[Remote] Senior Data Platform Engineer

Note: The job is a remote job and is open to candidates in USA. CareMessage is a social enterprise and patient engagement platform focused on improving health equity for low-income populations in the United States. The Senior Data Platform Engineer will own the Google Cloud data infrastructure, ensuring reliable pipelines, secure patient information, and production-ready data workloads. The role also enables Data Science and Analysis teams through infrastructure automation, monitoring, CI/CD, and self-service data environments.

Responsibilities

• Manage BigQuery datasets, Datastream, Cloud Run functions and jobs, service accounts and IAM for our data projects in Terraform, using our Infrastructure team's modules and standards
• Build and run CI/CD for data workloads, so every dataset, pipeline and function reaches production through code review rather than the console
• Set up monitoring, logging and alerting for freshness and failures, and fix root causes rather than symptoms
• Keep staging and production data environments consistent and reproducible from code
• Own PHI classification, column-level policy tags and masked views, applied automatically whenever a dataset is created or migrated
• Apply least-privilege IAM and secure defaults, such as internal-only ingress, to every data service we deploy
• Run automated checks that detect untagged PHI columns, drifted permissions or publicly reachable services, and alert before a person has to find them
• Partner with our Infrastructure and Compliance teams on access reviews, audits and migration runbooks
• Provide the organization with safe, self-serve environments to explore and build, with masked data and a clear path from a notebook or query to a scheduled production job
• Move the data team work into production with them, including the diabetes outcomes reporting our 2026 plan is measured on
• Help the Data team take their work from analysis to reliable, scheduled production jobs
• Remove infrastructure bottlenecks for the Data team, so they can spend their time on analysis instead of upkeep
• Document the platform with runbooks, definitions and lineage, so anyone on the team can use and trust it
• Ship your first infrastructure change through Terraform and code review
• Write a current-state map of our data infrastructure: ingestion paths, datasets, functions and jobs, service accounts, and what is and is not in code
• Take ownership of the open data-infrastructure and data-protection action items, each with a committed date
• Have BigQuery dataset creation, including PHI policy tags, running through Terraform and CI/CD
• Have every data Cloud Run function and job deploying through CI/CD with internal-only ingress and least-privilege service accounts
• Have agreed the top platform blockers with our Data Scientist and Data Analyst, and cleared the first of them
• Own the data platform and the triage of the Data team's infrastructure backlog
• Have scheduled drift checks for PHI tags, IAM and ingress, with alerting
• Have our Data Scientist and Data Analyst shipping scheduled work to production without waiting on infrastructure, starting with diabetes outcomes reporting v1
• 100% masking coverage on PHI columns as the warehouse grows, with any gap detected and closed automatically, and zero publicly reachable data services
• 100% of data infrastructure changes deployed through Terraform and CI/CD rather than by hand
• Median time for any internal team to get an approved data request (a new pipeline, dataset, report or access change) running in production, measured monthly against a baseline set in your first 30 days

Skills

• You have deep, hands-on expertise in Google Cloud for data infrastructure
• You have run BigQuery, IAM and service accounts, and serverless compute such as Cloud Run in production, and you understand how they fail
• You manage infrastructure as code and ship through CI/CD
• You have used Terraform or an equivalent, with pipelines such as GitHub Actions, to deploy data infrastructure, and you do not make production changes by hand
• You have owned a production data platform end to end: ingestion, including change data capture from an operational database, a layered warehouse, and the monitoring that tells you when it breaks
• You write production-quality SQL and Python
• You have protected sensitive data with controls defined in code, such as least-privilege IAM, column-level security or policy tags, and automated checks that catch when a control drifts
• You make the people who use your platform faster
• You have worked closely with data scientists or analysts, and you can point to a time you removed an infrastructure bottleneck that was slowing their work
• You are committed to health equity
• You want your engineering to serve people from low-income populations, and you can explain how reliable, protected data connects to that work
• You will be expected to apply that lens to your decisions, not just endorse it

Benefits

• Paid parental leave for biological and adopted children
• 18 paid company holidays, including a one week mid-year and one week end-of-year break
• 9 wellness days to be used for self-care- or anything that comes up in life
• 15 days of PTO
• 1-month (20 working days) paid sabbatical after the 4-year anniversary, and every 4 years thereafter
• Generous medical, dental, and vision insurance for employees and their families
• Health Savings Accounts and Flexible Spending Accounts
• Short & long-term disability insurance
• $100 per employee yearly wellness budget, with flexibility to spend on physical, emotional, and mental wellness resources
• PerkSpot: Instant access to discounts on products & services from hundreds of vendors

Company Overview