Principal Site Reliability Engineer
Amtech is executing an all-in AWS strategy: migrating our flagship Encore ERP to a multi-account, account-per-customer AWS architecture, operating LabelTraxx as a multi-tenant SaaS platform, and retiring legacy private-cloud infrastructure. Platform Engineering owns the landing zone, infrastructure as code, and the golden-path tooling that product teams build on. The Principal Platform Engineer is Amtech's senior-most hands-on cloud technologist. You will own the technical architecture of our AWS platform: the landing zone, the account-per-customer Encore hosting model, the golden-path IaC stack, and the migration roadmap that retires our remaining private-cloud footprint. This role carries organization-wide technical authority without people management. You will make the architecture decisions that hold for years, de-risk them through prototyping and review, and raise the engineering bar across a distributed U.S. and India team. You will also be a primary technical interface to AWS, consulting partners, and executive leadership.
KEY RESPONSIBILITIES
Architecture & Technical Strategy
Own end-to-end AWS platform architecture: multi-account organization design, landing zone, networking, DNS and certificate architecture, identity, and tenancy model.
Set the technical roadmap for Encore-on-AWS environment builds (temp, production, demo) on a shared golden IaC stack, and for LabelTraxx platform evolution.
Define the migration architecture and sequencing that completes Amtech's exit from legacy private-cloud infrastructure.
Write and defend architecture decision records; kill weak options early with evidence.
Evaluate and integrate emerging capabilities, including AI/agentic tooling and MCP-based integration patterns, under Amtech's AI governance program.
Platform Engineering & Delivery
Author the highest leverage Terraform modules and reference implementations personally; review the rest.
Set standards for CI/CD (GitHub Actions), progressive delivery, environment promotion, and secrets management.
Design for reliability with SRE-track peers: SLO frameworks, observability architecture (Open Telemetry, Open Observe), and PagerDuty service models.
Drive platform cost architecture with FinOps: tenancy economics, Savings Plans strategy input, and unit cost visibility.
Security, Compliance & Risk
Design security architecture with Information Security: IAM boundaries, network segmentation, encryption, and data governance for customer data.
Ensure the platform satisfies SOC 2 and ISO 27001 obligations by design, with audit evidence generated through automation.
Assess and articulate technical risk for executive decisions: migration sequencing, vendor dependencies, and single points of failure.
AI Competency
Design agentic and AI-assisted engineering workflows with autonomy tiers, policy-as-code guardrails, rollback, and end-to-end auditability; measure ROI against baselines.
Define platform AI standards: where AI sits in the delivery lifecycle, validation layer architecture (schema, rules, model-graded, human review), and evaluation harnesses.
Prevent AI-generated code from degrading platform quality at fleet scale: eval harnesses, complexity metrics, and AI-attributed defect tracking.
Contribute to enterprise AI strategy and standards under Amtech's AI governance program.
Technical Leadership & Influence
Mentor senior engineers and raise design-review quality across U.S. and India pods.
Serve as the senior technical counterpart to AWS, consulting partners, and third-party providers on funded programs.
Translate platform strategy into terms executives and investors can act on; support diligence and integration work for acquisitions.
Ensure knowledge is durable: documentation, runbooks, and deliberate succession of critical knowledge, avoiding single-person dependencies.
SKILLS & QUALIFICATIONS
10+ years of progressive engineering experience with deep AWS platform expertise; recognized as the strongest technologist in prior roles.
Proven ownership of multi-account AWS architecture at organizational scale (landing zones, Control Tower or equivalent, account vending, SCPs).
Expert Terraform and IaC program design: module ecosystems consumed by multiple teams, testing, and versioning strategy.
Demonstrated success architecting and executing large migrations (data center or private cloud to AWS), including ERP-class or other stateful enterprise workloads.
Strong software engineering foundation (Python, Go, or similar) and fluency with modern CI/CD (GitHub Actions or equivalent).
Working command of cloud security architecture and compliance-driven design (SOC 2, ISO 27001).
Track record of technical leadership without formal authority: mentoring seniors, driving decisions through writing and review, and influencing executives.
Designed AI-assisted or agentic engineering systems with guardrails, autonomy tiers, and measured ROI; L4+ AI competency by industry frameworks.
Bachelor's degree in Computer Science, Engineering, or a related discipline, or equivalent demonstrated skills.
PREFERRED QUALIFICATIONS
AWS Certified Solutions Architect Professional or DevOps Engineer Professional.
Experience with multi-tenant SaaS and account-per-customer tenancy economics.
Experience in private equity portfolio, M&A integration, or investor-facing technical diligence contexts.
Experience establishing AI/LLM platform capabilities or agent-based automation under formal governance.
Experience directing consulting partners on funded cloud programs (for example AWS MAP).