Senior Platform Engineer
Shape Security
Software Engineering
Seattle, WA, USA
At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
About F5
At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
Position Summary
We are looking for multiple Plarform/Cloud Engineers to build and operate a secure, scalable cloud “landing zone” and platform foundations. You’ll define and automate governance using policy-as-code, create reusable infrastructure-as-code (IaC) libraries, and enable teams through CI/CD pipelines and GitOps practices. You should bring deep hands-on expertise in at least one major cloud (Azure or AWS preferred), with additional experience in GCP, OCI, or IBM Cloud as a plus. We are looking for engineers with 5-10 years of experience in these areas.
Key Responsibilities
Design, build, and operate cloud landing zones (multi-account/subscription, org structure, network, identity, logging, security baselines).
Implement governance and guardrails using policy-as-code (e.g., Azure Policy, AWS Organizations/SCPs, OPA/Conftest), including exception handling and auditability.
Deliver an infrastructure platform as a product to the internal development community.
Develop reusable IaC modules/libraries (Terraform primary; Bicep/ARM and CloudFormation also valued) and promote standard patterns for teams.
Build and maintain CI/CD pipelines for infrastructure, OS Images, containers, and platform components using GitOps workflows (PR-based changes, automated validation, progressive delivery).
Standardize environments (dev/test/prod) with consistent controls, tagging/metadata, and cost management guardrails.
Embed security and compliance into build/deploy: secret handling, encryption, IAM least privilege, vulnerability scanning, and evidence generation.
Observability and SRE practices: implement monitoring/alerting and dashboards, support incident response, and help define/track SLIs/SLOs for platform services.
Collaborate in an agile delivery model; participate in planning, refinement, and execution (SAFe experience is a bonus).
Required Qualifications
Deep hands-on experience engineering cloud infrastructure on one or more of Azure, AWS, and GCP (architecture + implementation).
Strong proficiency with Infrastructure as Code (Terraform primary; Bicep/ARM and CloudFormation).
Proven experience implementing landing zones / foundational cloud platforms (identity, network, shared services, governance).
Experience with policy-as-code and automated compliance (e.g., Azure Policy, AWS Config + SCPs, OPA/Conftest).
CI/CD expertise for infrastructure: pipeline design, testing/validation, approvals, environment promotion, drift detection.
Working knowledge of configuration management/automation in current-state enterprise environments (e.g., Ansible and Puppet).
Strong understanding of IAM, network security, encryption, key management, and secure-by-default patterns.
Comfortable with Git-based workflows (PR reviews, branching strategies, versioning, release management).
Scripting/programming ability (e.g., Python, Bash, PowerShell, Go) to build automation and tooling.
Preferred Qualifications (Nice to Have)
Strong Network Engineering background including cloud and hybrid-cloud connectivity, network security policy automation, and cloud native network architectures.
Experience working in hybrid environments to deliver platform automation solutions in the Data Center.
Experience with additional clouds: GCP, OCI, IBM Cloud.
Familiarity with security and control frameworks such as NIST CSF, NIST 800-171, SOX, SOC 2, and ISO 27002.
Kubernetes/platform experience (AKS/EKS/GKE), service mesh, or container platform operations.
Experience with platform engineering concepts: developer portals/catalogs, golden paths, internal products.
Familiarity with observability stacks: native CSP tooling, Datadog, Splunk, LogicMonitor
SAFe or other structured agile delivery framework experience (PI planning, ARTs, epics/features).
The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.
The annual base pay for this position is: $161,600.00 - $242,400.00F5 maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, geographic locations, and market conditions, as well as to reflect F5’s differing products, industries, and lines of business. The pay range referenced is as of the time of the job posting and is subject to change.
You may also be offered incentive compensation, bonus, restricted stock units, and benefits. More details about F5’s benefits can be found at the following link: https://www.f5.com/company/careers/benefits. F5 reserves the right to change or terminate any benefit plan without notice.
Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com).
Equal Employment Opportunity
It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.
