Principal Platform Engineer - Financial Cloud
About This Role
We are building the next-generation Financial Cloud platform, enabling Bybit to deploy and operate regulated financial services across 50+ global sites, each subject to different compliance requirements (EU MiCA, APAC licenses, etc.). Each site is a unique combination of business modules, infrastructure configurations, and compliance controls — managed as versioned, reproducible units.
As a Senior DevOps Engineer for the Financial Cloud Toolchain, you will drive the end-to-end developer experience and deployment automation for this multi-site platform. You will design and build systems that ensure every deployment is reproducible, every dependency is traceable, and every site automatically and safely converges to its declared state.
What You'll Do
Build & Release Engineering (40%)
Design and implement hermetic, deterministic build pipelines that produce reproducible artifacts for all platform modules
Build and maintain a content-addressable artifact registry with full provenance capabilities (SLSA L3+)
Implement dependency graph analysis tooling to compute build/deploy blast radius for every change
Own the Version Set model: define, validate, and promote locked module-version combinations ("Manifests") through environment stages
Enforce semantic versioning governance and automated compatibility verification across 50+ independently versioned modules
Multi-Site Deployment Orchestration (30%)
Design a GitOps-based deployment engine that reconciles each site to its target Manifest state
Build progressive rollout capabilities: canary → regional → global, with automatic rollback on SLO violations
Implement site-aware configuration rendering: given a site's Manifest + region + compliance tier, produce the complete deployable state
Create an automated upgrade plan generator: compute safe upgrade paths based on dependency ordering and compatibility constraints
Operate and evolve the Financial Cloud configuration center and module selection center
Internal Developer Platform (20%)
Build self-service workflows for module teams: onboard new modules, publish versions, request promotion to production Manifests
Provide real-time visibility: cross-site version drift, deployment health, dependency freshness, compliance patch coverage
Design the "Module → Manifest" pipeline: from module selection to validated Manifest generation in ≤30 minutes
Integrate with internal CI systems to provide selective test execution based on dependency graph analysis
Reliability & Compliance Automation (10%)
Automate compliance evidence generation for regulated deployments (audit trails, SBOMs, change records)
Design cold-start orchestration that automatically derives correct startup ordering from the dependency graph
Build chaos testing frameworks to validate site-level DR and failover under real module compositions
Ensure Phase 1 infrastructure deployment automation ≥95%, Phase 2 data layer ≥90%, Phase 3 business applications ≥90%
──────
What We're Looking For
Must-Have
8+ years in platform engineering, DevOps, or infrastructure toolchain development, serving 500+ services or 100+ engineers
Deep hands-on experience with build systems — you've designed or operated them, not just consumed them
Track record of building dependency graph tooling — static analysis, runtime tracing, or both — for impact analysis and selective testing
Experience designing and operating version governance systems: BOM/Manifest models, compatibility matrices, constraint solving
Production GitOps deployment experience spanning multi-cluster / multi-region environments
Solid Kubernetes expertise: custom Controllers, Operators, CRDs for platform automation
Artifact management and supply chain security experience: content-addressable storage, SLSA attestation, SBOM generation, artifact signing
Strong Plus
Experience building an Internal Developer Platform (IDP) with self-service module onboarding and promotion workflows
Large-scale monorepo governance: code ownership, visibility boundaries, build graph optimization
Financial or regulated industry experience: understanding of compliance-as-code, audit automation, multi-jurisdictional requirements
Multi-site / multi-tenant SaaS platform experience where each site has a different module composition
Familiarity with constraint solvers or package manager dependency resolution algorithms (SAT solvers, version unification)
Cryptocurrency / fintech platform experience, especially exchange or trading infrastructure
Nice-to-Have
Toolchain development experience in Rust, Go, or Python
Familiarity with Terraform / Pulumi infrastructure-as-code
Experience with OPA / Rego for policy-as-code in deployment pipelines
Experience operating platforms across China / APAC / EU regions with understanding of data residency requirements