Cloud | Platform Engineer

ENGINEERING CAREERS Cloud | Platform Engineer

UDX is looking for a senior platform engineer to own the infrastructure that runs our clients’ workloads: container images, infrastructure-as-code modules, Git Hub Actions workflows and Kubernetes clusters across three clouds.

You will take over a working platform, not build one. Rabbit already provisions and runs production for a dozen clients. Your job is to keep it current, extend it when a client needs something new, and make every change land as a pull request that another engineer could read and revert.

The work is concrete: a base image needs a patch and every tenant that runs on it needs a redeploy; a client needs a new managed service wired into their environment; a monitoring threshold is wrong across eighteen repositories; a migration that was started needs to be finished and rolled out. You will be handed a Git Hub issue with enough context to start, and you are expected to leave commits, comments and a paper trail behind.

This is a contract role, remote, with overlap required for US Eastern working hours. You will hold administrative access to client infrastructure, so we hire slowly and check references.

UDX is a service-disabled veteran-owned small business (SDVOSB) founded in 2011 and headquartered in Durham, North Carolina, with a distributed engineering team. We build and run cloud infrastructure and web platforms for organizations that cannot afford downtime: cultural institutions, live event promoters, consumer brands, real estate and professional certification bodies. Our delivery platform, Rabbit, turns a Git repository into a fully provisioned, monitored, secured environment on Kubernetes across GCP, AWS and Azure.

We also ship Kubernetes operators to the Azure Marketplace.

Every hour we work maps to a Git Hub issue. Every change is a pull request. Every day of work leaves a comment. That is how we bill, how we prove work to clients, and how we know what happened six months later.

• Own the worker image family (PHP, Node.js, Word Press runtime, SFTP gateway): base image updates, security patches, release tagging, and the automated redeploy of every tenant running on them.
• Maintain and extend the Rabbit automation modules (Open Tofu/Terraform on GCP, AWS and Azure) and the reusable Git Hub Actions workflows that every client repository consumes.
• Finish and roll out platform migrations across tenant repositories, one pull request per repository, with the rollout tracked in a single issue.
• Run cloud security operations for clients:
  Security Command Center and Guard Duty findings, IAM and workload identity, secrets inventory, monthly OS patching, backup and restore tests.
• Keep the dependency and image update bots honest: verify what they change, catch what they miss, and never let a green dashboard stand in for a merged pull request.
• Diagnose production incidents on GKE and AKS: pod scheduling, cost spikes, DNS and certificate expiry, cache invalidation, database connectivity.
• Write the operational record as you go: an issue comment per working day, a PR per change, a runbook per recurring task.

• Five or more years running production Kubernetes, with at least two years on GKE, EKS or AKS in a multi-tenant or multi-client setting.
• Fluency in Open Tofu or Terraform modules, Git Hub Actions (reusable workflows, composite actions, OIDC federation) and Docker image supply chain.
• Working knowledge of GCP and AWS IAM, workload identity federation, and cloud-native secret management. Azure is a plus.
• Enough PHP and Node.js runtime knowledge to debug why a Word Press or Next.js container is unhealthy.
• A habit of leaving evidence: you link issues in commits, comment before you close, and can explain any change from the…