We build and run web platforms for several clients across multiple clouds. Each client gets its own environments, often inside the client’s own cloud account. You will own the infrastructure end to end: provisioning, delivery pipelines, access, security and observability, and you will help turn our setup into a repeatable standard for new clients.
What you will do
• Provision and operate staging and production environments on AWS and GCP, and dev environments and sandboxes on Hetzner and OVH.
• Run container platforms: Kubernetes (EKS, some GKE), ECS/Fargate, Cloud Run and Docker Compose on VMs.
• Keep all infrastructure as code (Terraform / Terragrunt) with reusable modules,
plan/apply in CI.
• Deliver applications through GitOps (Argo CD, Helm) and CI/CD (GitHub Actions, GitLab CI, Cloud Build), including production releases with approvals and rollback.
• Manage secrets, identity and access as code: SSO, SAML, role-based access, least privilege, access to client-owned accounts.
• Protect environments: CDN/WAF at the edge, zero-trust access to non-public services, private connectivity and fixed egress IPs for allowlists.
• Operate data stores and messaging: PostgreSQL, Redis, ClickHouse, NATS (JetStream); migrations, backups, connection pooling.
• Build and maintain monitoring, logging, tracing and alerting; respond to production ncidents (best-effort on-call).
• Support developers: unblock builds and deploys, dev and sandbox environments, localto-cloud workflows.
• Write clear runbooks and documentation so others can repeat and audit your work.
