Staff Platform Engineer

Responsibilities

• Own and evolve our CI/CD platform: GitHub Actions with self-hosted runners (RunsOn), plus an in-progress migration and refactor of our Jenkins setup ("Jenkins Next").

• Build and maintain Infrastructure as Code across AWS using Terraform / Terragrunt / Terramate, following reusable component patterns (CloudPosse-style).

• Design secure-by-default delivery pipelines: branch protection and PR approval rulesets, secrets management (SOPS), and prod-approval flows for critical paths.

• Drive our move from IAM users and long-lived access keys toward IAM roles, and help close foundational security gaps (open ports, unmanaged credentials, missing guardrails).

• Work with Kubernetes (EKS), Helm, and ArgoCD, and support our observability stack (Grafana, Prometheus) and developer platform (Backstage).

• Review and improve existing components — Terraform, pipelines, AWS infra — not only build new ones, and raise the bar on how the team delivers.

• Share the support/triage load and help reduce it through better automation and tooling.

Requirements

• Strong AWS experience and deep hands-on CI/CD expertise (GitHub Actions and/or Jenkins).

• Solid Infrastructure as Code background with Terraform (Terragrunt / Terramate a plus).

• Real Kubernetes / EKS experience, including Helm and GitOps (ArgoCD).

• A security-conscious mindset — comfortable reasoning about IAM, secrets, network exposure, and least-privilege access (a DevSecOps lean is a strong plus).

• The ability to design a solution, then adapt gracefully when constraints change ("now make it global", "now cost is the primary driver") — digging for context rather than getting flustered.

• Sound judgment on edge cases and incidents: traffic spikes 10x, a region goes down — how do you approach the change and handle the outage?

• Effective, deliberate use of AI tooling, with genuine understanding of what it produces and the ability to explain trade-offs it can't.