Platform Engineer

Your opportunity for impact:

NetDocuments is seeking an in-office LLM Platform Engineer who will replace our gateway with a real platform: a gateway that every internal model request flows through, with identity, budgets, routing, and audit built in.

You will own that gateway end to end — building it, running it, and being the person paged when it breaks. You will make AI spend attributable to the team and use case that generated it, and you will own the path a business team follows to get a new AI use case approved and provisioned. Our Corporate AI function owns AI strategy; you own the platform it depends on.

To be clear about where this sits: this is an internal business systems role. You will build and run the platform NetDocuments employees use to do their own work, not the customer facing product. It lives in Corporate IT Operations alongside identity, endpoint, and collaboration services, and it reports to the Senior Manager, Corporate IT Operations.

What your contributions will be:

AI Gateway Operations

Deploy, configure, and operate the AI gateway that fronts internal large language model traffic, including the provider connections behind it

Integrate the gateway with Microsoft Entra ID for single sign on and role based access, and manage virtual API keys through scoping, rotation, and revocation

Own gateway availability, latency, and capacity, including upgrades and change management

Implement request path controls such as redaction, data loss prevention, and audit logging to meet Security, Compliance, and FedRAMP requirements

Model Routing and Cost Control

Implement and tune routing policy so requests are served by the appropriate model by default rather than by user selection

Build spend attribution by team, application, use case, and API key across both seat based and API based consumption

Configure and enforce budgets, rate limits, and hard stops, replacing manually administered per person spend caps

Find and reduce avoidable consumption, including retry loops, oversized context, and wrong model defaults, and supply the usage data behind vendor and renewal decisions

Use Case Intake and Provisioning

Run the intake path that takes a team from an AI use case request to provisioned, governed access

Coordinate review with Security, Compliance, and Legal, and provision approved use cases with the right access, budget, and loggin

Maintain the register of approved use cases and drive down the time from request to access

Incident Response and Reliability

Act as first responder for gateway outages, provider degradation, authentication failures, rate limit events, and runaway spend

Maintain runbooks and escalation paths, and cross train the Corporate IT Operations team so gateway support is not single threaded

Run post incident review and drive corrective actions to closure

Reporting and Documentation

Provide a weekly AI platform update covering spend, adoption, gateway health, incidents, and risks

Produce monthly attribution and utilization reporting for Finance and leadership, and supply the underlying data to Business Intelligence for adoption dashboards

Document gateway configuration, provider connections, routing policy, and operational procedures

Other duties as assigned

Required experience and education:

Platform Operations & Reliability Engineering — 4-5 years operating a cloud production service that other teams depend on, including on call ownership and the habit of fixing causes rather than symptoms. AWS or Azure

API Gateway, Reverse Proxy & Service Mesh Engineering — hands on production experience with Envoy, Kong, LiteLLM, Portkey, NGINX, or similar, at the configuration and code level rather than through a vendor console

Authentication & Authorization Engineering — OIDC, OAuth 2.0, SAML, role-based access control design, and credential lifecycle management for both human and service identities

Backend & Systems Engineering — Python or Go at middleware level, plus infrastructure as code and containerized deployment

Observability & Instrumentation — metrics, structured logging, and distributed tracing, with the instinct to produce telemetry rather than only consume dashboards. Attribution is an instrumentation problem before it is a finance problem

Usage-Based Cost Attribution & Chargeback — you have made consumption spend attributable, forecastable, and enforceable. This role is measured substantially on financial outcomes

Process Design, Technical Documentation & Stakeholder Reporting — you automate coordination workflows rather than personally chasing them, and you write clearly for readers who are not engineers

Bachelor's degree — Computer Science, Engineering, or a related field, or equivalent practical experience

Ideally you will have:

Microsoft Entra ID specifically, as it is our identity provider; large language model API behavior including token accounting, streaming, and context limits; MCP and tool calling architectures; data loss prevention or data classification on a request path; SOC 2, ISO 27001, or FedRAMP environments; and SQL or Snowflake.

What You’ll Love About NetDocuments

The People!

90% healthcare premiums company covered

HSA company contribution

401K match at 4% with immediate vesting

Flexible PTO (typically 3 to 4 weeks a year)

10 paid holidays

Monthly contributions for life activities & wellness

Access to LinkedIn learning with monthly dedicated time to explore

Compensation Transparency

The compensation range for this position is:  $110,000 - $120,000

The posted cash compensation for this position includes on target earnings, base salary and variable if applicable. Some roles may qualify for overtime pay. Individual compensation packages are determined based on various factors specific to each candidate, such as career level, skills, experience, geographic location, qualifications, and other job-related considerations

#LI-ONSITEEqual Opportunity