Senior Platform Engineer

About Avante
Ask any employee to explain their benefits, and you'll likely get a confused shrug. Ask any HR leader if their benefits investment is working, and you'll get an honest "I don't know." For employees, benefits are confusing and overwhelming. For HR and finance leaders, benefits are the second-largest expense, but they lack the visibility to know what's working and what's wasted.At Avante, we're changing that. We're the first AI-native benefits platform built to turn benefits complexity into clarity. For employees, Avante acts like a personal guide, making benefits simple to understand and use. For leaders, Avante unifies fragmented data and delivers real-time insights so they can improve programs, control costs, and prove ROI.
About This Role
We're looking for a senior engineer to own Avante's production infrastructure, security posture, and developer platform. Our infrastructure is mature. We're 100% on IaC (Terraform + Terragrunt), fully deployed on Azure, and the foundation is solid. You'll be the technical owner of that environment: the person who sets architectural standards, keeps the platform reliable and secure, and makes sure a small engineering team can punch well above its weight. Avante is also an agentic engineering organization. AI agents write production code, open pull requests, and operate across our product surfaces alongside our engineers. That creates real and interesting infrastructure challenges, from CI/CD automation to security gating, and you'll contribute to solving them. But the core of this role is owning the platform that everything else runs on.

What You'll Do

• You'll own the infrastructure Avante runs on and ships through. We value generalists, so while infrastructure is your home base, you'll also contribute to product engineering work alongside the rest of the team.
• Production infrastructure and cloud architecture. You're the technical owner of our Azure environment, managed entirely through Terraform and Terragrunt. Architecture decisions, reliability, disaster recovery, cost optimization, patching, and the IaC practices that keep everything reproducible and auditable. The whole team contributes to infrastructure, but you set the standards and own the architecture.
• Security and compliance. Hard automated gates on PHI handling, tenant isolation, authentication, and data integrity. OWASP top 10 checks. Automated scanning that catches vulnerabilities before they ship. We handle PHI and operate under HIPAA, GDPR, and SOC 2 requirements, so the stakes here are real and non-negotiable.
• CI/CD and developer experience. Our engineering velocity is increasing fast, and the pipeline needs to keep up. You'll work on automating code quality checks, risk classification, security scanning, and merge workflows. The goal is a CI/CD system that maintains high standards without becoming a bottleneck. You'll also own observability, monitoring, and the tooling that makes every engineer on the team more productive.
• Product engineering. You'll occasionally participate in sprint work, contribute to features, and stay close to the product. This keeps you connected to the problems the rest of the team faces and ensures the platform you're building actually serves their needs

.What We're Looking For

• 5+ years of professional software engineering experience, with significant time spent on infrastructure, platform engineering, DevOps, or security engineering.
• Production infrastructure ownership. You've been the person responsible for keeping a cloud environment healthy and evolving, not just a contributor. Azure experience is preferred; AWS or GCP transfers well. Strong with Terraform (Terragrunt experience is a plus), containerized deployments, networking, and reliability engineering.
• Security engineering depth. You've implemented security controls in production, not just talked about them. Experience with automated vulnerability scanning, secrets management, access control, and compliance frameworks. HIPAA or SOC 2 familiarity is a strong plus given that we handle PHI.
• Interest in the CI/CD problem we're solving. Our engineers work with AI agents daily, and the volume of code moving through our pipeline is growing fast. You should be curious about what automated review, risk classification, and security scanning look like at that throughput. This field is new enough that we don't expect you to have done it before. We care more about how you think through the problem than whether you can check the box.
• Generalist instincts with infrastructure depth. You're an infrastructure engineer first, but you're comfortable contributing to product work, jumping into a codebase you don't own, and staying close to the problems your teammates are solving. You'd