Cloud Engineer

We're looking for a Cloud Engineer to design, build, and operate our cloud platform. You'll own AWS infrastructure end-to-end — provisioning, identity, secrets, observability — and deliver a self-service, secure, and well-instrumented platform for engineering teams.

What You'll Work With: AWS · Terraform · Keycloak · HashiCorp Vault · Prometheus · Grafana · Kubernetes · Git · (VMware vCloud)

Reporting to: Head of Security and Infrastructure

Responsibilities:

• Design, deploy, and operate AWS infrastructure across multiple accounts and environments

• Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection

• Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC

• Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation

• Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting

• Implement landing zones, account vending, networking, and guardrails

• Partner with security and SRE on compliance, hardening, and incident response

• Automate operational work — provisioning, access reviews, certificate and secret rotation

• Document architecture, runbooks, and onboarding guides

• Participate in on-call rotation for platform services

Candidate profile:

• 3+ years in cloud / platform / DevOps engineering roles

• Strong hands-on AWS experience (Organizations, IAM, VPC, EC2, RDS, EKS/ECS, Lambda, S3, KMS)

• IaC proficiency — Terraform in production (modules, state management, CI/CD)

• Production experience with Keycloak — realms, clients, identity brokering, OIDC / SAML

• Production experience with HashiCorp Vault — policies, secret engines, auth methods

• SSO / federation experience — OIDC, SAML, SCIM

• Observability with Prometheus and Grafana — dashboards, PromQL, Alertmanager

• Solid Linux, networking (L2/L3, VLAN/VXLAN), and scripting (Python / Bash / Go)

• Git-based workflows with peer review and CI

Nice to Have:

• VMware vCloud / vSphere experience for hybrid or on-prem workloads

• Multi-account AWS Organizations / Control Tower setups

• Kubernetes (EKS) in production

• GitOps tooling (ArgoCD, Flux)

• Experience in regulated environments (fintech, financial services, DORA, SOC 2, ISO 27001)

• Cost optimization and FinOps practice

Our offer:

• A certified Great Place to Work®  reflecting our commitment to a positive culture, employee well-being, and support

• Welcoming, young and multicultural team with approachable leadership

• Ability to contribute to dynamic business at a growth phase

• High level of autonomy, support of ideas and putting your expertise into the best practices for the company

• Continuous personal development, training budget, growth with the company and opportunity to learn from industry leaders

• Competitive remuneration, regular salary reviews and performance-based incentive schemes

• Vibrant company life: from team activities to global celebrations

• New beautiful office in an easily accessible location with company-provided fruits, breakfasts and lunches

• Free access to multiple sports and wellness facilities across the country

• Free company-provided parking

• Medical insurance and pension fund after probation period

• A gift and a day off on your Birthday

• Visa and work permit support if required