> Markdown version of [/jobs/ext/2724273-platform-engineer](https://www.wearedevelopers.com/jobs/ext/2724273-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer - **Company:** Holcim - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, Encodings, Cyber Security, Databases, Continuous Integration, Data as a Services, Software Design Patterns, Linux, Network Address Translation, Domain Name System (DNS), Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Key Management, Network Architecture, Network Planning and Design, Role-Based Access Control, Cloud Services, Ansible, Runbook, Software Vulnerability Management, Policy as Code, Data Logging, Network Switches, Load Balancing, Cloud Platform System, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Infrastructure Automation Frameworks, Multiaccess Edge Computing, Software Coding, Firewall Services Module, Terraform, Software Version Control - **Published:** September 5, 2026 - **Apply:** https://careers.holcimgroup.com/talentcommunity/apply/1371329457/?locale=en_US ## About the Role * Planning and foresight. Takes an ambiguous requirement, determines what it actually requires, sequences the work, identifies dependencies and risks, and commits to deliverables and dates before starting. Assessed explicitly during selection., * GCP at design depth: IAM, networking, data services, security and cost modelling. * Network architecture: VPC design, DNS, load balancing, private connectivity, firewalling. * Linux and container operations at diagnostic level. * CI/CD pipeline design and implementation. * AWS, edge computing, or industrial/OT environments. * Manufacturing, plant or industrial context. * Regulated or multi-jurisdiction environments (GDPR, NIS2, ISO 27001). * Terraform, Ansible or equivalent infrastructure-as-code tooling. ## Description Deliver a multi-cloud and edge platform on which Holcim's business products are developed and run, at enterprise quality and startup efficiency. The measurable outcome is product teams building, deploying and operating independently, on infrastructure that is secure, reliable, compliant and cost-effective. The role sits within Group IT and delivers through the organisation, not around it: in close collaboration with product teams, corporate security, legal and data privacy, finance, and regional and global IT, and aligned with Holcim policies, standards and legal framework., * Delivers a predictable volume of work across the year, and holds it under pressure. * Measured by outcomes delivered, not activity performed. * Reduces the team's total workload through simplification and automation. * Unblocks colleagues rather than becoming a dependency. Quality * Work is correct, verifiable and maintainable. Rework is the exception. * Non-trivial work is specified in writing and peer-reviewed before implementation. * Documented to the standard another engineer needs to operate and extend it. * Root causes are fixed in code and configuration. Alerts, workarounds and manual procedures are not permanent solutions. Customer orientation * Product teams are the customer. Their ability to work independently is the measure of whether a service is finished. * Understands the business purpose of the work and challenges requests that would not achieve it. * Recurring support demand is a design defect to remove, not a workload to absorb. * Commits to timeframes and flags slippage before the deadline, not after. Engineering practice * Applies established practice by default: infrastructure as code, policy as code, version control, testing, peer review, least privilege, defence in depth, documented decisions. * Keeps current with cloud platform and tooling evolution and brings improvements into the team. * Works within the standards framework and improves it. Working around it is not an alternative. Original thinking * Proposes new approaches where existing ones are inadequate, and challenges solutions that no longer fit. * Ideas are anchored in the expected result, the real constraints and established practice - not novelty for its own sake. * Simplification counts. Removing a system, a step or a dependency is worth as much as adding a capability. * Innovation is delivered inside Holcim's standards and policy framework. Proactive planning * Scopes ambiguous requirements, sequences the work, identifies dependencies and risks, and commits to deliverables and dates before starting. * Estimates against real available capacity, not optimistic capacity. * Raises capacity limits, expiring dependencies, security exposure and architectural risk before they become incidents. * Identifies what needs improving and drives it, rather than waiting to be assigned. Professional maturity * Owns outcomes, not tasks. Where resolution depends on another team, drives it to closure there. * Communicates facts early and accurately, including when the news is bad. * Disagrees with reasoning, then commits to the decision taken. * Remains composed and methodical during incidents., * Provision and manage cloud and edge infrastructure end to end as code - networking, compute, storage, databases, identity, secrets. * Develop and extend the in-house platform framework that provisions, configures and governs every platform service: policy enforcement at authoring time, safety gates and dry-run control ahead of destructive operations, verification of intended against actual state, and immutable audit evidence. * Encode standards and procedures as executable controls, so non-compliant configurations cannot be created rather than being detected afterwards. * Build and maintain the self-service interfaces through which product teams provision and configure their own resources, without a ticket and without platform-team involvement. * Contribute reusable tooling, templates and shared components that other engineers and product teams adopt. * Peer-review other engineers' specifications and code. Architecture * Design platform architecture and capacity across cloud and edge. * Design network architecture: VPC, DNS, load balancing, NAT, VPN, interconnect, private connectivity, firewall rules. * Design identity and access architecture: IAM model, service account governance, access enforcement. * Design security architecture: WAF, key management, secrets, endpoint protection, vulnerability management. * Evaluate and select cloud services and technologies; maintain the platform technology stack. * Produce and maintain architecture documentation and decision records. Operations * Operate the services you design and build, across their full lifecycle. * Lead infrastructure incident response: diagnosis, root cause analysis, resolution, post-incident review. * Design and maintain monitoring, logging, tracing and alerting across all environments. * Plan and execute preventive maintenance, patching, upgrades and security remediation. * Manage platform cost: sizing, optimisation, cost reporting per product. Product Team Enablement * Act as technical contact for assigned product teams. * Onboard product teams onto platform services and self-service capabilities. * Diagnose and resolve platform-side integration issues. Standards, Governance and Compliance * Apply and maintain the engineering standards, procedures and templates that govern all platform work. * Produce and maintain architecture documentation, runbooks, playbooks and service documentation. * Maintain traceability from ticket to implementation to audit record. * Support audit and compliance evidence across GDPR, NIS2, ISO 27001 and local regulatory requirements. * Work with corporate security, legal, data privacy and global IT on controls that span organisational boundaries., * Review and approve product architecture at the architecture review gate, before development starts. * Own the approved technology catalogue for product teams: technologies, versions and configurations supported. * Define coding standards, design patterns and CI/CD pipeline patterns used by product teams. * Define and validate the resource and access model for each product workload. Technical Leadership * Act as primary technical reference for platform architecture decisions. * Set direction for platform operations, performance, security posture and cost. * Coach product teams on engineering quality and secure development practice. * Mentor engineers through architecture, worked example and peer review., * Production software development in Python. Maintained, peer-reviewed modules that other engineers depend on. * Production ownership of cloud infrastructure, including accountability for incident response and root cause resolution. * Infrastructure and policy as code across the full delivery path - provisioning, configuration, deployment, verification, evidence. * Breadth across technical domains. No single-domain specialisation, and no second-line team to escalate to. * Written technical communication that product owners, security architects and peer reviewers can act on without rework. ## Related Videos - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Reducing Cognitive Overload Through Platform Engineering](https://www.wearedevelopers.com/videos/679-reducing-cognitive-overload-through-platform-engineering) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [MLops – Deploying, Maintaining And Evolving Machine Learning Models in Production](https://www.wearedevelopers.com/magazine/115-mlops-deploying-maintaining-and-evolving-machine-learning-models-in-production)