy offers six learning zones for every stage of your career, with resources tailored to your ambitions and resources from LinkedIn Learning.
Salary range: We offer a salary of $87,500 to $145,000+ for this role. We encourage all interested candidates to apply and discuss their salary expectations and overall package with the recruitment team.
Our global benefits also include:- Support for professional accreditations
- Flexible arrangements, generous holidays, plus an additional day off for your birthday!
- Continuous mentoring along your career progression
- Active sports, events and social committees across our offices
- 24/7 support available from our Employee Assistance Program
- The opportunity to invest in our growth and success through our Employee Share Plan
- Plus additional local benefits depending on your location
#LI-HYBRID #LI-DH1
