> Markdown version of [/jobs/ext/4579689-cloud-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4579689-cloud-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Platform Engineer

- **Company:** Hbx Group
- **Location:** Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Automation of Tests, Bash Shell, Cloud Computing, Cloud Engineering, Continuous Integration, Cursor, Software Debugging, DevOps, Github, Identity and Access Management, Subnetting, Virtual Private Networks (VPN), Python (Programming Language), Log Analysis, Machine Learning, Prometheus, Tripwire, Software Vulnerability Management, Datadog, Policy as Code, Scripting, Cloud Platform System, GitHub Copilot, AWS Security Fundamentals, System Availability, Delivery Pipeline, Grafana, Reliability of Systems, Generative AI, AWS Lambda, AI Coding Agents, Amazon Virtual Private Cloud (VPC), Gitlab-ci, Kubernetes, Rancher, Route53, Claude, Cloudwatch, Api Gateway, Terraform, GPT, Dynatrace, Serverless Computing, Docker, Static Application Security Testing, Vulnerability Analysis
- **Published:** November 5, 2026
- **Apply:** https://startup.jobs/cloud-engineer-uv09-hnvr-holdco-limited-10685391

## About the Role

* 5+ years of professional experience managing cloud platforms in production environments, with a primary focus on AWS.
 * Deep Terraform expertise: Demonstrable experience building reusable modules, managing remote state, handling drift, and implementing policy-as-code (e.g., OPA, Sentinel, or Checkov).
 * AI-First Mindset: Active experience using AI coding assistants (e.g., GitHub Copilot, Cursor, Claude/ChatGPT, Amazon Q Developer) to boost coding velocity, debug configuration errors, and draft documentation.
 * Strong networking fundamentals (VPCs, Subnets, Transit Gateways, Route53, VPNs, ALB/NLBs) and AWS security fundamentals (IAM roles, SCPs, KMS, Security Hub).
 * Solid hands-on experience with container ecosystems (Docker, Kubernetes/EKS, or ECS).
 * Proficiency in at least one scripting or automation language (Python, Bash, or Go).
 * Experience with CI/CD automation and GitOps principles., * Relevant AWS certifications (e.g., AWS Certified Solutions Architect - Professional or DevOps Engineer - Professional).
 * Experience building or maintaining an Internal Developer Platform (IDP) using tools like Backstage or similar self-service portals.
 * Experience with Cloud FinOps tools and cloud cost governance strategies (Infracost, AWS Cost Explorer, Kubecost).
 * Experience setting up Retrieval-Augmented Generation (RAG) pipelines or hosting machine learning models on AWS (SageMaker, Bedrock).

## Description

We are looking for a Cloud Platform Engineer to design, scale, and maintain our AWS cloud infrastructure. In this role, you will champion infrastructure as code (IaC) using Terraform, streamline developer velocity through robust CI/CD pipelines, and ensure high availability, security, and cost efficiency., Cloud Architecture & Infrastructure as Code

 * Design, provision, and maintain secure, scalable, and resilient multi-account AWS architectures.
 * Define and enforce modular, reusable Terraform configurations with strict state management and automated testing.
 * Manage containerized workloads using Amazon ECS / EKS or Rancher and serverless services (AWS Lambda, API Gateway).

AI-Augmented Engineering & Operations

 * Integrate AI tools into your daily workflow to generate and review IaC, automate repetitive tasks, and draft infrastructure test cases.
 * Experiment with and implement AI-driven tooling for log analysis, root cause investigation, automated triage, and internal developer support runbooks.
 * Guide and mentor fellow engineers on safe, pragmatic uses of AI coding assistants to increase team throughput without compromising security.

CI/CD & Developer Enablement

 * Build and optimize deployment pipelines (GitHub Actions, GitLab CI, or ArgoCD) with built-in security scans (SAST, Trivy, tfsec/trivy-iac) and automated testing.
 * Collaborate closely with product engineering teams to eliminate deployment friction and improve internal platform self-service.

Observability, Reliability & Security

 * Establish comprehensive monitoring, alerting, and distributed tracing across all services using CloudWatch, Prometheus, Grafana, Datadog, or equivalent tooling.
 * Implement cloud security best practices: least-privilege IAM policies, KMS encryption, secret management, VPC design, and automated vulnerability management.
 * Participate in a lightweight, blameless on-call rotation and lead post-incident reviews to continuously improve system reliability.
 * Monitor cloud spend, identify waste, and drive cost-optimization (FinOps) initiatives.