Skip to content

Open nowPosted 3 days ago

Principal Software Engineer (Platform/DevOps Engineering)

Saviynt64 open roles

Where
Bengaluru, India
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Software Engineer (Platform/DevOps Engineering)Saviynt · Bengaluru, India
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Saviynt's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Saviynt postings stay open a median of 10 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 3 days ago

Saviynt median: 10 days open

The posting

Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit www.saviynt.com.

This is a Principal position within the Platform Engineering organization. Our core mission is to build the foundational, core common layer across Saviynt engineering, consolidating and centralizing scattered platform tools, workflows, and infrastructure primitives. Wearing a dedicated Platform Engineering hat, this role will proactively find opportunities to eliminate operational friction and standardize capabilities into a seamless, unified developer experience.

A primary focus of this role is designing, developing, implementing, rolling out, and supporting our Internal Developer Platform (IDP), fitting all foundational tooling into a cohesive, self-service ecosystem. You will build and implement "golden paths" for developers, creating self-serve platforms embedded with essential security and operational guardrails. Crucially, you will act as a partner across engineering—working closely with developers, Embedded SREs (E-SREs), and Central SRE teams—while actively evangelizing platform products to accelerate adoption throughout the organization.

WHAT YOU BRING

  • 12+ Years of experience across the Software Development lifecycle with a focus on platform engineering, DevOps, and cloud-native infrastructure.
  • Proven IDP build experience: you have shipped or significantly contributed to a Backstage or Port portal (or equivalent) used in production.
  • Deep Kubernetes expertise across EKS and AKS, including multi-tenant cluster design, Helm, Kustomize, and Crossplane.
  • Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring/canary deployment strategies.
  • Strong proficiency in Go (Golang) or Python for building production-grade CLIs, custom operators, or platform backends.
  • GitLab CI + ArgoCD / Argo Rollouts pipeline implementation experience—building CI/CD-as-a-service for engineering teams.
  • Terraform / OpenTofu module authoring at scale—module registry design, state management, and refactoring large IaC codebases.
  • Background in developing Backstage plugins or contributing to open-source developer platform ecosystems.
  • Practical application of workload identity, SPIFFE/IRSA, and cloud-native zero-trust network architectures.
  • Implementation of OPA/Gatekeeper/Kyverno for policy-as-code within production-grade Kubernetes clusters.
  • Proficiency in FinOps methodologies and tools such as Kubecost or cloud cost exposure APIs.
  • Experience managing Kafka or AWS MSK as a multi-tenant platform capability.
  • Proven platform-first mindset with a history of centralizing scattered tooling into core foundation layers, evangelizing platform adoption, and collaborating effectively across developers, Embedded SREs, and Central SREs.
  • Professional exposure to identity security frameworks, SaaS delivery, and high-compliance operational environments (SOC 2, ISO 27001, FedRAMP).

WHAT YOU WILL BE DOING

  • Take ownership of key aspects of the IDP architectural lifecycle, from service catalog creation to automated, self-service environment provisioning.
  • Construct and manage a centralized developer hub featuring TechDocs, software catalogs, and seamless integrations with GitLab, Jira, and cloud management consoles.
  • Develop and implement "golden-path" templates to rapidly deploy new microservices equipped with Kubernetes configurations, observability tools, and automated security guardrails.
  • Champion and evangelize the adoption of platform products across engineering units using developer feedback, usage analytics, and active outreach.
  • Design and support cell-based deployment patterns and progressive ring-deployment strategies across multi-tenant and single-tenant customer fleets to isolate tenant workloads and limit blast radiuses.
  • Automate continuous zero-downtime release deployments globally while providing platform abstractions that support multi-region SaaS deployments.
  • Design and supervise multi-tenant Kubernetes environments on AWS EKS and Azure AKS, ensuring a unified cluster management experience for internal users.
  • Produce modular Helm libraries and infrastructure compositions that mask underlying cloud complexities for product development teams.
  • Enforce robust isolation and access control policies that reflect our multi-tenancy security framework at the namespace level.
  • Maintain high availability through automated cluster lifecycle operations, including seamless scaling and blue/green deployment rotations.
  • Drive the evolution of CI/CD-as-a-service by providing standardized pipeline templates via GitLab CI and ArgoCD / Argo Rollouts for effortless team consumption.
  • Deploy GitOps methodologies to establish default rollback capabilities, continuous drift detection, and transparent audit trails across environment workflows.
  • Incorporate supply-chain security measures, such as container signing and SBOM creation, directly into our core delivery infrastructure.
  • Manage edge, ingress, and service-to-service communication infrastructure (API gateways, service mesh), incorporating built-in mTLS, rate limiting, distributed tracing context propagation, and circuit breaking as platform primitives.
  • Configure global load balancing and edge protection (CDN/WAF) as standardized defaults across developer paths.
  • Curate a centralized Terraform / OpenTofu registry for multi-cloud resources that adheres to stringent FinOps and security standards by default.
  • Enable self-service infrastructure provisioning via Kubernetes-native workflows by implementing advanced provider compositions (Crossplane).
  • Engineer custom Go-based CLI tools and operators to automate critical platform tasks, including cost tracking and credential rotation.
  • Launch a unified observability suite using Grafana, Prometheus, and OpenTelemetry to provide teams with essential self-service performance metrics.
  • Establish logging and distributed tracing as foundational platform primitives, integrated automatically through standard developer paths.
  • Create detailed FinOps reporting mechanisms and real-time cost anomaly guardrails to enable precise cloud expenditure attribution for teams and tenants.
  • Integrate chaos testing and automated disaster recovery (DR) failover verification to meet strict enterprise SaaS uptime requirements.
  • Integrate zero-trust principles and workload identity into the platform fabric using short-lived credentials and cloud-native network policies.
  • Utilize policy-as-code (OPA, Gatekeeper, Kyverno) and admission controllers to enforce security standards at the cluster level without impeding development velocity.
  • Streamline secrets management by providing a secure, automated, self-service platform capability.
  • Build compliance-as-code into CI/CD pipelines to automatically generate audit trails and SBOM documentation required for SOC 2, ISO 27001, and FedRAMP certifications.
  • Manage shared messaging infrastructure systems like Kafka and AWS MSK, delivering topic provisioning and schema management as a robust platform service.
  • Construct reusable patterns and scaffold templates that allow product teams to easily implement event-driven architectures from within the IDP.

Saviynt is an amazing place to work. We are a high-growth, Platform as a Service company focused on Identity Authority to power and protect the world at work. You will experience tremendous growth and learning opportunities through challenging yet rewarding work which directly impacts our customers, all within a welcoming and positive work environment. If you're resilient and enjoy working in a dynamic environment you belong with us!

Security & Compliance This role requires adherence to Saviynt’s information security and privacy policies and procedures, including annual security training.

Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Saviynt's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Saviynt's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Saviynt's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.