Staff Platform Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Platform Engineer based in Portugal. We are looking for an experienced Platform Engineer to take ownership of critical infrastructure and developer delivery systems across a growing engineering organization. In this role, you will shape the architecture, scalability, and security of the CI/CD platform while improving how teams build, deploy, and operate software. You will work across cloud infrastructure, automation, Kubernetes, and platform security to create reliable, reusable solutions that support multiple products. You will have the autonomy to make architectural decisions, evaluate technical trade-offs, and respond to evolving business and production requirements. Working in a collaborative, multinational environment, you will combine hands-on engineering with technical leadership to improve platform reliability, developer productivity, and operational excellence. This is an opportunity to make a lasting impact on engineering practices while helping build a more secure, scalable, and efficient delivery ecosystem. Accountabilities - Own, maintain, and evolve the CI/CD platform, including GitHub Actions with self-hosted runners powered by RunsOn, and lead the ongoing migration and modernization of the Jenkins infrastructure. - Define and implement platform architecture decisions, balancing scalability, reliability, maintainability, security, and cost as requirements evolve. - Build, maintain, and improve Infrastructure as Code across AWS using Terraform, Terragrunt, and Terramate, following reusable and standardized component patterns inspired by CloudPosse. - Design and implement secure-by-default delivery pipelines, including branch protection, pull request approval rules, secrets management with SOPS, and production approval workflows for critical deployments.

- Strengthen cloud security by transitioning from IAM users and long-lived access keys toward role-based access, enforcing least-privilege principles, and addressing infrastructure security gaps. - Identify and remediate risks related to exposed network ports, unmanaged credentials, insufficient access controls, and missing security guardrails. - Support and improve Kubernetes-based infrastructure using Amazon EKS, Helm, and ArgoCD, promoting reliable deployments and consistent GitOps practices. - Contribute to the development and maintenance of the observability stack, including Grafana and Prometheus, to improve monitoring, troubleshooting, and system reliability. - Enhance the internal developer platform and tooling, including Backstage, to simplify workflows and improve the developer experience across engineering teams. - Review, refactor, and optimize existing Terraform modules, cloud infrastructure, and delivery pipelines, identifying opportunities to improve quality, consistency, and operational efficiency. - Participate in platform support and incident triage, investigating production issues, identifying root causes, and implementing long-term improvements to prevent recurrence. - Develop automation and self-service tooling that reduces manual intervention, streamlines support processes, and increases engineering team productivity. - Anticipate and address complex operational scenarios, including significant traffic spikes, regional outages, and changing infrastructure requirements, while maintaining service continuity. - Apply AI-assisted engineering tools thoughtfully, validating generated outputs, understanding their limitations, and making sound technical decisions based on independent judgment. - Share technical knowledge, establish engineering best practices, and contribute to a welcoming, collaborative, and continuously improving platform team.