Lead Platform Engineer / DevSecOps Lead
The Mission: Architecting the Portable AI Engine
At Hilbert’s AI, we shorten "months" to "minutes." But the "deployment tax" for enterprise customers is usually where speed goes to die. We are looking for a Lead Platform Engineer to solve this.
Your mission is to architect a deployment engine that allows Hilbert’s intelligence to live anywhere. Whether we are running our full stack on AWS/EKS, deploying our compute logic on top of a customer's Snowflake/BigQuery (Warehouse-Native), or building a custom bridge into a legacy enterprise data center, you are the one ensuring it is secure, performant, and "push-button."
The Hard Problem: The "Adapter" Challenge
We don't want to rebuild our infra for every customer. The challenge is building a generalized Infrastructure Adapter Layer that can plug into any known OLAP/OLTP solution, any IAM system, and any major cloud (AWS, GCP, Azure) without rewriting our core services.
Our Current Hurdles:
Generalizing the "Impossible": You will lead the effort to abstract our compute systems (K8s, Dagster, etc.) so they can connect to any environment. How do we make our agentic engine "just work" when the database is Snowflake on Azure and the IAM is custom?
The Warehouse-Native Shift: You’ll be designing how our compute layer interacts with customer-managed warehouses, ensuring high-performance data processing without the data ever leaving their perimeter.
Security as a Competitive Edge: We are currently finalizing our SOC2 compliance. You will be the technical lead for our security strategy, ensuring our architecture can pass the most rigorous Fortune 500 security audits across diverse infra components.
Who You Are (The Profile)
The "Universalist" Architect: You’ve worked across AWS, GCP, and Azure. You don't just "know" K8s; you know how to make it talk to disparate legacy systems and modern cloud-native warehouses.
Infrastructure-as-Product: You don’t just "fix the cloud"; you build tools that make world-class infrastructure a repeatable product.
The "Packager": You are a master of Helm, Terraform, and Docker. You have experience building multi-tenant or "portable" systems that handle non-standard networking and identity requirements.
Pragmatic Visionary: You still love to code, but you spend your time thinking about how to prevent the same infra bottleneck from happening twice.
What You’ll Own
Universal Deployment Engine: Architect the generalized solution for our three tracks: Managed Cloud, Warehouse-Native, and Custom Enterprise.
Security & Compliance Lead: Own the ironclad security posture of all deployments. You are the final authority on secret management, identity (IAM), and zero-trust architecture.
Internal Tooling Automation: Provision and automate the "glue" (Queues, Redis, Mongo, Secrets) so the SWE and AI teams are never blocked by infra.
Technical Mentorship: Lead the Platform/DevOps team, assigning tasks and setting the standard for global infrastructure health.
Bonus Points
Multi-Cloud/Hybrid Mastery: Deep experience with Azure and GCP alongside AWS (our own cloud service provider).
Enterprise Security Experience: You’ve personally defended architectures to enterprise CISO teams.
OLAP/OLTP Agnosticism: Experience connecting microservices to diverse DBs (Snowflake, BigQuery, ClickHouse, Redshift).
FinOps Mentality: Experience with cloud cost optimization for heavy GPU/ML workloads.
Location
San Francisco, or Istanbul
At least 5 hours overlap with PST timezone (7am-5pm)
Compensation
Competitive salary + equity package, commensurate with experience.
Performance-based bonuses tied to project milestones and customer impact.
The Hiring Journey
Short form → Intro Call → Technical working session → Team conversations → Offer
Fast, human, no bureaucracy.