Staff Platform Engineer

Accountabilities

• Own, maintain, and evolve the CI/CD platform, including GitHub Actions with self-hosted runners powered by RunsOn, and lead the ongoing migration and modernization of the Jenkins infrastructure.

• Define and implement platform architecture decisions, balancing scalability, reliability, maintainability, security, and cost as requirements evolve.

• Build, maintain, and improve Infrastructure as Code across AWS using Terraform, Terragrunt, and Terramate, following reusable and standardized component patterns inspired by CloudPosse.

• Design and implement secure-by-default delivery pipelines, including branch protection, pull request approval rules, secrets management with SOPS, and production approval workflows for critical deployments.

• Strengthen cloud security by transitioning from IAM users and long-lived access keys toward role-based access, enforcing least-privilege principles, and addressing infrastructure security gaps.

• Identify and remediate risks related to exposed network ports, unmanaged credentials, insufficient access controls, and missing security guardrails.

• Support and improve Kubernetes-based infrastructure using Amazon EKS, Helm, and ArgoCD, promoting reliable deployments and consistent GitOps practices.

• Contribute to the development and maintenance of the observability stack, including Grafana and Prometheus, to improve monitoring, troubleshooting, and system reliability.

• Enhance the internal developer platform and tooling, including Backstage, to simplify workflows and improve the developer experience across engineering teams.

• Review, refactor, and optimize existing Terraform modules, cloud infrastructure, and delivery pipelines, identifying opportunities to improve quality, consistency, and operational efficiency.

• Participate in platform support and incident triage, investigating production issues, identifying root causes, and implementing long-term improvements to prevent recurrence.

• Develop automation and self-service tooling that reduces manual intervention, streamlines support processes, and increases engineering team productivity.

• Anticipate and address complex operational scenarios, including significant traffic spikes, regional outages, and changing infrastructure requirements, while maintaining service continuity.

• Apply AI-assisted engineering tools thoughtfully, validating generated outputs, understanding their limitations, and making sound technical decisions based on independent judgment.

• Share technical knowledge, establish engineering best practices, and contribute to a welcoming, collaborative, and continuously improving platform team.

Requirements:

• Extensive hands-on experience with AWS cloud infrastructure, including designing, deploying, securing, and operating production environments.

• Deep practical expertise in CI/CD systems, particularly GitHub Actions and/or Jenkins, including pipeline architecture, automation, runner management, and delivery workflow optimization.

• Strong Infrastructure as Code experience with Terraform; familiarity with Terragrunt, Terramate, and reusable infrastructure component patterns is a significant advantage.

• Proven experience with Kubernetes and Amazon EKS, including workload deployment, Helm, and GitOps workflows using ArgoCD.

• A strong security-first mindset, with a solid understanding of AWS IAM, role-based access control, secrets management, network security, and least-privilege access. Experience with DevSecOps practices is highly valued.

• Ability to design robust, maintainable technical solutions while adapting to changing constraints, such as global infrastructure requirements, cost optimization, or evolving reliability targets.

• Strong troubleshooting and incident-management skills, with the ability to assess complex failure scenarios, investigate root causes, and make effective decisions under pressure.

• Understanding of high availability, scalability, disaster recovery, regional resilience, and strategies for handling sudden increases in production traffic.

• Experience reviewing and improving existing infrastructure and automation, with an emphasis on code quality, reusable components, operational consistency, and long-term maintainability.

• Familiarity with observability and monitoring tools such as Grafana and Prometheus, as well as internal developer platforms such as Backstage.

• Strong problem-solving and analytical skills, with the ability to evaluate technical trade-offs and explain architectural decisions clearly.

• Effective communication and collaboration skills, with the ability to work across teams, share knowledge, and contribute to technical discussions in a distributed, multinational environment.

• A proactive, adaptable, and ownership-driven approach, with the confidence to investigate unfamiliar problems, ask thoughtful questions, and take responsibility for outcomes.

• Experience using AI-assisted development tools effectively, with the technical judgment to validate generated code, identify limitations, and explain the reasoning behind implementation choices.

• A commitment to continuous improvement, engineering excellence, and building secure, reliable, and developer-friendly infrastructure.

Benefits:

• Competitive compensation: A compensation package aligned with your experience, technical expertise, and the scope of the role.

• Meaningful technical ownership: The opportunity to make architectural decisions and directly influence the evolution of critical infrastructure and delivery systems.

• Challenging engineering work: Exposure to complex cloud infrastructure, CI/CD modernization, Kubernetes, platform security, and large-scale operational challenges.

• Collaborative international environment: Work alongside colleagues across multiple locations in a close-knit, welcoming, and supportive team.

• Professional development: Opportunities to deepen your expertise in cloud platforms, infrastructure automation, security, and modern software delivery practices.

• Technical autonomy: The freedom to evaluate alternatives, solve challenging engineering problems, and implement improvements with measurable impact.

• Continuous innovation: Opportunities to experiment with modern developer tooling, automation, and AI-assisted engineering workflows.

• Inclusive workplace culture: A commitment to diversity, equal opportunity, and creating an environment where employees feel respected and supported.

• Career growth: The opportunity to expand your technical leadership, architectural decision-making, and platform engineering expertise as the organization evolves.