Senior Platform Engineer

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S. and has supported over 20,000 healthcare professionals and team members with close to 1,500 health and wellness offices across 48 states in four distinct categories: dental care, urgent care, medical aesthetics, and animal health. Working in partnership with independent practice owners and clinicians, the team is united by a single purpose: to prove that healthcare can be better and smarter for everyone.

TAG provides a comprehensive suite of centralized business support services power the impact of five consumer-facing businesses:
Aspen Dental, Clear Choice Dental Implant Centers, Well Now Urgent Care, Chapter Aesthetic Studio, and Lovet Pet Health Care. Each brand has access to a deep community of experts, tools and resources to grow their practices, and an unwavering commitment to delivering high-quality consumer healthcare experiences at scale.

We're hiring a Sr. Platform Engineer to help lead the design, build, and operation of the cloud foundation that the rest of our engineering organization builds on. You'll work primarily in GCP, setting direction on landing zones, hardening IAM, automating infrastructure with Terraform, running workloads on GKE and Cloud Run, and standing up the platform capabilities our application teams need to ship safely and quickly.

You'll also be a key technical leader for operationalizing AI workloads (Vertex AI Agent Engine, model endpoints, agentic services) and making them production-grade. This is a senior, hands-on engineering role on a small, high-trust team. You'll write code, own systems end-to-end, set technical direction for the platform, mentor other engineers, and help shape how internal developers experience the cloud.

• Set technical direction for the platform: drive architecture decisions, write ADRs, evaluate trade-offs, and bring the team along.
• Design, build, and operate platform services on GCP, covering compute (GKE, Cloud Run, Compute Engine), networking, IAM, secrets, observability, and CI/CD integrations.
• Author and maintain Terraform modules and a clean state strategy across multiple GCP projects and environments. Import, refactor, and clean up legacy infrastructure when needed.
• Build and operate GKE clusters: workload identity, networking, ingress (nginx), autoscaling, upgrades, policy, and cost controls.
• Stand up serverless and PaaS patterns for application teams (Cloud Run, Cloud Functions, Pub/Sub, Workflows) with sensible defaults baked in.
• Partner with our AI / Software Engineers to operationalize agents and models:
  Vertex AI Agent Engine deployments, model endpoints, eval and observability pipelines, prompt/secret management, and CI/CD for AI artifacts.
• Implement secure-by-default CI/CD with Git Lab using Workload Identity Federation: no long-lived keys, least-privilege service accounts, reproducible deploys.
• Contribute to Azure and AWS work as needed: networking, identity, storage, and helping align patterns across clouds.
• Improve developer experience: golden paths, paved roads, internal docs, and templates that make the right thing the easy thing.
• Mentor other engineers on the team through code review, pairing, design feedback, and knowledge-sharing. Raise the technical bar across Cloud Ops.
• Lead incident response and post-incident reviews for systems you own and help mature how the team operates on call.

• 7+ years of hands‑on cloud engineering or platform/SRE experience, with at least 3 years primarily in GCP.
• Demonstrated technical leadership: setting architecture direction, driving cross‑team decisions, and mentoring other engineers.
• Expert‑level Terraform skills: module design, state management at scale, refactoring real‑world (messy) infrastructure, and comfort importing orphaned resources.
• Deep production Kubernetes experience: GKE preferred, including workload identity, RBAC, ingress controllers (nginx), Helm, cluster upgrades and operations, and policy/admission controls.
• Solid grasp of serverless and PaaS patterns (Cloud Run, Cloud Functions, or equivalents) and a strong point of view…