Senior Platform Engineer
Summary
A senior platform engineer owns and evolves the multi-cluster Kubernetes estate and AWS/Azure cloud infrastructure, and builds the internal developer platform — golden paths, Terraform modules, CI/CD pipelines, and observability tooling — so product engineers can ship safely and self-serve. It's a build role at a fintech serving NZ financial advisers, including on-call for platform services.
About the role
The Adviser Platform (TAP) is a growing fintech business, offering New Zealand financial advisers a market-leading management platform. TAP is part of the wider BNB Group, which builds and supports a number of financial services and technology businesses.
The Platform Engineer owns the foundation for which these sit on: the Kubernetes estate, the cloud infrastructure beneath it, and the tooling that enables our engineers to ship safely without needing to become infrastructure experts.
We're hiring a Senior Platform Engineer to own significant parts of that platform end to end. This is a build role, not a ticket-queue role. Our internal users are engineers, we treat the platform as a product they choose to adopt.
You'll spend your time roughly split between running and evolving our Kubernetes and cloud infrastructure, and building the self-service layer on top of it - golden paths, templates, pipelines, and internal tooling that make the correct way to do something also the easiest way.
What you'll do
Kubernetes and cloud infrastructure
Own and evolve our multi-cluster Kubernetes environment across [dev / staging / production] - upgrades, capacity, workload isolation, multi-tenancy, and cluster lifecycle
Design and maintain cloud infrastructure on AWS + Azure as code, including networking, IAM boundaries, and account or landing-zone structure
Build and maintain reusable Terraform (or Cloudformation / Bicep etc) modules that product teams consume, with sensible defaults and guardrails baked in
Improve resilience: autoscaling, failure isolation, DR posture, and the operational runbooks that go with them
Manage the platform's own operational health - cost, performance, and capacity - and bring visibility to the teams generating the load
Developer experience
Build and extend the internal developer platform: service scaffolding, self-service provisioning, and CLI tooling
Define golden paths for common needs - a new service, a new environment, a new datastore - so teams get a secure, observable, deployable starting point in minutes rather than weeks
Own CI/CD as a product: pipelines, build performance, artifact management, and progressive delivery patterns such as canary and blue/green
Make observability a default rather than an afterthought, with instrumentation, dashboards, and alerting available out of the box
Write the documentation, run the office hours, and gather the feedback that turns a platform into one people want to use
Working across the organisation
Partner with product engineering teams to understand where the friction actually is, and prioritise accordingly
Work with Engineering leaders to embed policy-as-code, secrets management, and supply chain controls into the paved road rather than bolting them on
Participate in the platform on-call rotation, lead incident response for platform-owned services, and drive blameless postmortems to real fixes
What we're looking for
Required
5+ years in platform, infrastructure, DevOps, or SRE roles, including meaningful production Kubernetes ownership (not just deploying to someone else's cluster)
Strong infrastructure-as-code practice with Terraform or equivalent, including module design for other teams to consume
Deep working knowledge of at least one major cloud provider - compute, networking, IAM, and managed services
Proficiency in at least one general-purpose language (.net, node or similar) - enough to build tooling, not only to script around it
Hands-on experience designing and operating CI/CD systems at scale
Solid grounding in observability practice: metrics, logs, traces, and alerting that people actually trust
Track record of operating production systems under real reliability expectations, including on-call
Clear written communication, and the judgement to work with internal customers rather than around them
Nice to have
Working in a regulated environment - [SOC 2 / ISO 27001 / PCI-DSS / HIPAA]
Experience with a large-scale migration: monolith decomposition, cloud migration, or a platform consolidation
We Offer
Competitive remuneration that reflects your experience
Hybrid model - 2 days per week in our Auckland/Christchurch office
A supportive and collaborative team environment
Apply Now!
If this sounds like you, apply now with your CV and cover letter. We’d love to hear from you.
Please note: While all applications are reviewed, only shortlisted candidates will be contacted. Applicants must be New Zealand Citizens or Permanent Residents.