Platform Engineer

About the role.

We’re hiring a NYC based Platform Engineer to own the foundation that Advocate’s product and people build on.

Advocate runs on a growing surface of cloud infrastructure, integrations, internal tooling, and the security and compliance controls a regulated insurance data business demands. In this role, you will (1) own our infrastructure, security, and compliance posture as code, versioned and shipped through automated pipelines, (2) build and maintain the integrations and internal tooling that keep the platform and the company running, and (3) build the automation, including AI agents, that lets a lean team move far faster than its size suggests.

You will work directly with the platform lead as a technical right hand on infrastructure, security, and automation decisions.

This is not a reactive role. It is a forward-looking ownership position responsible for making sure our foundation scales with our ambition, and that everyone else ships faster because of it.

What you'll do

• Own our cloud infrastructure end-to-end, defining it as code (Terraform or similar) and shipping every change through automated, reviewable CI/CD pipelines.
• Codify security and compliance controls, from access management and secrets to logging and audit evidence, so our posture is continuously enforced rather than manually checked.
• Run our vulnerability management program across code, dependencies, containers, cloud resources, and devices, from scanning and triage to remediation within defined SLAs, with routine fixes increasingly handled by automation.
• Build and maintain in-platform and out-of-platform integrations, from customer-facing data connections to the third-party systems the company runs on.
• Design and deploy AI agents and automation that take on repetitive infrastructure, security, and operations work, with the guardrails, evals, and human review needed to trust them in production.
• Own the IT asset lifecycle and tooling, including device provisioning, identity, SaaS access, and offboarding, automated wherever possible.
• Build internal tooling that shortens the path from idea to production for the whole engineering team.

What success looks like

• 30 days: You understand our infrastructure, our security and compliance posture, and our integration landscape, including what still lives outside of code. You're shipping meaningful changes through our pipelines.
• 90 days: You're independently owning areas end-to-end, bringing manually managed infrastructure and configuration into code, and you've shipped at least one agent or automation that removes recurring work from the team.
• 6 months: You've become the person who sees gaps before they slow us down, whether that's an unmanaged resource, an unpatched vulnerability, a control that should be enforced automatically, or a workflow that's ready to hand to an agent. Most routine platform changes now start as reviewable pull requests.

What we're looking for

• 3-6 years of experience in platform, infrastructure, DevOps, or SRE roles supporting production systems
• Strong hands-on experience with infrastructure as code (Terraform or equivalent) and a GitOps mindset: if it isn't in the repo, it doesn't exist
• Experience building CI/CD pipelines with automated testing, policy checks, and human review gates
• Solid grasp of a major cloud provider (AWS, GCP, or Azure), networking, identity and access management, and secrets management
• Advanced use of AI tools (Claude, Agents, etc), including building agent workflows, tool integrations (e.g. MCP), and evaluating their output
• Security-first mindset, hands-on vulnerability management experience (scanning, prioritization, remediation), and practical experience with compliance frameworks such as SOC 2 or ISO 27001
• Proficiency in at least one general-purpose language (Python, TypeScript, or Go) for automation and tooling
• Ability to work with high autonomy in a small team

Nice to have

• Exposure to insurance, financial services, or any regulated/data-dense industry
• Experience designing guardrails, evals, or policy-as-code (e.g. OPA) for automated or AI-driven changes
• Experience with compliance automation platforms (e.g. Vanta, Drata) and producing audit evidence
• Experience running IT and identity at a growing company: MDM, SSO/SCIM, and device and SaaS lifecycle
• Prior experience at an early-stage company or on a small team where you wore multiple hats
• Interest in agentic engineering and in rethinking how software teams build and operate products

What we offer

• Salary Range: $140,000 – $200,000 USD
• Equity / Stock Options - granted in addition to base salary
• WFH Stipend
• Health & wellness: standard health benefits
• Learning & development budget + team events
• Mentorship from industry leaders (ex-Goldman Sachs, Shopify, Productboard, and more)