Cloud & Platform Engineer (AWS)

Job summary

The Platform Engineer will build and run the AWS foundation for a new AI-first HR and payroll platform, enabling engineering squads to deploy and operate services securely. The role covers AWS governance, infrastructure as code with CDK and CloudFormation, CI/CD and TypeScript developer tooling, observability, incident response, security and audit, and cost management.

Benefits

Qualifications

• Extensive hands-on experience building and running production workloads on AWS.
• Infrastructure as code with AWS CDK, written in TypeScript and Python, and CloudFormation.
• Experience building and maintaining CI/CD pipelines.
• Solid, hands-on TypeScript development experience.
• Broad working knowledge of core AWS services, including IAM, networking, compute, storage and monitoring.
• Scripting skills (for example Bash or Python) and comfort working on the command line.
• A good grasp of cloud security basics: least privilege, encryption and secrets management.
• Clear communication, and happy to support developers day to day.
• Experience with AWS Control Tower and AWS Organizations.
• React and Terraform experience

Responsibilities

• Build and maintain our AWS accounts, networking and shared services under AWS Control Tower and AWS Organizations.
• Help govern Control Tower guardrails, account provisioning and access through IAM Identity Center.
• Write and maintain infrastructure as code using AWS CDK (TypeScript and Python) and CloudFormation.
• Build and maintain our golden paths: reusable CDK constructs and deployment templates that give squads a paved, secure route from new service to production.
• Build and support deployment pipelines (for example GitHub Actions), with security checks built in.
• Take on, maintain and extend the internal deployment tooling our engineers have built, which is written in TypeScript with some React.
• Set up and maintain monitoring, logging, tracing, dashboards and alerting.
• Take part in incident response and on-call once we're in production, and follow through on post-incident actions.
• Make sure audit logging is in place and working across the estate (CloudTrail, AWS Config and central log storage), so we can evidence it for SOC2, PCI-DSS and GDPR.
• Apply our tagging standard, and help with cost reporting and budget alerts.

Skills

Certifications

Languages

Work schedule

Industry

Company size

Relocation