Cloud Platforms Engineer

Pracovní nabídka

Join us as a Cloud Platforms Engineer and play a key role in shaping the foundation of our enterprise public cloud environment. You'll be responsible for building and governing scalable, secure, and automated cloud platforms that empower teams across the organization to innovate with confidence.

Working within the Platforms team, you'll design and manage cloud foundations such as landing zones, account and subscription structures, shared services, technical guardrails, and reusable infrastructure-as-code solutions. Your work will ensure our cloud environments are secure by default, compliant, cost-transparent, highly observable, and ready for seamless adoption by engineering, infrastructure, security, and business teams. This is a unique opportunity to drive cloud standardization and enable controlled self-service at enterprise scale.

What You'll Do:

Public Cloud Platform Engineering & Landing Zones

• Build, maintain, and operate enterprise public cloud landing zones and shared platform foundations.
• Manage cloud account, subscription, project, management group/folder, and environment structures.
• Enable controlled self-service cloud consumption through standard environment models, approved templates, automation, and documentation.

Cloud Governance, Guardrails & Standards

• Implement and maintain baseline cloud policies, technical guardrails, and configuration standards.
• Enforce mandatory controls for tagging, naming, logging, audit trails, encryption, allowed regions, resource types, backup, and compliance.
• Maintain lifecycle governance for cloud accounts, subscriptions, and projects, including ownership, review, cleanup, and decommissioning.

Platform Automation & Infrastructure as Code

• Build and maintain reusable infrastructure-as-code modules, templates, blueprints, and automation patterns for cloud platform services.
• Automate landing zone deployment, baseline configuration, policy assignment, logging setup, and guardrail implementation.
• Maintain version-controlled platform code and provide approved modules and patterns for DevOps teams while workload deployment remains outside this role.

Shared Cloud Services

• Design, implement, and operate shared cloud capabilities such as central logging, monitoring integrations, secrets/key management foundations, backup/DR baselines, and automation services.
• Prepare common platform services including container platform foundations, standard images, service catalog patterns, and cloud management tooling.
• Ensure shared services are secure, monitored, cost-visible, documented, and supportable, with operational handover to IT Operations.

Security, Compliance & Identity Guardrails

• Implement technical controls based on security policies, compliance requirements, and approved architecture standards.
• Govern cloud RBAC, service principals, managed identities, and privileged access guardrails in cooperation with Identity and Security teams.

Cloud Operations (L2/L3 Support)

• Provide advanced operational support for cloud foundations, shared services, guardrails, and platform automation.
• Troubleshoot complex public cloud issues, perform root cause analysis, and implement permanent fixes.
• Support incident, problem, and change management while continuously improving platform stability, supportability, governance, and automation.

What You'll Bring:

• Strong experience with public cloud platforms, especially platform engineering, landing zones, and cloud governance.
• Experience managing cloud account, subscription, project, folder, or management group structures.
• Hands-on experience implementing cloud guardrails, policies, tagging standards, logging baselines, compliance controls, and security hardening.
• Hands-on experience with infrastructure as code and automation.
• Understanding of cloud IAM/RBAC, privileged access, managed identities, service principals, and access governance from a cloud platform perspective.
• Understanding of public cloud networking concepts such as VPC/VNet, subnets, routing, private endpoints, DNS, ingress/egress, and hybrid connectivity.
• Experience with cloud monitoring, logging, audit trails, backup, recovery, and disaster recovery foundations.
• Ability to translate architecture, security, compliance, and operational requirements into implemented technical controls.
• Strong troubleshooting, documentation, and communication skills in complex enterprise environments. English on communication level.

We care about your well-being and professional growth. Here’s what we offer to make your experience with us truly rewarding:
Work-Life Balance: Enjoy flexible hours, the option to work from home, 5 weeks of vacation, 3 health days, and an extra day off to celebrate our company’s anniversary.
Benefits Package: Contribution to flexible benefits (Benefit Plus) that you can use for things like technology, multi-sport card, beauty, sports, travel, health services, or even pension contributions.
Rewards & Development: Earn up to 1000€ for referring a new colleague, access over 5,000 courses, join online language lessons, and enjoy performance-based bonuses. You’ll also have a personal budget to choose courses or conferences that help you grow professionally.
Supportive Environment: Take a day off to volunteer, use our free anonymous psychological counseling service, and enjoy access to our company’s products.
Modern Workplace: Work in a comfortable office with ergonomic furniture, a sunny summer terrace, and plenty of perks like free coffee, tea, and fresh orange juice every day. Our office is pet- and kid-friendly, has no dress code, and offers a discounted on-site restaurant. You can also park nearby at a discounted rate.
Community & Well-Being: Join in on philanthropy projects, where you can support a charity or non-profit organization of your choice with company-matched donations. Have fun at our team-building events, hackathons, Christmas parties, or summer celebrations.
Diversity & Inclusion: We’re committed to creating a workplace where everyone feels welcome, with fair recruitment practices that offer opportunities to all.