Principal Software Engineer (Platform Engineering) in Bengaluru, Karnātaka at Saviynt

• Take ownership of key aspects of the IDP architectural lifecycle, from service catalog creation to automated, self-service environment provisioning.
• Construct and manage a centralized developer hub featuring TechDocs, software catalogs, and seamless integrations with GitLab, Jira, and cloud management consoles.
• Develop and implement "golden-path" templates to rapidly deploy new microservices equipped with Kubernetes configurations, observability tools, and automated security guardrails.
• Champion and evangelize the adoption of platform products across engineering units using developer feedback, usage analytics, and active outreach.

• Design and support cell-based deployment patterns and progressive ring-deployment strategies across multi-tenant and single-tenant customer fleets to isolate tenant workloads and limit blast radiuses.
• Automate continuous zero-downtime release deployments globally while providing platform abstractions that support multi-region SaaS deployments.

• Design and supervise multi-tenant Kubernetes environments on AWS EKS and Azure AKS, ensuring a unified cluster management experience for internal users.
• Produce modular Helm libraries and infrastructure compositions that mask underlying cloud complexities for product development teams.
• Enforce robust isolation and access control policies that reflect our multi-tenancy security framework at the namespace level.
• Maintain high availability through automated cluster lifecycle operations, including seamless scaling and blue/green deployment rotations.

• Drive the evolution of CI/CD-as-a-service by providing standardized pipeline templates via GitLab CI and ArgoCD / Argo Rollouts for effortless team consumption.
• Deploy GitOps methodologies to establish default rollback capabilities, continuous drift detection, and transparent audit trails across environment workflows.
• Incorporate supply-chain security measures, such as container signing and SBOM creation, directly into our core delivery infrastructure.

• Manage edge, ingress, and service-to-service communication infrastructure (API gateways, service mesh), incorporating built-in mTLS, rate limiting, distributed tracing context propagation, and circuit breaking as platform primitives.
• Configure global load balancing and edge protection (CDN/WAF) as standardized defaults across developer paths.

• Curate a centralized Terraform / OpenTofu registry for multi-cloud resources that adheres to stringent FinOps and security standards by default.
• Enable self-service infrastructure provisioning via Kubernetes-native workflows by implementing advanced provider compositions (Crossplane).
• Engineer custom Go-based CLI tools and operators to automate critical platform tasks, including cost tracking and credential rotation.

• Launch a unified observability suite using Grafana, Prometheus, and OpenTelemetry to provide teams with essential self-service performance metrics.
• Establish logging and distributed tracing as foundational platform primitives, integrated automatically through standard developer paths.
• Create detailed FinOps reporting mechanisms and real-time cost anomaly guardrails to enable precise cloud expenditure attribution for teams and tenants.
• Integrate chaos testing and automated disaster recovery (DR) failover verification to meet strict enterprise SaaS uptime requirements.

• Integrate zero-trust principles and workload identity into the platform fabric using short-lived credentials and cloud-native network policies.
• Utilize policy-as-code (OPA, Gatekeeper, Kyverno) and admission controllers to enforce security standards at the cluster level without impeding development velocity.
• Streamline secrets management by providing a secure, automated, self-service platform capability.
• Build compliance-as-code into CI/CD pipelines to automatically generate audit trails and SBOM documentation required for SOC 2, ISO 27001, and FedRAMP certifications.

• Manage shared messaging infrastructure systems like Kafka and AWS MSK, delivering topic provisioning and schema management as a robust platform service.
• Construct reusable patterns and scaffold templates that allow product teams to easily implement event-driven architectures from within the IDP.

Security & Compliance
This role requires adherence to Saviynt’s information security and privacy policies and procedures, including annual security training.

Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.