Senior Cloud Engineer

Supercell; Helsinki; On-site; EUR 60,000 - 80,000; Full time

Job summary

Supercell is seeking a talented individual for a cloud-focused role in Helsinki. The position involves designing production-ready golden paths, automating high-risk operations, and implementing security guardrails. Candidates should have strong knowledge of cloud computing and experience with tools like Terraform and GitHub Actions.

We value high autonomy, technical mastery, and a collaborative mindset. You will work closely with teams based in Helsinki and support a culture of mentoring and guiding engineers. Enthusiasm for games is a plus!

Qualifications

• Strong cloud computing and networking knowledge from at least one major cloud provider.
• Deep technical mastery across intersecting systems.
• Solid grounding in cloud security and common threat patterns.
• Hands-on experience with Terraform and GitHub Actions.
• Strong scripting and programming experience.
• Experience with cloud identity and access management.
• Familiarity with Internal Developer Platforms regarding security.
• Ability to influence beyond personal work.
• Capable of independently driving complex projects.
• Strong priority management even with incomplete data.

Responsibilities

• Design and maintain production-ready golden paths for infrastructure.
• Automate high-risk operations into self-service pipelines.
• Own governance and security guardrails for cloud resources.
• Enable safe AI-assisted development with guardrails.
• Create user-friendly documentation for developers and LLM agents.
• Mentor engineers and lead architectural reviews.
• Help teams optimize cloud usage and manage costs.
• Advise on cloud architecture and troubleshoot issues.

Skills

Cloud computing knowledge

Networking knowledge

Terraform

GitHub Actions

Scripting and programming

Cloud security

IAM policies

SSO and identity management

Internal Developer Platforms

Job description

What You\'ll Be Doing

• Build golden paths. Design and maintain opinionated, production-ready golden paths (think \"hosting in 15 minutes\") covering infrastructure, CI/CD, DNS, monitoring, auth, and storage. You\'ll back these with reusable IaC templates and patterns that other developers build on. The goal is to enable teams and individuals to provision and run what they need themselves; we provide the paved roads, templates, and guardrails rather than owning and operating their infrastructure.

• Automate high-risk operations into self-service. Turn manual operations (like account provisioning and deprovisioning, access grants and revocations, domain issuance) into deterministic, auditable pipelines triggered through self-service. Teams own their resources; we own the orchestration and guardrails, so changes run consistently and stay traceable across hundreds of accounts.

• Own governance and security guardrails. Design and implement cloud governance using vendors’ native and customer tooling for Service Control Policies, WAF, IAM, SSO/Okta access and account governance. Pair preventative controls with detective layers that surface anomalies, configuration drift, and unexpected behaviour before they become problems. Minimise risk without getting in developers\' way.

• Enable safe AI-assisted development. Build guardrails for AI coding tools and \"vibecoding\" workflows (such as secrets handling, scoped permissions, sandboxing) and define how AI agents safely access cloud resources with agent identities and least-privilege IAM

• Write opinionated docs for humans and agents. Create and maintain golden-path guidance, runbooks, and best practices that are equally consumable by developers and LLM agents (e.g. machine-readable/structured docs, MCP-style interfaces, and developer-portal content)

• Raise Supercell\’s game. Act as a force multiplier by mentoring other engineers, leading architectural reviews, and facilitating consensus during technical disagreements. Set the technical standards rather than just following them, and share learnings — including failures — openly through post-mortems.

• Support FinOps. Help teams use the cloud cost-efficiently by surfacing cost-optimisation opportunities, improving cost visibility, and supporting accountability for usage across teams and projects.

• Be a trusted partner to technical teams. Advise on cloud architecture, troubleshoot complex issues, and maintain close relationships across Supercell and with our cloud vendors. React quickly to emerging business and technical topics.

What You Have

• Strong cloud computing and networking knowledge, with deep experience from at least one major cloud provider (e.g. AWS, Google Cloud)
• Deep technical mastery across intersecting systems. You\'re the person others turn to for the hardest problems, but you also know when to route teams to the right internal expertise or external partners.
• Solid grounding in cloud security and the common threat patterns in modern cloud environments
• Hands-on experience with Terraform and GitHub Actions
• Strong scripting and programming experience used to automate tasks and build custom tooling
• Experience with cloud identity and access management, including IAM policies, roles, and permission boundaries across AWS and GCP.
• Experience with application level identity, such as SSO, OIDC, and identity providers like Okta.
• Familiarity with Internal Developer Platforms, including AI-assisted development tools, and a clear-eyed view of their security implications.
• A track record of influence beyond your own work: mentoring engineers, leading architectural reviews, and setting technical standards
• High autonomy. You identify and tackle problems before they\'re assigned, turn vague business pain points into technical roadmaps, and independently drive complex, ambiguous projects to completion.
• Comfortable managing priorities and tight deadlines, even when dealing with incomplete data.
• A humble, kind, and respectful attitude toward others and their work

Would Be Nice if You Also Have

• Experience from multiple hyperscalers and a feel for how they compare
• Experience securing AI agents, building MCP servers, or authoring agent-readable documentation
• Experience with workflow automation tooling (e.g. n8n, Temporal)
• Familiarity with Internal Developer Portals (e.g. Backstage)
• Hands-on experience with FinOps tooling, reporting, and cost-optimisation experience
• Experience with vendor management and direct collaboration with external partners
• Enthusiasm for games

Where You\'ll Be

This role is based in our Helsinki office. We value a collaborative work environment and genuine human interactions. You will work very closely with our other Helsinki-based teams.