Senior Cloud Platform Engineer

You will own AWS architecture and cloud infrastructure across customer environments. You will build and maintain reusable infrastructure as code, deployment pipelines, observability systems, release processes, and migration automation. You will establish DevOps standards, manage infrastructure risks and costs, document operational procedures, contribute compliance evidence, and recruit, onboard, and technically lead an SRE.

Responsibilities

• Own AWS architecture for customer environments, including scalable, secure, cost-efficient, and maintainable infrastructure.
• Design and govern VPC, EKS, Aurora/RDS, IAM, and AWS networking patterns.
• Lead infrastructure architectural reviews and proactively address infrastructure risks.
• Manage AWS costs through rightsizing, reserved-instance strategy, and architecture optimization.
• Design, write, test, and maintain reusable Terraform and Terragrunt modules.
• Build and own CI/CD pipelines for infrastructure and application deployments.
• Automate deployment, validation, rollback, and manual operational processes.
• Define and enforce DevOps standards for branching, pipelines, deployment gates, environment promotion, and releases.
• Design and own observability, monitoring, alerting, dashboards, and automated reporting.
• Define SLOs and SLAs and make breaches visible and actionable.
• Own application release, infrastructure upgrade, and configuration-change deployments.
• Create standardized, reversible deployment runbooks and automated pre-deployment gates.
• Lead technical execution of customer migrations to the NG environment.
• Build migration infrastructure, tooling, validation frameworks, automation, and cutover runbooks.
• Define migration go/no-go criteria, maintain rollback capability, and prepare operations for cutovers.
• Recruit, onboard, and technically lead an SRE.
• Set technical standards, conduct code reviews, and develop operational capability.
• Maintain architecture diagrams, runbooks, deployment guides, and environment-specific documentation.
• Contribute infrastructure controls, patch records, access logs, and audit-ready evidence for ISO 27001 and SOC 2 compliance.

Requirements

• Production-depth AWS expertise, including EKS, Aurora/RDS, Lambda, VPC, IAM, S3, CloudWatch, Route 53, VPN, PrivateLink, and Transit Gateway.
• Senior-level Terraform and Terragrunt experience building modular, tested, reusable infrastructure as code across multiple environments.
• Experience designing and owning CI/CD pipelines using GitLab CI, GitHub Actions, AWS CodePipeline, or equivalent.
• Deep Kubernetes and EKS operations experience, including design, deployment, scaling, upgrades, and troubleshooting.
• Strong Python, Bash, or equivalent scripting and automation skills.
• Experience designing and owning CloudWatch, Prometheus, Grafana, or equivalent observability stacks.
• Excellent written and spoken English.
• Professional-level AWS certification is strongly preferred.
• SaaS or multi-tenant platform experience is an asset.
• Financial services or regulated-industry experience, including ISO 27001 or SOC 2, is an asset.
• Platform migration experience is an asset.
• Experience mentoring or technically leading junior engineers is an asset.
• Aurora/RDS database operations experience is an asset.
• DevSecOps experience, including security scanning, compliance automation, secrets management, and infrastructure hardening, is an asset.

Benefits

• Flexible and remote working policies