Platform Engineer

ABOUT US: As a world leading provider of integrated solutions for the alternative investment industry, Alter Domus (meaning “The Other House” in Latin) is proud to be home to 90% of the top 30 asset managers in the private markets, and more than 6,000 professionals across 24 jurisdictions. With a deep understanding of what it takes to succeed in alternatives, we believe in being different in what we do, how we work, and most importantly in how we enable and develop our people. Invest yourself in the alternative, and join an organization where you progress on merit, where you can speak openly with whoever you are speaking to, and where you will be supported along whichever path you choose to take. Find out more about life at Alter Domus at careers.alterdomus.com JOB DESCRIPTION: You will own the physical infrastructure and delivery layer for a new commercial data platform serving institutional clients. This means cloud platform architecture, compute and storage provisioning, API and data delivery infrastructure, security and access controls, multi-tenancy design, and operational reliability. You are responsible for everything that makes the data accessible, secure, performant, and commercially deliverable — the bridge between internal data pipelines and external client consumption. You sit within the Technology organization but are fully dedicated to this initiative. Key Responsibilities: Platform Architecture: Design and maintain the end-to-end technical infrastructure — compute layer, storage layer, orchestration services, caching, and networking. Ensure the platform supports multiple product streams with distinct performance profiles (real-time APIs, bulk data delivery, embedded analytics)API & Delivery Infrastructure: Build and operate the data delivery layer for external clients — REST APIs for real-time position data, bulk file delivery (SFTP), cloud data sharing (e.g., Snowflake Data Sharing), and webhook-based event notifications. Own API versioning, rate limiting, SLA monitoring, and client onboardingSecurity & Access Controls: Design and implement role-based (RBAC) and attribute-based (ABAC) access controls to ensure strict client data isolation. Clients accessing their own operational data must never see other clients' data; market-facing products must expose only anonymized/aggregated outputs. Implement encryption at rest and in transit, key management, and secrets handlingMulti-Tenancy & Isolation: Architect the platform to support thousands of external users across multiple client organizations, with logical (or physical) data isolation, per-tenant configuration, and audit loggingReliability & Observability: Build monitoring, alerting, and incident response infrastructure. Define and maintain SLAs for uptime, latency, and data freshness. Implement health checks, circuit breakers, and graceful degradation patternsScalability: Ensure the platform scales from a small number of pilot clients to 2,000+ users without architectural rework. Design for horizontal scaling, auto-provisioning, and cost optimizationCompliance & Governance: Support SOC 2 compliance, data residency requirements, and security audit processes. Collaborate with Legal on data-use provisions and technical consent enforcementCollaboration: Work with the Data Engineer (who builds pipelines that run on your platform), the Data Architect (who defines the logical model you physically instantiate), and the Quantitative Director (whose outputs you deliver to clients) Requirements: 6+ years in platform engineering, infrastructure engineering, or DevOps/SRE — ideally supporting external-facing data productsExpert knowledge of cloud platforms (AWS, Azure, or GCP) — infrastructure-as-code (Terraform, or CloudFormation), containerization (Docker, Kubernetes), and serverless patternsStrong API engineering experience — building, operating, and scaling REST APIs for external commercial consumption. Experience with API gateways, OAuth2/JWT authentication, rate limiting, and versioningExperience designing multi-tenant architecture