Cloud Engineer

Paymentology; Madrid; On-site; EUR 70,000 - 90,000; Full time

Job summary

Paymentology is seeking a Cloud Engineer to strengthen its AWS cloud foundation with a focus on governance, security, and scalable IaC.

You will collaborate with Platform and Security teams to deliver secure, compliant cloud platforms powering global payments. The role involves building and maintaining infrastructure across multiple environments and ensuring operational excellence.

Qualifications

• Strong hands-on AWS expertise with multi-account environments, Landing Zone governance and cloud security best practices.
• Deep understanding of IAM governance, including role-based access control and least privilege policy design.
• Advanced experience with Terraform, including reusable modules, multi-environment deployments and CI/CD governance.

Responsibilities

• Support and strengthen Paymentology's AWS foundation with multi-account governance and Landing Zone controls.
• Design, implement, and maintain secure IAM roles, policies, and access controls.
• Develop, modularize, and govern Terraform-based infrastructure as code for scalable deployments.
• Integrate infrastructure automation into CI/CD pipelines for consistent environments.
• Manage core AWS services (API Gateway, Lambda, CloudFront, Route 53, ALB/NLB).
• Collaborate with Platform Engineering and Security teams to align standards and reliability.
• Support incident response, RCA, and outages to maintain high availability.
• Maintain runbooks and infrastructure standards in Confluence for long-term sustainability.

Skills

AWS multi-account governance

IAM governance

Kubernetes / EKS concepts

Tools

Terraform

API Gateway

Lambda

CloudFront

Route 53

ALB/NLB

Job description

At Paymentology, we're redefining what's possible in the payments space. As the first truly global issuer-processor, we give banks and fintechs the technology and talent to launch and manage Mastercard and Visa cards at scale - across more than 60 countries.

Our advanced, multi-cloud platform delivers real-time data, unmatched scalability, and the flexibility of shared or dedicated processing instances. It's this global reach and innovation that sets us apart.

We're looking for a Cloud Engineer to strengthen Paymentology's cloud infrastructure foundations, with a strong focus on AWS multi-account governance, IAM security controls, and Infrastructure as Code automation. This role plays a critical part in building secure, scalable cloud platforms that power our global payment solutions, while working closely with Platform and Security teams to ensure operational excellence and compliance.

What you get to do

• Support and enhance Paymentology's AWS cloud foundation, including multi-account governance using AWS Organizations, Landing Zone frameworks, and Service Control Policy guardrails.
• Design, implement, and maintain secure IAM roles, policies, and access controls aligned with least privilege and compliance requirements.
• Develop, modularize, and govern Terraform-based Infrastructure as Code to enable scalable, repeatable, and secure infrastructure deployments.
• Integrate infrastructure automation into CI/CD pipelines to ensure consistency across development, testing, and production environments.
• Implement and support core AWS infrastructure services such as API Gateway, Lambda, CloudFront, Route 53, and application and network load balancers.
• Collaborate closely with Platform Engineering and Security teams to align infrastructure standards, governance controls, and operational reliability.
• Support troubleshooting, incident response, and root cause analysis across cloud environments to maintain high availability and performance.
• Maintain clear Confluence documentation, operational runbooks, and infrastructure standards to support long-term platform sustainability.

Requirements

• Strong hands-on AWS expertise with a focus on multi-account environments, Landing Zone governance, and cloud security best practices.
• Deep understanding of IAM governance, including role-based access control, least privilege policy design, and cross-account access patterns.
• Advanced experience with Terraform, including reusable module development, multi-environment deployments, and IaC governance through CI/CD.
• Working knowledge of modern AWS services such as Lambda, API Gateway, CloudFront, Route 53, and ALB/NLB.
• Experience supporting production cloud environments with strong troubleshooting and incident response capabilities.
• Familiarity with compliance-driven environments such as PCI DSS or ISO 27001 is highly advantageous.
• General exposure to Kubernetes or EKS concepts is beneficial, although deep expertise is not required.

What you can look forward to

At Paymentology, it's not just about building great payment technology, it's about building a company where people feel they belong and their work matters. You'll be part of a diverse, global team that's genuinely committed to making a positive impact through what we do. Whether you're working across time zones or getting involved in initiatives that support local communities, you'll find real purpose in your work and the freedom to grow in a supportive, forward-thinking environment.