About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Platform Engineer based in Germany.
We are looking for an experienced Platform Engineer to take ownership of critical infrastructure and developer delivery systems across a growing engineering organization. In this role, you will shape the architecture, scalability, and security of the CI/CD platform while improving how teams build, deploy, and operate software. You will work across cloud infrastructure, automation, Kubernetes, and platform security to create reliable, reusable solutions that support multiple products. You will have the autonomy to make architectural decisions, evaluate technical trade-offs, and respond to evolving business and production requirements. Working in a collaborative, multinational environment, you will combine hands-on engineering with technical leadership to improve platform reliability, developer productivity, and operational excellence.
Responsibilities
- Own, maintain, and evolve the CI/CD platform, including GitHub Actions with self-hosted runners powered by RunsOn, and lead the ongoing migration and modernization of the Jenkins infrastructure.
- Define and implement platform architecture decisions, balancing scalability, reliability, maintainability, security, and cost.
- Build, maintain, and improve Infrastructure as Code across AWS using Terraform, Terragrunt, and Terramate, following reusable and standardized component patterns inspired by CloudPosse.
- Design and implement secure-by-default delivery pipelines, including branch protection, pull request approval rules, secrets management with SOPS, and production approval workflows.
- Strengthen cloud security by transitioning from IAM users and long-lived access keys toward role-based access, enforcing least-privilege principles.
- Identify and remediate risks related to exposed network ports, unmanaged credentials, insufficient access controls, and missing security guardrails.
- Support and improve Kubernetes-based infrastructure using Amazon EKS, Helm, and ArgoCD, promoting reliable deployments and consistent GitOps practices.
- Contribute to the development and maintenance of the observability stack, including Grafana and Prometheus.
- Enhance the internal developer platform and tooling, including Backstage.
- Review, refactor, and optimize existing Terraform modules, cloud infrastructure, and delivery pipelines.
- Participate in platform support and incident triage, investigating production issues and implementing long-term improvements.
- Develop automation and self-service tooling that reduces manual intervention.
- Anticipate and address complex operational scenarios, including significant traffic spikes, regional outages, and changing infrastructure requirements.
- Apply AI-assisted engineering tools thoughtfully, validating generated outputs.
- Share technical knowledge, establish engineering best practices.
Requirements
- Extensive hands-on experience with AWS cloud infrastructure, including designing, deploying, securing, and operating production environments.
- Deep practical expertise in CI/CD systems, particularly GitHub Actions and/or Jenkins.
- Strong Infrastructure as Code experience with Terraform; familiarity with Terragrunt, Terramate, and reusable infrastructure component patterns is a significant advantage.
- Proven experience with Kubernetes and Amazon EKS, including workload deployment, Helm, and GitOps workflows using ArgoCD.
- A strong security-first mindset, with a solid understanding of AWS IAM, role-based access control, secrets management, network security, and least-privilege access. Experience with DevSecOps practices is highly valued.
- Ability to design robust, maintainable technical solutions while adapting to changing constraints.
- Strong troubleshooting and incident-management skills.
- Understanding of high availability, scalability, disaster recovery, regional resilience, and strategies for handling sudden increases in production traffic.
- Experience reviewing and improving existing infrastructure and automation.
- Familiarity with observability and monitoring tools such as Grafana and Prometheus, as well as internal developer platforms such as Backstage.
- Strong problem-solving and analytical skills.
- Effective communication and collaboration skills in a distributed, multinational environment.
- A proactive, adaptable, and ownership-driven approach.