We are looking for a Cloud Platform Engineer to design, scale, and maintain our AWS cloud infrastructure. In this role, you will champion infrastructure as code (IaC) using Terraform, streamline developer velocity through robust CI/CD pipelines, and ensure high availability, security, and cost efficiency.

We actively embrace AI-assisted engineering. We expect you to leverage modern generative AI tooling (e.g., GitHub Copilot, Cursor, LLMs, automated agents) to accelerate code generation, generate test suites, optimize documentation, and augment incident troubleshooting and platform support.

Key Responsibilities

Cloud Architecture & Infrastructure as Code

- Design, provision, and maintain secure, scalable, and resilient multi-account AWS architectures.
- Define and enforce modular, reusable Terraform configurations with strict state management and automated testing.
- Manage containerized workloads using Amazon ECS / EKS or Rancher and serverless services (AWS Lambda, API Gateway).

AI-Augmented Engineering & Operations

- Integrate AI tools into your daily workflow to generate and review IaC, automate repetitive tasks, and draft infrastructure test cases.
- Experiment with and implement AI-driven tooling for log analysis, root cause investigation, automated triage, and internal developer support runbooks.
- Guide and mentor fellow engineers on safe, pragmatic uses of AI coding assistants to increase team throughput without compromising security.

CI/CD & Developer Enablement

- Build and optimize deployment pipelines (GitHub Actions, GitLab CI, or ArgoCD) with built-in security scans (SAST, Trivy, tfsec/trivy-iac) and automated testing.
- Collaborate closely with product engineering teams to eliminate deployment friction and improve internal platform self-service.

Observability, Reliability & Security

- Establish comprehensive monitoring, alerting,



and distributed tracing across all services using CloudWatch, Prometheus, Grafana, Datadog, or equivalent tooling.
- Implement cloud security best practices: least-privilege IAM policies, KMS encryption, secret management, VPC design, and automated vulnerability management.
- Participate in a lightweight, blameless on-call rotation and lead post-incident reviews to continuously improve system reliability.
- Monitor cloud spend, identify waste, and drive cost-optimization (FinOps) initiatives.

Required Qualifications

- 5+ years of professional experience managing cloud platforms in production environments, with a primary focus on AWS.
- Deep Terraform expertise: Demonstrable experience building reusable modules, managing remote state, handling drift, and implementing policy-as-code (e.g., OPA, Sentinel, or Checkov).
- AI-First Mindset: Active experience using AI coding assistants (e.g., GitHub Copilot, Cursor, Claude/ChatGPT, Amazon Q Developer) to boost coding velocity, debug configuration errors, and draft documentation.
- Strong networking fundamentals (VPCs, Subnets, Transit Gateways, Route53, VPNs, ALB/NLBs) and AWS security fundamentals (IAM roles, SCPs, KMS, Security Hub).
- Solid hands-on experience with container ecosystems (Docker, Kubernetes/EKS, or ECS).
- Proficiency in at least one scripting or automation language (Python, Bash, or Go).
- Experience with CI/CD automation and GitOps principles.

Preferred / Nice-to-Have

- Relevant AWS certifications (e.g., AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional).
- Experience building or maintaining an Internal Developer Platform (IDP) using tools like Backstage or similar self-service portals.
- Experience with Cloud FinOps tools and cloud cost governance strategies (Infracost, AWS Cost Explorer, Kubecost).
- Experience setting up Retrieval-Augmented Generation (RAG) pipelines or hosting machine learning models on AWS (SageMaker, Bedrock).

📌 Cloud Engineer (España)
🏢 Roiback
📍 España