Senior Platform Engineer

Description & Requirements

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world's best places to work. We are currently the top ranked consulting firm on Glassdoor's Best Places to Work list and have earned the #1 overall spot a record seven times.

Extraordinary teams are at the heart of our business strategy, but these don't happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU'LL WORK WITH

As the premier consulting partner for the private equity industry, Bain's PEG boasts a global practice that is over three times larger than any competitor. Our network of over 1,000 professionals supports private equity and institutional investor clients through every stage of the investment life cycle, from deal generation and due diligence to portfolio value creation and exit planning.

Bain & Company is developing a suite of cutting-edge data and software solutions designed to revolutionize how the private equity industry uses data for investment insights and decision-making.

The PEG Innovation team's mission is to create analytical solutions for Bain clients, teams, and the broader institutional investor space using proprietary software and data products. This includes the development, commercialization, and daily management of Bain's proprietary datasets, data, and software businesses.

WHERE YOU'LL FIT WITHIN THE TEAM

Senior Platform Engineers design and build the shared services that every product and data squad depends on:
Auth, RBAC, Session Management, Audit, Notifications, File handling, Search, and more. Our platform runs on Microsoft Azure and Azure Kubernetes Service (AKS). You own your services end-to-end: design, build, test, deploy, monitor, and operate them. You set the standard for how platform services are built and contribute to the engineering standards and conventions that govern the broader estate. You collaborate closely with Security and Infrastructure to ensure services are secure-by-default, observable from day one, and operable under production on-call expectations.

WHAT YOU'LL DO

Core Platform Service Development, Deployment, and Operations (80%)

* Design, build, test, deploy, and operate core platform services to production quality standards (Auth, RBAC, Session, Audit, Notifications, File, Search).

* Own service APIs and contracts end-to-end: versioning, backwards compatibility, and consumer impact management across product squads.

* Write and maintain Postgres schemas and Alembic migrations using the expand/contract pattern; never ship a breaking schema change without a backwards-compatible transition.

* Implement and enforce authentication and authorisation patterns: JWT, refresh token rotation, RBAC, SAML/OIDC, and service-to-service auth where required.

* Design and operate Redis-backed patterns: caching, session storage, rate limiting, pub/sub, and distributed lock coordination where needed.

* Build and operate event-driven capabilities using Kafka domain events (Cloud Events envelope, schema registry integration) where platform services publish and consume.

* Instrument services with structured logs, distributed tracing, and Prometheus metrics from day one using Open Telemetry and FastAPI instrumentation.

* Write and maintain Helm charts for owned services; contribute to Kubernetes manifests in the platform-infra repository (health checks, resource limits, HPA readiness).

* Participate in on-call rotation for platform incidents; drive incident response to resolution and maintain runbooks for owned services.

Other (20%)

* Set and enforce engineering standards for platform service development: testing, observability, security, reliability, and operational hygiene.

* Conduct thorough code reviews; enforce standards on PRs and raise the bar for production practices across the platform estate.

* Mentor mid-level and junior platform engineers through pairing, design guidance, and ongoing review feedback.

* Use AI coding assistants to accelerate service scaffolding, API/router generation, migration drafts, and test creation; review all generated code against production and security standards before committing.

* Use LLMs to generate first-draft documentation (runbooks, service docs, API notes) and operational checklists; validate and refine outputs before publishing.

* Collaborate with the Security Engineer on Vault integration (Vault Agent Injector) and/or Azure Key Vault, dynamic secrets usage, policy scoping, mTLS policy, and software supply chain security requirements.

ABOUT YOU

* Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field (or equivalent practical experience).

* 6+ years of experience building and operating backend services, APIs, or platform…