Applies algorithmic thinking to platform engineering: rate limiting algorithms (token bucket, leaky bucket), service discovery algorithms for dynamic infrastructure, resource quota enforcement algorithms. Designs efficient routing and load distribution algorithms for multi-tenant platform services.
Roles · Platform Engineer · Senior
What a Senior } should know
47 core skills, 63 in total. Expectations per skill, and what changes at the next level.
This page lists what a Senior } is expected to know and do, skill by skill. Core skills are the ones a manager and peers assess in a review cycle; the rest count only in self-assessment. Main areas: Programming Fundamentals, Cloud & Infrastructure, DevOps & CI/CD.
Core skills for a Senior
Grouped by area. The label on the right is the expected depth: Awareness, Working, Advanced or Expert.
Programming Fundamentals · 4
Designs code quality standards for internal developer platforms: CLI tool architecture, SDK design patterns, self-service infrastructure code. Refactors platform components for extensibility and backward compatibility. Establishes review practices for developer experience consistency and API stability.
Selects optimal data structures for developer platform internals: service catalog data models, API gateway routing tables, resource quota tracking structures. Optimizes configuration data structures for self-service provisioning at scale. Designs efficient data models for platform telemetry collection and developer experience metrics aggregation.
Has deep expertise in design patterns for platform systems: designs extensible platform architectures with adapter and strategy patterns, implements self-service patterns for infrastructure provisioning, optimizes pattern usage for multi-tenant platform scalability. Mentors team on architectural patterns for internal developer platforms.
Cloud & Infrastructure · 18
Designs Ansible automation architecture for the internal developer platform covering cluster lifecycle management, platform service deployment, and tenant onboarding workflows. Implements advanced patterns including custom Ansible collections for platform-specific resources, Tower/AWX integration for self-service platform operations, and idempotent platform upgrade playbooks with rollback capabilities. Optimizes platform automation for reliability through comprehensive testing with Molecule, infrastructure validation, and integration with platform observability systems.
Designs AWS architecture for IDP: Landing Zone, Control Tower, Service Catalog for self-service. Implements AWS SSO and federation for platform authentication. Creates centralized networking (Transit Gateway, PrivateLink). Automates account vending through IaC.
Designs edge architecture for IDP: CDN as part of deployment pipeline, edge-side computing for personalization. Implements multi-CDN strategy with intelligent routing. Creates self-service CDN configuration for teams through IaC modules.
Designs comprehensive container security strategy for IDP: runtime scanning (Falco), admission policies (Kyverno/OPA). Implements image signing and verification (cosign + Sigstore). Creates centralized vulnerability dashboard with automated alerts and remediation SLA.
Designs Crossplane-based internal developer platforms with abstracted XRDs hiding cloud complexity. Implements Composition Functions for dynamic resource templating. Enforces OPA/Kyverno policies on Claims to guarantee compliance.
Designs containerization strategy for internal platform: image standards, automated vulnerability scanning, image signing (cosign/Notary). Implements BuildKit and CI-level caching for build acceleration. Defines OCI standards and runtime policies for the entire organization.
Designs Envoy-based API gateway layer with JWT validation, RBAC filters, and per-route rate limits. Optimizes connection pooling and upstream health check tuning for low-latency microservices. Implements Wasm extensions for custom observability and traffic shaping policies.
Designs infrastructure solutions with Google Cloud Platform. Optimizes cost and performance. Implements best practices and security hardening.
Designs library of reusable Helm charts for IDP: base microservice templates, standardized values schemas. Integrates Helm into GitOps pipeline with ArgoCD. Creates chart testing framework and automated validation (helm-unittest, ct lint) in CI.
Designs self-service Istio platform abstractions for development teams. Implements canary deployments and circuit breakers via Istio traffic policies. Hardens mesh security with strict mTLS and RBAC policies.
Develops Kubernetes operators for IDP automation (Operator SDK/kubebuilder). Designs multi-tenant architecture with virtual clusters (vCluster). Implements advanced networking (Cilium, eBPF). Creates admission webhooks for platform policy enforcement.
Designs Kubernetes cluster architecture for IDP: control plane HA, etcd tuning, API server optimization. Implements GitOps approach to cluster management. Creates standardized pod templates and security contexts. Automates cluster provisioning through IaC.
Develops traffic management architecture for IDP: multi-layer balancing (DNS → GLB → ALB → service mesh). Implements circuit breaking and rate limiting at platform level. Creates self-service load balancer provisioning through Terraform modules for teams.
Develops IDP network architecture: multi-VPC strategy, hybrid connectivity (VPN, Direct Connect). Implements eBPF-based networking for advanced observability and security. Designs DNS strategy for service discovery and multi-cluster communication.
Designs platform infrastructure with Pulumi Automation API for developer self-service portals and internal tooling. Builds reusable multi-language component packages published to registries. Implements advanced patterns: micro-stacks, drift detection, and automated remediation pipelines.
Designs infrastructure solutions with Serverless Containers. Optimizes cost and performance. Implements best practices and security hardening.
Designs serverless architecture as part of IDP: event mesh for platform events, step functions for workflow orchestration. Creates framework for typical serverless tasks with templates and CI/CD. Implements canary deployments and traffic shifting for Lambda.
Designs modular Terraform architecture for IDP: internal module registry, composition patterns, dependency management. Implements policy-as-code (Sentinel/OPA) for Terraform plan validation. Creates self-service modules for teams with automated provisioning through GitOps.
DevOps & CI/CD · 8
Designs ArgoCD as the GitOps control plane for the organization's internal developer platform. Implements multi-cluster ArgoCD topology with hub-spoke patterns, ApplicationSet controllers for fleet management, and custom plugins for platform-specific resource types. Optimizes ArgoCD scalability with controller sharding and efficient reconciliation tuning for hundreds of applications.
Designs blue-green infrastructure for IDP: immutable environments through IaC, automated validation pipeline. Integrates blue-green with ArgoCD and service mesh for seamless switching. Creates self-service blue-green deployment for teams with automatic rollback based on SLI.
Designs canary infrastructure for IDP: multi-metric analysis, header-based routing for internal canary. Integrates canary with observability stack (Prometheus metrics + custom analysis). Creates self-service canary configuration with safe defaults for all teams.
Designs feature flag infrastructure as part of IDP: self-hosted solution (Unleash, Flagsmith), CI/CD integration. Creates automatic flag lifecycle management. Implements feature flags for infrastructure rollout: canary config changes, gradual migration.
Designs CI/CD platform based on GitHub Actions for IDP: reusable workflow library, required workflows, environment protection rules. Implements OIDC authentication for secure deployment. Creates self-service CI/CD for teams through template repositories and Backstage.
Designs CI/CD platform on GitLab for IDP: CI/CD component catalog, compliance pipelines, security scanning integration. Creates golden pipeline templates for teams. Implements GitLab Releases and feature flags for controlled rollout through the platform.
Designs enterprise GitOps platform: implements multi-cluster management through ArgoCD, configures hub-spoke topology for fleet management, designs self-service developer portal for GitOps. Integrates GitOps with platform toolchain: secrets, networking, policies.
Designs CI/CD architecture with Progressive Delivery. Optimizes pipeline speed and reliability. Implements progressive delivery practices.
Testing & QA · 1
Designs chaos-as-a-service platform: creates API for programmatic experiment launching, integrates with CI/CD for automated chaos testing, implements RBAC for controlling who can run which experiments. Designs safety mechanisms: abort conditions, blast radius limits.
Security · 1
Designs secrets management architecture for IDP: Vault HA cluster, disaster recovery, performance replication. Implements PKI infrastructure through Vault CA for mTLS between services. Creates self-service secrets management for teams through Backstage + Vault API integration.
AI-Assisted Development · 1
Implements Copilot in platform workflows: Copilot for CLI for kubectl/terraform, code review suggestions. Creates organizational context files for improving suggestion quality. Develops guidelines for safe AI usage in infrastructure-as-code with secrets exposure awareness.
Architecture & System Design · 4
Designs capacity management system for IDP: automated right-sizing recommendations (VPA, Goldilocks). Implements predictive capacity planning based on historical metrics. Creates cost-capacity model per tenant. Automates cluster autoscaling (Karpenter) with SLA awareness.
Designs DR architecture for IDP: multi-region active-passive, pilot light, warm standby for platform components. Implements chaos engineering (Litmus, Gremlin) for DR plan validation. Creates automated failover with DNS-based switching and health-check driven promotion.
Develops IDP architecture for high load: event-driven processing, CQRS for read-heavy operations, sharding strategies. Implements platform-wide rate limiting and backpressure mechanisms. Creates performance testing framework as part of CI/CD. Designs graceful degradation for the platform.
Develops IDP subsystem architecture: API gateway design, developer portal, self-service workflows. Creates reference architectures for typical platform patterns. Implements Architecture Fitness Functions for continuous validation of architectural decisions.
Observability & Monitoring · 8
Designs metrics strategy for IDP: business metrics pipeline, SLI/SLO automation through custom metrics. Implements metrics-as-code approach: Terraform for Grafana dashboards, alerts through GitOps. Creates self-service metrics onboarding for new services through Backstage.
Designs centralized logging platform based on ELK: multi-tenant with data isolation, RBAC through Spaces. Implements Elastic Agent for unified collection (logs, metrics, traces). Creates self-service logging for teams: index templates, Kibana spaces, saved objects automation.
Architects Loki deployment topology for high-throughput multi-cluster log aggregation. Designs log pipeline standards including labeling conventions, retention policies, and cost optimization. Integrates Loki into the platform observability stack alongside tracing and metrics.
Designs incident management system for IDP: automated incident creation, war room automation, stakeholder communication. Implements incident retrospective process with action item tracking. Creates self-healing automation for typical platform incidents (node failures, OOM).
Designs OpenTelemetry infrastructure for IDP: multi-cluster collection, tail-based sampling, metrics transformation. Creates auto-instrumentation framework for golden path services. Implements OTel for infrastructure observability (K8s events, cloud API calls). Integrates signals (traces+metrics+logs).
Designs monitoring platform: Prometheus Operator + Thanos for scalable metrics, Grafana-as-code. Implements self-service monitoring for teams: automated dashboard generation, alert templates. Creates centralized metrics catalog and naming conventions for the organization.
Designs SLO framework for IDP: automated SLO tracking (Sloth, Pyrra), error budget-driven release process. Creates self-service SLO configuration for teams. Implements SLO-based alerting instead of threshold-based. Integrates SLO compliance into deployment pipeline for gating.
Designs logging strategy for IDP: unified log format, automatic context enrichment through sidecar/SDK. Implements semantic conventions (OpenTelemetry Logs) for cross-service correlation. Creates developer tooling for convenient log work: CLI, Grafana dashboards, saved queries.
Version Control & Collaboration · 2
Defines code review standards for IDP: review guidelines for different change types, SLA for review time. Implements automated review tools (Terraform plan diff in PR, Kubernetes dry-run). Creates culture of constructive feedback. Mentors through code review for team growth.
Designs Git strategy for IDP: monorepo vs polyrepo for platform components, GitOps-compatible structure. Implements signed commits and verified pushes for compliance. Creates automated changelog generation and semantic versioning for platform releases.
Additional skills
Not assessed by the team, but part of the self-assessment and the development plan.
What changes at Lead
62 skills get a higher expectation or become core when moving from Senior to Lead. The biggest jumps first.
- Algorithms & Complexity: Advanced → Expert
- Ansible: Advanced → Expert
- ArgoCD: Advanced → Expert
- AWS: Advanced → Expert
- Blue/Green Deployment: Advanced → Expert
- Canary Deployment: Advanced → Expert
- Capacity Planning: Advanced → Expert
- CDN & Edge Computing: Advanced → Expert
- Chaos Engineering: Advanced → Expert
- Code Quality & Refactoring: Advanced → Expert
} in the open competency matrix: 63 skills across 5 levels. The matrix is free for individuals and stays free.