Platform Engineer

Platform Engineer

Location:

Chicago, US New York, US

As a world leading provider of integrated solutions for the alternative investment industry, Alter Domus is proud to be home to 90% of the top 30 asset managers in the private markets, and more than 6,000 professionals across 24 jurisdictions. With a deep understanding of what it takes to succeed in alternatives, we believe in being different in what we do, how we work, and most importantly in how we enable and develop our people.

Invest yourself in the alternative, and join an organization where you progress on merit, where you can speak openly with whoever you are speaking to, and where you will be supported along whichever path you choose to take. Find out more about life at Alter Domus at

You will own the physical infrastructure and delivery layer for a new commercial data platform serving institutional clients. This means cloud platform architecture, compute and storage provisioning, API and data delivery infrastructure, security and access controls, multi-tenancy design, and operational reliability. You are responsible for everything that makes the data accessible, secure, performant, and commercially deliverable — the bridge between internal data pipelines and external client consumption.

You sit within the Technology organization but are fully dedicated to this initiative.

• Platform Architecture:
  Design and maintain the end-to-end technical infrastructure — compute layer, storage layer, orchestration services, caching, and networking. Ensure the platform supports multiple product streams with distinct performance profiles (real-time APIs, bulk data delivery, embedded analytics)
• API & Delivery Infrastructure:
  Build and operate the data delivery layer for external clients — REST APIs for real-time position data, bulk file delivery (SFTP), cloud data sharing (e.g., Snowflake Data Sharing), and webhook-based event notifications. Own API versioning, rate limiting, SLA monitoring, and client onboarding
• Security & Access Controls:
  Design and implement role-based (RBAC) and attribute-based (ABAC) access controls to ensure strict client data isolation. Clients accessing their own operational data must never see other clients' data; market-facing products must expose only anonymized/aggregated outputs. Implement encryption at rest and in transit, key management, and secrets handling
• Multi-Tenancy & Isolation:
  Architect the platform to support thousands of external users across multiple client organizations, with logical (or physical) data isolation, per-tenant configuration, and audit logging
• Reliability & Observability:
  Build monitoring, alerting, and incident response infrastructure. Define and maintain SLAs for uptime, latency, and data freshness. Implement health checks, circuit breakers, and graceful degradation patterns
• Scalability:
  Ensure the platform scales from a small number of pilot clients to 2,000+ users without architectural rework. Design for horizontal scaling, auto-provisioning, and cost optimization
• Compliance & Governance:
  Support SOC 2 compliance, data residency requirements, and security audit processes. Collaborate with Legal on data-use provisions and technical consent enforcement
• Collaboration:
  
  Work with the Data Engineer (who builds pipelines that run on your platform), the Data Architect (who defines the logical model you physically instantiate), and the Quantitative Director (whose outputs you deliver to clients)

6+ years in platform engineering, infrastructure engineering, or Dev Ops/SRE — ideally supporting external-facing data products

Expert knowledge of cloud platforms (AWS, Azure, or GCP) — infrastructure-as-code (Terraform, or Cloud Formation), containerization (Docker, Kubernetes), and serverless patterns

Strong API engineering experience — building, operating, and scaling REST APIs for external commercial consumption. Experience with API gateways, OAuth2/JWT authentication, rate limiting, and versioning

Experience designing multi-tenant architectures with strict data isolation and per-client access control

Proficiency in at least one systems programming or scripting…