• Own and evolve our AWS infrastructure across compute, networking, storage, and managed services • Design and maintain infrastructure that supports high availability, predictable performance, and financial correctness • Lead platform-level architectural decisions, including service migrations and runtime changes (e.g., Redis → Valkey, EKS → ECS/Fargate) • Ensure infrastructure choices align with reliability, cost, and operational simplicity—not just trend adoption • Design and maintain deployment pipelines that are safe, repeatable, and observable • Own system reliability through capacity planning, failure modeling, and controlled change management • Lead incident response and root-cause analysis for infrastructure-level failures • Participate in on-call rotations and continuously improve operational ergonomics • Build and maintain strong observability across infrastructure and services (metrics, logs, tracing, alerting) • Ensure secure configuration of AWS resources, IAM policies, secrets management, and network boundaries • Proactively identify infrastructure risks related to scale, cost, or security and address them before they become incidents • Partner closely with application engineers to ensure platform constraints and capabilities are well understood • Drive infrastructure changes through hands-on implementation • Establish standards and best practices for infrastructure, deployment, and operations as the team grows • Mentor other platform engineers and help raise the overall operational maturity of the organization

• Design, build, and evolve cloud infrastructure using modern Infrastructure-as-Code tools (Terraform, Pulumi) • Architect and manage core cloud services, including networking, identity/access control, account/subscription hierarchy, and resource governance • Define and implement cloud-based disaster recovery strategies that meet enterprise RTO/RPO requirements • Drive standards for high availability, security, scalability, and cost-efficiency across our cloud environments (Azure and/or AWS) • Lead initiatives that improve developer experience, platform reliability, and operational excellence • Build internal tooling and automation to simplify cloud adoption and resource provisioning for engineering teams • Serve as a technical leader and mentor, guiding engineers across platform, SRE, and product teams • Partner with security, compliance, and operations teams to enforce cloud architecture policies and guardrails • Represent the platform team in architecture reviews, planning discussions, and cross-functional programs

• Set the platform vision and lead execution across shared services, infrastructure, and tooling while building and mentoring high-performing platform, SRE, and DevOps teams. • Own the design and operation of secure, scalable AWS and Azure environments, establishing standards for reliability, observability, resilience, and incident management. • Create paved-road developer platforms, CI/CD systems, and automation that improve velocity, quality, and consistency across teams. • Champion operational rigor through SLOs, reviews, and cost-aware engineering practices, ensuring efficient, sustainable growth.

• Ship end-to-end product increments (spec → build → release → operate) • Use the right tool for the job; our current default is a modern TypeScript + React full-stack (server rendering, RSC-style patterns, streaming), and we stay flexible as we learn • Build AI features with disciplined patterns: tool calling, structured outputs, grounding, and streaming UI • Partner with product, design, and SMEs to define outcomes, validate assumptions, and iterate quickly • Turn lessons from shipped features into reusable "paved road" primitives (eval harnesses, guardrails, shared tool/prompt patterns) • Build evaluation + release loops (tests, golden datasets, regressions, targeted human review; LLM grading where it fits) • Own reliability, performance, and cost; instrument with OpenTelemetry and define SLOs for key flows • Enforce security and privacy by design (safe tool access, authZ, auditability, prompt-injection mitigations, PII handling)