The posting
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Platform Engineer based in Italy.
We are looking for an experienced Platform Engineer to take ownership of critical infrastructure and developer delivery systems across a growing engineering organization. In this role, you will shape the architecture, scalability, and security of the CI/CD platform while improving how teams build, deploy, and operate software. You will work across cloud infrastructure, automation, Kubernetes, and platform security to create reliable, reusable solutions that support multiple products. You will have the autonomy to make architectural decisions, evaluate technical trade-offs, and respond to evolving business and production requirements. Working in a collaborative, multinational environment, you will combine hands-on engineering with technical leadership to improve platform reliability, developer productivity, and operational excellence. This is an opportunity to make a lasting impact on engineering practices while helping build a more secure, scalable, and efficient delivery ecosystem.
Accountabilities
- Own, maintain, and evolve the CI/CD platform, including GitHub Actions with self-hosted runners powered by RunsOn, and lead the ongoing migration and modernization of the Jenkins infrastructure.
- Define and implement platform architecture decisions, balancing scalability, reliability, maintainability, security, and cost as requirements evolve.
- Build, maintain, and improve Infrastructure as Code across AWS using Terraform, Terragrunt, and Terramate, following reusable and standardized component patterns inspired by CloudPosse.
- Design and implement secure-by-default delivery pipelines, including branch protection, pull request approval rules, secrets management with SOPS, and production approval workflows for critical deployments.
- Strengthen cloud security by transitioning from IAM users and long-lived access keys toward role-based access, enforcing least-privilege principles, and addressing infrastructure security gaps.
- Identify and remediate risks related to exposed network ports, unmanaged credentials, insufficient access controls, and missing security guardrails.
- Support and improve Kubernetes-based infrastructure using Amazon EKS, Helm, and ArgoCD, promoting reliable deployments and consistent GitOps practices.
- Contribute to the development and maintenance of the observability stack, including Grafana and Prometheus, to improve monitoring, troubleshooting, and system reliability.
- Enhance the internal developer platform and tooling, including Backstage, to simplify workflows and improve the developer experience across engineering teams.
- Review, refactor, and optimize existing Terraform modules, cloud infrastructure, and delivery pipelines, identifying opportunities to improve quality, consistency, and operational efficiency.
- Participate in platform support and incident triage, investigating production issues, identifying root causes, and implementing long-term improvements to prevent recurrence.
- Develop automation and self-service tooling that reduces manual intervention, streamlines support processes, and increases engineering team productivity.
- Anticipate and address complex operational scenarios, including significant traffic spikes, regional outages, and changing infrastructure requirements, while maintaining service continuity.
- Apply AI-assisted engineering tools thoughtfully, validating generated outputs, understanding their limitations, and making sound technical decisions based on independent judgment.
- Share technical knowledge, establish engineering best practices, and contribute to a welcoming, collaborative, and continuously improving platform team.
- Extensive hands-on experience with AWS cloud infrastructure, including designing, deploying, securing, and operating production environments.
- Deep practical expertise in CI/CD systems, particularly GitHub Actions and/or Jenkins, including pipeline architecture, automation, runner management, and delivery workflow optimization.
- Strong Infrastructure as Code experience with Terraform; familiarity with Terragrunt, Terramate, and reusable infrastructure component patterns is a significant advantage.
- Proven experience with Kubernetes and Amazon EKS, including workload deployment, Helm, and GitOps workflows using ArgoCD.
- A strong security-first mindset, with a solid understanding of AWS IAM, role-based access control, secrets management, network security, and least-privilege access. Experience with DevSecOps practices is highly valued.
- Ability to design robust, maintainable technical solutions while adapting to changing constraints, such as global infrastructure requirements, cost optimization, or evolving reliability targets.
- Strong troubleshooting and incident-management skills, with the ability to assess complex failure scenarios, investigate root causes, and make effective decisions under pressure.
- Understanding of high availability, scalability, disaster recovery, regional resilience, and strategies for handling sudden increases in production traffic.
- Experience reviewing and improving existing infrastructure and automation, with an emphasis on code quality, reusable components, operational consistency, and long-term maintainability.
- Familiarity with observability and monitoring tools such as Grafana and Prometheus, as well as internal developer platforms such as Backstage.
- Strong problem-solving and analytical skills, with the ability to evaluate technical trade-offs and explain architectural decisions clearly.
- Effective communication and collaboration skills, with the ability to work across teams, share knowledge, and contribute to technical discussions in a distributed, multinational environment.
- A proactive, adaptable, and ownership-driven approach, with the confidence to investigate unfamiliar problems, ask thoughtful questions, and take responsibility for outcomes.
- Experience using AI-assisted development tools effectively, with the technical judgment to validate generated code, identify limitations, and explain the reasoning behind implementation choices.
- A commitment to continuous improvement, engineering excellence, and building secure, reliable, and developer-friendly infrastructure.
- Competitive compensation: A compensation package aligned with your experience, technical expertise, and the scope of the role.
- Meaningful technical ownership: The opportunity to make architectural decisions and directly influence the evolution of critical infrastructure and delivery systems.
- Challenging engineering work: Exposure to complex cloud infrastructure, CI/CD modernization, Kubernetes, platform security, and large-scale operational challenges.
- Collaborative international environment: Work alongside colleagues across multiple locations in a close-knit, welcoming, and supportive team.
- Professional development: Opportunities to deepen your expertise in cloud platforms, infrastructure automation, security, and modern software delivery practices.
- Technical autonomy: The freedom to evaluate alternatives, solve challenging engineering problems, and implement improvements with measurable impact.
- Continuous innovation: Opportunities to experiment with modern developer tooling, automation, and AI-assisted engineering workflows.
- Inclusive workplace culture: A commitment to diversity, equal opportunity, and creating an environment where employees feel respected and supported.
- Career growth: The opportunity to expand your technical leadership, architectural decision-making, and platform engineering expertise as the organization evolves.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
