Senior Cloud Platform Engineer AWS & Terraform Expert

Cloud Protection by WithSecure; Helsinki; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible work arrangements

Work abroad up to 30 days per year

Paid sick leave from day one

Mental health support

Continuous learning

Job summary

Cloud Protection by WithSecure in Helsinki seeks a Senior Cloud Platform Engineer to own the AWS foundation for CPSF. You will design and implement the multi-account landing zone, build IaC in Terraform, and ensure secure production readiness across regions.

The role spans networking, IAM, encryption, observability, and CI/CD with a focus on compliance and risk-aware decision making. Hybrid work in Helsinki, fluent English, and hands-on experience with migration of live workloads are key.

Qualifications

• Substantial hands-on experience building and running production AWS at multi-account, multi-region scale.
• Deep Terraform experience, incl. state, imports, module design, and review workflow.
• Breadth across networking, IAM, encryption and key management, logging and audit, CI/CD, and cost.

Responsibilities

• Design, build, and operate the AWS landing zone with multi-account setup and guardrails.
• Own IaC estate in Terraform including modules and environment layers.
• Build and maintain network: multi-region VPCs, centralized egress, DNS, private connectivity.
• Own data protection and identity: encryption, key management, SSO federation, least privilege.
• Own the observability plane: logging, configuration recording, security findings, dashboards, alerts.
• Own delivery: OIDC deployment from CI, registries, policy checks on changes.
• Plan and migrate live workloads into the new environment with rehearsals and cutover.
• Build a controls baseline mapped to SOC 2/ISO 27001 and ensure query-based reporting.
• Flag irreversible decisions early and take end-to-end ownership.

Skills

AWS architecture

Terraform

Networking

IAM & encryption

Logging & audit

CI/CD

Cost management

Migration experience

Decision ownership

Documentation literacy

Tools

Terraform

AWS

CloudFormation

AWS Control Tower

Job description

Cloud Protection by WithSecure in Helsinki seeks a Senior Cloud Platform Engineer to own the AWS foundation for CPSF. You will design and implement the multi-account landing zone, build IaC in Terraform, and ensure secure production readiness across regions.

The role spans networking, IAM, encryption, observability, and CI/CD with a focus on compliance and risk-aware decision making. Hybrid work in Helsinki, fluent English, and hands-on experience with migration of live workloads are key.