Platform Engineer II

Job Purpose

As a key contributor within ICE’s innovative servicing technology division, the Platform Engineer II plays a pivotal role in designing, building, and maintaining the cloud infrastructure, CI/CD pipelines, and developer tooling that power the MSP DX product suite. This role requires deep expertise in AWS, Kubernetes, and infrastructure-as-code, with the ability to work independently on complex platform problems and collaborate effectively across domain development teams. You will contribute to the reliability, security, and scalability of our mortgage servicing platform, ensuring development teams can ship with confidence and speed.

The Platform Engineer II is responsible for the operation and continuous improvement of enterprise-grade cloud infrastructure and DevOps tooling within the MSP DX (IMT) System team. This role involves infrastructure engineering in an Agile SDLC environment, with a focus on platform-as-product thinking, developer self-service, and operational excellence. The successful candidate should also possess the versatility to support application development efforts when needed, bringing an understanding of the full-stack architecture (React micro-frontends and Java SpringBoot microservices) that runs on the platform they maintain.

Responsibilities

• Designs, provisions, and manages AWS cloud infrastructure including EKS clusters, Aurora RDS (PostgreSQL), S3, VPC networking, WAF, Lambda, SQS, and IAM policies
• Builds and maintains CI/CD pipelines in Azure DevOps, including YAML-based multi-stage pipeline templates, service connections, and pipeline libraries for domain development teams
• Manages Kubernetes workloads on EKS, including node group capacity planning, auto-scaling, namespace management, pod identity, and resource provisioning
• Implements and maintains GitOps workflows using ArgoCD and Argo Rollouts for progressive delivery across multiple environments
• Authors and maintains infrastructure-as-code using OpenTofu (Terraform) orchestrated through Spacelift, ensuring reproducible and auditable infrastructure changes
• Configures and operates Istio service mesh for mTLS, traffic management, and sidecar injection across Kubernetes workloads
• Implements observability solutions using OpenTelemetry, Prometheus, Splunk, and CloudWatch; configures alerting thresholds and integrations with PagerDuty and MS Teams
• Manages security scanning pipelines (Snyk, SonarQube) for code, container images, and infrastructure-as-code; drives vulnerability remediation within defined SLAs
• Maintains secrets management (sealed secrets), certificate lifecycle automation, and zero-trust networking controls
• Supports Apigee API gateway management including client proxies, KVM deployments, and client onboarding pipelines
• Develops and maintains Backstage developer portal content including service catalog entries, TechDocs, and custom plugins
• Writes and maintains operational playbooks, runbooks, and disaster recovery documentation for Aurora failover, EKS cluster operations, and incident response procedures
• Conducts SPIKEs and proof-of-concept investigations to evaluate new technologies and approaches before committing to implementation
• Supports domain development teams by providing self-service infrastructure guardrails that prevent misuse of shared platform components
• Contributes to application development efforts when needed, including React (TypeScript) micro-frontends and Java SpringBoot microservices running on the platform
• Remains current on industry standards in cloud-native infrastructure, DevOps practices, and platform engineering
• Performs additional related duties as assigned

Knowledge and Experience

• Bachelor’s Degree in Computer Science, Information Systems, or equivalent combination of education, training, or work experience
• Requires 4+ years of infrastructure, DevOps, or platform engineering work experience
• Hands-on experience with AWS services (EKS, RDS/Aurora, S3, VPC, IAM, CloudWatch, Lambda, SQS)
• Proficiency with Kubernetes cluster operations, including workload scheduling, scaling, and troubleshooting
• Experience with infrastructure-as-code tools (Terraform and/or OpenTofu)
• Experience building and maintaining CI/CD pipelines (Azure DevOps, GitHub Actions, or equivalent)

Preferred Knowledge and Experience

• Experience with GitOps tooling, particularly ArgoCD and Argo Rollouts for progressive delivery
• AI based working knowledge is preferred
• Experience with Istio service mesh configuration, mTLS, and traffic management
• Proficiency with IaC orchestration platforms such as Spacelift or Terraform Cloud
• Experience with container image building, registry management (Artifactory/JFrog), and image scanning
• Familiarity with OpenTelemetry, Prometheus, and Splunk for distributed tracing and observability
• Experience with security scanning tools (Snyk, SonarQube) and vulnerability management workflows
• Familiarity with Apigee API gateway management and client onboarding workflows
• Experience with Backstage developer portal or similar internal developer platforms
• Familiarity with Aurora PostgreSQL operations including global cluster disaster recovery and failover procedures
• Understanding of WAF configuration, certificate lifecycle management, and zero-trust networking concepts
• Experience with or understanding of React (TypeScript) micro-frontend architecture and Java SpringBoot microservices
• Familiarity with Playwright or similar automated testing frameworks integrated into CI/CD pipelines
• Proficiency working in an Agile/SAFe Software Development Life Cycle, including sprint-based quarterly planning
• Excellent analytical, decision-making, and problem-solving skills with demonstrated ability to drive complex infrastructure projects independently from investigation through production
• Strong documentation skills with experience writing operational playbooks, runbooks, and technical guides
• 4+ years of cloud infrastructure or platform engineering experience highly preferred