Platform Engineer

ABOUT ELEMYNT

Elemynt builds secure AI infrastructure for scientific and engineering R&D teams. Our platform helps organizations connect data, models, compute, and expert workflows in environments where reliability, traceability, and data control matter.

We are building a small, ambitious engineering team across Singapore and the United States to turn advanced scientific computing into production software that real technical teams can use.

ABOUT THE ROLE

This role owns the platform layer of Elemynt's product: the core services, including authentication and identity, authorization, multi-tenancy, and the middleware every request passes through.

You will build these services in Python, together with the delivery infrastructure that ships them and the telemetry that reports how deployments behave in the field. The work sits at the intersection of backend product development, release engineering, and observability, with roughly half of the time on the platform services themselves.

This is a deeply hands-on senior role. The platform is deployment-agnostic: it runs in the customer's cloud, on their own compute, or across a hybrid of the two, usually inside a secure environment we don't operate, on runtimes ranging from Kubernetes to HPC schedulers and bare metal. Identity has to integrate with each customer's existing provider, the software has to carry its own safeguards, and anything you will need to know about a live deployment has to be instrumented before the build ships.

WHAT YOU WILL DO

• Build authentication end-to-end: sessions, tokens, service identities, and integration with the customer's existing identity provider (OIDC, SAML, LDAP).
• Design the authorization and tenancy model and own it in code: roles, scopes, policy evaluation, and the tenant isolation that separates one customer's data and workloads from another's.
• Build the admin APIs for organizations, teams, and delegated access, and the middleware every request passes through: rate limits, quotas, and audit logging.
• Implement the safeguards that keep proprietary software and data protected in customer-managed installations: encryption at rest and in transit, secrets and certificate handling, and entitlement enforcement.
• Own the release path: CI/CD pipelines, quality gates, artifact registries, and versioned publishing, so a build that passes the gates is safe to ship.
• Package the platform for heterogeneous customer runtimes, with Helm charts, manifests, CLI installers, and infrastructure-as-code that make installs and upgrades repeatable.
• Operate ephemeral test environments that validate every change against a production-like installation before release.