Platform Engineer
About the role
This is a senior-level Platform Engineer position based in Colombo with a hybrid work arrangement. The role involves full ownership of the company's cloud platform and security, including designing and running the cloud environment, implementing scalability solutions, managing security tooling, and ensuring robust CI/CD and infrastructure as code practices. The engineer will also be responsible for observability, incident response, and coaching other engineers on security and scalability best practices. The ideal candidate will have significant experience in platform, DevOps, SRE, or backend roles, particularly with production systems on major cloud providers, and will possess strong skills in infrastructure-as-code, CI/CD, containers, backend code, and security.
Must have
- 4+ years in platform, DevOps, SRE or backend roles, with at least 3 years running production systems on a major cloud provider (Google Cloud preferred).
- Strong infrastructure-as-code and CI/CD skills (for example Terraform and GitHub Actions).
- Containers in production, including image hardening.
- Able to read and change Node.js/TypeScript backend code.
- Relational database performance work: query plans, indexing, connection pooling and replicas.
- Hands-on security work: secrets management, least-privilege access, code, dependency and container scanning, and the OWASP Top 10, especially authorization flaws.
- Load testing and capacity planning, with real numbers to show for it.
- Clear written communication. You’ll write runbooks and explain risk to non-engineers.
- BSc in Computer Science, IT or a related field, or an equivalent professional qualification.
Nice to have
- Web and API security testing tools, including writing custom scanning rules.
- WAF, rate-limiting and bot-protection configuration.
- Message queues and caching at scale.
- Mobile app security, or securing payment integrations.
- Certifications such as Google Professional Cloud Security Engineer, Professional Cloud Architect or CKS.
- Startup experience in consumer platforms or e-commerce.
Technologies
- API Security
- Authentication
- CI/CD
- Cloud Security
- DevOps
- E-commerce
- GCP
- GitHub
- GitHub Actions
- Infrastructure as Code
- Node.js
- Observability
- OWASP
- Performance Testing
- Secrets Management
- Terraform
- TypeScript
- WAF
Highlights
Applicants should send their CV and a short note to hr@mo.lk, describing a scaling or security problem they solved and its impact. The company shares full environment details with shortlisted candidates at interview. The position reports to the CEO and Engineering Lead. A BSc in Computer Science, IT, or a related field (or equivalent professional qualification) is required.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka