Senior Platform Engineer - AWS CDK, Edge Security (Remote)

Ryft; United Kingdom; On-site; GBP 90,000 - 130,000; Full time

Job summary

Ryft is a fast-growing fintech startup building a global payments platform. We are hiring a Senior Platform Engineer to own IaC, CI/CD, and cloud security. You will architect multi-account AWS setups, define infrastructure via AWS CDK, and enable engineers to ship safely in a remote-first environment.

Reporting to the CTO, you will partner with the security team to harden edge protections and ensure PCI-DSS readiness while delivering high reliability and velocity for product teams.

Qualifications

• Deep production experience with ECS, ECR, SNS, SQS, IAM and AWS WAF.
• Advanced AWS CDK (TypeScript) experience building enterprise constructs and pipelines.
• Strong multi‑account AWS knowledge including IAM cross‑account roles and SCPs.
• Proficient in GitHub Actions workflows and secret-less AWS authentication.

Responsibilities

• Architect, standardize, and maintain a multi-account AWS environment.
• Model core cloud infrastructure using AWS CDK with TypeScript.
• Enforce granular least-privilege IAM policies across services and accounts.
• Manage container lifecycles using ECS and ECR, including security scanning.
• Design, deploy, and maintain a hardened Edge Layer with AWS WAF and CloudFront.
• Collaborate with security to define secure cloud networks and PCI-DSS isolation.
• Build and optimize CI/CD workflows using GitHub Actions.
• Provide tooling and self-service capabilities for engineering teams.
• Ensure observability with CloudWatch, X-Ray, Prometheus, and OpenTelemetry.

Tools

Amazon ECS

Amazon ECR

SNS

SQS

IAM

AWS WAF

AWS CDK

TypeScript

GitHub Actions

Prometheus

OpenTelemetry

CloudWatch

X-Ray

Job description

Ryft is a fast-growing fintech startup building a global payments platform. We are hiring a Senior Platform Engineer to own IaC, CI/CD, and cloud security. You will architect multi-account AWS setups, define infrastructure via AWS CDK, and enable engineers to ship safely in a remote-first environment.

Reporting to the CTO, you will partner with the security team to harden edge protections and ensure PCI-DSS readiness while delivering high reliability and velocity for product teams.