Senior Platform Operations Engineer, Infrastucture
Job Location:
Bellevue, WA - USA
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Department:
Job Summary
At Viome we are driven by a singular mission: to help people live a healthy disease-free life. This mission guides our actions fuels our passion and shapes the impact we aim to have in the world. Our core values - Be Bold Be Collaborative Be Frugal and Grow Continuously - underpin our approach to achieving this goal. If you are motivated by the idea of working in an environment that prioritizes bold innovation teamwork efficient resource use and continuous learning all towards promoting health and preventing disease we warmly invite you to apply. Join us in our journey to transform lives and create a healthier future for all.
We are looking for a Senior Platform Operations Engineer Infrastructure to take ownership of Viomes Azure-based service platform with a clear mandate: make it dramatically simpler through robust Unix-based systems engineering.
This is a consolidation role for a seasoned systems administrator. The work involves migrating a suite of abstracted services onto a deliberately stable target platform: Linux VMs systemd-supervised services Apache HAProxy and Nginx routing. You must possess strong Unix knowledge to operate and eventually transform the current stack safely. We are looking for a traditional operations background where success is measured by the removal of unnecessary layers and a genuine bias toward simplicity and host-level stability.
Simplification & Migration (core mandate)
Plan and execute zero-downtime migrations of services from AKS/containers to VM-based hosting: systemd unit authoring and service supervision (restart policy resource limits sandboxing) Apache HAProxy and/or nginx as reverse proxy and TLS terminator certificate automation.
Build and own the deployment scripts for the target platform: build test archive ship symlink-flip health-check rollback scripted in bash.
Preserve two non-negotiable invariants while simplifying everything else: immutable commit-traceable artifacts and scripted rollback.
Inventory and retire stale infrastructure: dormant deployments unused DNS records orphaned firewall rules unpinned image tags.
Maintain host hygiene for consolidated services: OS patching discipline runtime vendoring log rotation centralized log aggregation.
Familiarity with UptimeKuma Nagios or similar.
Operate and migrate data stores: PostgreSQL and/or MySQL.
Network and Infrastructure Operations
Operate and troubleshoot workloads during the transition focusing on the networking layer load balancing and core platform services.
Administer the hub network: Azure Firewall rules VPN gateways VNet peering public and private DNS zones and reason about a packets full path from public IP to service.
Support the existing release process and network and infrastructure operations until each service is migrated to the new VM-based standard.
Keep the observability stack healthy (OpenTelemetry ELK Grafana uptime and cost monitoring) and carry its essentials forward to the simplified platform.
Coordinate cross-cloud dependencies with AWS: DNS/edge routing queue consumers and egress IP allowlists.
L2 operations support; manage runbooks for external L0 L1 support.
External Integrations & Security
Own the external integrations most at risk during migration: e-commerce and subscription platforms messaging/notification providers and clinical/health-data partners webhook delivery signature verification idempotency and retry semantics.
Raise the security baseline as you consolidate: secrets management webhook authentication least-privilege network access and data-retention hygiene. Findings from an internal review are ready for you to remediate; the instinct to spot and close this class of issue and not create more is part of the job.
Required
7 years operating production Unix/Linux systems with deep knowledge of systemd process supervision; Apache HAProxy
Strong shell plus one scripting language (bash/Python/PHP) with a track record of building deploy and rollback tooling not just using it.
Demonstrated reverse-engineering ability: taking ownership of an undocumented production service and recovering its real dependencies and failure modes.
Message-queue literacy: Azure Service Bus SQS RabbitMQ or equivalent ordering lock/ack semantics dead-letter handling.
PostgreSQL operations: replicas/clones connection proxying network-restricted access production diagnostics.
Working proficiency with Kubernetes and cloud networking enough to operate private AKS clusters an Istio-style ingress layer and Azure firewall/DNS during the transition. We will onboard you on our specifics; deep specialization is not required.
Migration experience: consolidating or re-platforming production services with zero-downtime cutover and tested rollback.
A demonstrable record of reducing system surface area services consolidated infrastructure retired.
Clear written communication for runbooks migration plans and cross-functional coordination.
Strongly Preferred
Azure networking at landing-zone depth: hub-spoke VNets Azure Firewall Private Link/Private DNS VPN gateways.
Administration of external-dns cert-manager and policy engines such as Kyverno.
ELK and OpenTelemetry pipeline operations.
Webhook-heavy integration experience (e-commerce platforms such as Shopify subscription billing marketing/notification platforms or healthcare data exchanges).
Experience in a regulated or health-data environment: PHI handling audit trails least-privilege network design.
Terraform or equivalent IaC for cloud network and compute resources.
Enough AWS to manage cross-cloud seams (Route53 SQS egress allowlists).
AI minded; proficient with Claude or similar.
First 30 days: Trace and fix a production issue end-to-end (DNS firewall ingress service database) with guidance; produce a true-dependency inventory for one candidate service.
First 90 days: First service migrated off AKS to the VM/systemd platform with a passing rollback drill; firewall rules DNS zones and cluster add-ons documented and reproducible; stale-resource inventory complete and retirement underway.
First 6 months: Migration cadence established with multiple services consolidated; release and rollback drills routine on both platforms; measurable reduction in infrastructure footprint and spend; security-baseline remediations closed.
Become part of a team that values your health growth and contributions to the health industry.
We believe that transparency in pay is essential to promoting fairness and accountability in our workplace. Therefore we will provide candidates with the salary range for this position during the interview process. We also welcome and encourage candidates to discuss their compensation expectations with us during this process.
We are an equal opportunity employer and do not discriminate based on race color religion sex national origin age disability or any other legally protected status. We value diversity equity and inclusion and are committed to creating a workplace that reflects these values.
We may use artificial intelligence (AI) tools to support parts of the hiring process such as reviewing applications analyzing resumes or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed please contact us.
Required Experience:
Senior IC
About Company
Test your gut microbiome and measure your health down to the molecular level to get personalized nutrition recommendations and supplements made uniquely for you.
