We're looking for a Cloud Engineer to design, build, and operate our cloud platform. You'll own AWS infrastructure end-to-end — provisioning, identity, secrets, observability — and deliver a self-service, secure, and well-instrumented platform for engineering teams.

What You'll Work With: AWS · Terraform · Keycloak · HashiCorp Vault · Prometheus · Grafana · Kubernetes · Git · (VMware vCloud)

Reporting to: Head of Security and Infrastructure

Responsibilities:

Design, deploy, and operate AWS infrastructure across multiple accounts and environments
Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection
Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC
Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation
Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting
Implement landing zones, account vending, networking, and guardrails
Partner with security and SRE on compliance, hardening, and incident response
Automate operational work — provisioning, access reviews, certificate and secret rotation
Document architecture, runbooks, and onboarding guides
Participate in on-call rotation for platform services

Candidate profile:

3+ years in cloud / platform / DevOps engineering roles
Strong hands-on AWS experience (Organizations, IAM, VPC, EC2, RDS, EKS/ECS, Lambda, S3, KMS)
IaC proficiency — Terraform in production (modules, state management, CI/CD)
Production experience with Keycloak — realms, clients, identity brokering, OIDC / SAML
Production experience with HashiCorp Vault — policies, secret engines, auth methods
SSO / federation experience — OIDC, SAML, SCIM
Observability with Prometheus and Grafana — dashboards, PromQL, Alertmanager
Solid Linux, networking (L2/L3, VLAN/VXLAN), and scripting (Python / Bash / Go)
Git-based workflows with peer review and CI

Nice to Have:

VMware vCloud / vSphere experience for hybrid or on-prem workloads
Multi-account AWS Organizations / Control Tower setups
Kubernetes (EKS) in production
GitOps tooling (ArgoCD, Flux)
Experience in regulated environments (fintech, financial services, DORA, SOC 2, ISO 27001)
Cost optimization and FinOps practice

Our offer:

A certified Great Place to Work® reflecting our commitment to a positive culture, employee well-being, and support
Welcoming, young and multicultural team with approachable leadership
Ability to contribute to dynamic business at a growth phase
High level of autonomy, support of ideas and putting your expertise into the best practices for the company
Continuous personal development, training budget, growth with the company and opportunity to learn from industry leaders
Competitive remuneration, regular salary reviews and performance-based incentive schemes
Vibrant company life: from team activities to global celebrations
New beautiful office in an easily accessible location with company-provided fruits, breakfasts and lunches
Free access to multiple sports and wellness facilities across the country
Free company-provided parking
Medical insurance and pension fund after probation period
A gift and a day off on your Birthday
Visa and work permit support if required

Cloud Engineer jobs

Cloud Engineer

Cloud Engineer