> Markdown version of [/jobs/ext/2667998-cloud-platform-engineer-aws](https://www.wearedevelopers.com/jobs/ext/2667998-cloud-platform-engineer-aws). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Platform Engineer - AWS - **Company:** ClearRoute - **Location:** London, UK - **Salary:** £90,709.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Proxy Servers, Computing Platforms, Microsoft Azure, Cloud Engineering, Databases, Linux, Domain Name System (DNS), Github, Network Troubleshooting, PostgreSQL, Load Testing, OpenID, Role-Based Access Control, Security Information and Event Management, Single Sign-On, Management of Software Versions, Cloud Platform System, Caching, Firewalls (Computer Science), Kubernetes, Terraform, Software Version Control, Docker - **Published:** September 2, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5865780959 ## About the Role * Terraform at production quality - module authorship, composition, versioning, state management, drift handling and maintainable infrastructure code. On this platform, every workspace and template is Terraform-defined * Managed Kubernetes - AKS or EKS experience, including Pod Security Standards or equivalent admission controls, NetworkPolicy, RBAC, node pools, resource governance, secrets handling and troubleshooting * Container image engineering - hardened base images, registries, caching, and image builds inside Kubernetes without privileged containers or a mounted Docker socket * Linux and network troubleshooting - overlay networking, NAT traversal, DNS, HTTP proxy behaviour, TLS, package access, source-control connectivity and remote responsiveness * Identity integration - OIDC single sign-on, group and role mapping, and ideally SCIM provisioning * Control implementation - comfortable implementing a control design owned by others, testing it honestly, and reporting plainly when controls do not behave as expected Desirable Experience: * Coder or comparable cloud development environments such as GitHub Codespaces, Gitpod, Microsoft Dev Box or Daytona * Dev containers, @devcontainers/cli and Envbuilder-style patterns where no Docker daemon is available * Container isolation beyond the shared kernel, egress allowlisting, TLS inspection and related control limits * Load testing, cost engineering, idle reclamation, quota management and production platform operations * AWS alongside Azure, cloud portability, and regulated environments where controls must be evidenced ## Description ClearRoute has been engaged by a client to lead a strategic platform engineering initiative aimed at fundamentally modernising their path to production. The project centres on building an AI-enabled delivery platform on AWS that reduces friction, enforces consistency, and embeds governance directly into the engineering lifecycle. Join a small team evaluating Coder as a self-hosted cloud development environment: a governed workspace model where source, tooling, builds and AI coding agents run away from the corporate endpoint. The proof of concept runs on AKS, but the production target may be a different cloud, so portability is a requirement of the work. This is the hands-on build engineer working inside an architecture and security control model owned elsewhere: implement the platform, test the controls, and produce decision-grade evidence on developer experience, containment, performance, cost and operational viability., * Coder control plane - build and operate a highly available Coder deployment on AKS, with managed PostgreSQL, provisioner separation where appropriate, and OIDC single sign-on integrated with the identity provider * Golden-path templates - build one or two production-quality Terraform workspace templates on hardened base images, choosing and evidencing the appropriate dev-container route: Docker-based where permitted, or Envbuilder where a Docker daemon is prohibited * Connectivity and containment - provide reliable access to source control, package registries, internal APIs and databases while implementing specified controls: Agent Firewall egress allowlisting, default-deny NetworkPolicy, SSH port-forward restrictions, managed secrets and SIEM audit events * Scale, cost and developer experience - load test against the vendor sizing envelope, tune prebuilds, autostop, dormancy, quotas and warm capacity, and measure cold-start time, responsiveness and access friction with a pilot engineering group * Portability and evidence - keep the build transferable across cloud platforms and produce clear evidence of what was built, how it behaves, where assumptions remain, and what would be required for production operation * Operational documentation - produce clear written material covering platform design, implementation choices, control results, operational runbooks, known limitations and recommendations for any production phase ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Building a Cloud Platform Where Everything is Just Another Kubernetes Resource](https://www.wearedevelopers.com/videos/100137-building-a-cloud-platform-where-everything-is-just-another-kubernetes-resource) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)