Senior Platform Engineer

About LTi Technology SolutionsLTi Technology Solutions is a leading provider of asset finance and leasing software, purpose-built for the financial services industry. Our flagship platform, Aspire, powers the full asset finance lifecycle, from origination and credit decisioning through portfolio management, billing, accounting, and end-of-term; for banks, captives, independent finance companies, and specialty lenders across North America and internationally.

Backed by private equity and in active growth mode, LTi is making the most significant platform investment in the company's history: a ground-up re-platform of Aspire onto a modern .NET and React architecture running on Microsoft Azure. Our customers manage billions of dollars in lease and loan portfolios on Aspire, and the next generation of the product will carry that mission-critical workload forward on a foundation built for scale, extensibility, and speed of delivery.

This is a rare opportunity to join a profitable, established software company at an inflection point, where foundational engineering investment will directly shape product strategy, customer outcomes, and competitive differentiation.

Position SummaryLTi is hiring a Senior Platform Engineer to build and own the cloud platform beneath the next-generation Aspire product. This is a greenfield Azure build: subscription and landing zone design, infrastructure as code, CI/CD, identity and secrets, observability, and the security controls a mission-critical financial services platform requires.

Reporting to the VP of Engineering, the Senior Platform Engineer works as part of a small senior team. Platform decisions and architecture decisions get made together rather than handed across a wall. This is an individual contributor role without direct reports.

You will write the Bicep or Terraform, build the pipelines, wire the telemetry, and set the security posture. The operating principle is that the platform is a product and its customers are the engineers who ship on it, so automation, self-service, and documentation matter more than gatekeeping. The ideal candidate has built this foundation before and knows which controls pay for themselves and which only add friction.

Essential Functions & Duties Cloud Foundation & Infrastructure as Code Design and build the Azure foundation, including subscription and resource group topology, networking and private connectivity, environment tiers, and the isolation boundaries that support secure multi-tenancy

Express all infrastructure as versioned, reviewable code in Bicep or Terraform, with reusable modules, environment parameterization, drift detection, and no click-ops path to production

Stand up the managed Azure services the product depends on (App Service, Container Apps or AKS, Azure SQL, Service Bus, Key Vault, App Configuration, Storage, Redis, Front Door), making explicit managed-versus-self-run tradeoffs with the team Establish backup, restore, and disaster recovery for data and infrastructure, and prove the recovery path through scheduled exercises rather than documentationCI/CD & Developer Experience Build CI/CD pipelines in Azure Dev Ops or Git Hub Actions covering build, test, scanning, artifact management, environment promotion, progressive deployment, and automated rollback

Help define PR quality gates, branching and release strategy, and database migration practice that let the team ship continuously without ceremony

Partner on the local developer inner loop, including containerized dependencies, seed data, one-command environment setup, and fast test execution, so a new engineer can ship a meaningful change within their first week Provide ephemeral, on-demand environments so feature work, migration dry runs, and customer-facing demos do not queue behind a shared environment

Extend LTi's AI-assisted development practices into platform work, including agentic workflows for pipeline, infrastructure, and operational tooling, leveraging LTi's existing Claude Code environment

Security & Compliance Own the security posture of the platform, including identity and access through Microsoft Entra , workload identity, least-privilege RBAC, secrets management in Key Vault, and certificate lifecycle

Build security into the pipeline rather than after it, with SAST, dependency and container scanning, IaC scanning, secret detection, SBOM generation, and a defined triage and remediation path Implement software supply chain controls including artifact signing, provenance, base image management, and patch cadence

Produce the evidence trail that customers, auditors, and SOC 2 style examinations require, including access reviews, change history, and log retention, and treat audit readiness as a continuous state rather than an annual scramble

Reliability & Observability Establish observability from day one, including structured logging, distributed tracing, metrics, and dashboards in Application Insights and Azure Monitor, with tenant-aware correlation across HTTP,…