Platform Engineer

Volta Software; Lombardia; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Volta Software in Europe seeks a Senior DevOps/Platform engineer to own infrastructure end-to-end across AWS and GCP, reporting to the CTO. You will be hands-on with no initial team, owning uptime, security controls, and postmortems for enterprise-scale systems.

Location is Milan or Paris, hybrid with three office days per week; you’ll implement IaC with Terraform, run GitHub Actions pipelines, use ArgoCD for GitOps, and ensure ISO 27001/SOC 2 readiness.

Qualifications

• Requires 6+ years running production workloads in AWS and Kubernetes.
• Hands-on with Terraform and pipelines; no direct reports initially.
• Own production uptime, incidents and postmortems for enterprise systems.
• Security-focused engineering for ISO 27001, SOC 2 or similar audits.

Responsibilities

• Own infrastructure end to end across AWS and GCP.
• Manage admin and production access, IAM, and GDPR controls from the EU.
• Lead security controls, including audit evidence and pentest remediation.
• Maintain 99.5% uptime with observability via Grafana/Loki/Prometheus and backups.

Skills

AWS (EKS, RDS Postgres, S3, IAM, VPC)

Kubernetes in production

Terraform

CI/CD (GitHub Actions)

GitOps (ArgoCD)

Observability (Grafana/Prometheus/Loki

Disaster recovery/testing

Least-privilege IAM & secrets mgmt

English fluency

Tools

Terraform

GitHub Actions

ArgoCD

Grafana

Prometheus

Loki

Job description

You'll own Volta’s infrastructure end to end, across AWS and GCP, and you’ll make every engineer on the team faster. You'll be the EU-based owner of production access and of the technical security controls behind our ISO 27001 and SOC 2 program. You report directly to the CTO: a senior individual contributor role with no team to manage at the start and a lot to own.

• Own the infrastructure end to end: AWS as the primary platform (EKS, RDS Postgres, S3, IAM, networking), GCP Cloud Run for our AI services, cross-region backup replication
• Hold the keys, from the EU: admin and production access, IAM, identity federation and the GDPR-relevant technical controls
• Run the AWS partner, don’t get replaced by it: set the direction, review their work, own the escalations and keep the knowledge in‑house
• Make the SLA boring: 99.5% uptime commitment, observability on Grafana Cloud and Loki, trusted alerts, backups and point‑in‑time recovery that have actually been restored
• Execute security: hardening, pentest remediation, technical controls and audit evidence for ISO 27001 and SOC 2
• Make engineers faster: fast CI/CD on GitHub, GitOps with ArgoCD, per‑prospect demo environments, per‑tenant feature flags, secrets management and least‑privilege IAM
• Scale with the customer count: about 15 new enterprise customers expected in the next 6 to 12 months, so onboarding a tenant should be infrastructure as code and a checklist
• Keep cloud cost honest: spend visibility, right‑sizing, commitments

Senior DevOps or platform engineer, still hands‑on: 6+ years running production workloads in the cloud, Kubernetes included, still writing Terraform and pipelines yourself Owned production, not just tasks: you’ve been on the hook for uptime, incidents and postmortems on a system customers paid for Security as engineering: you’ve implemented the technical side of ISO 27001, SOC 2 or similar audits and worked through pentest findings DevX instinct: you’ve built tooling other engineers liked using (pipelines, ephemerour environments, internal CLIs) Multi‑cloud comfort: AWS in depth, GCP enough to own Cloud Run services, IAM and networking there Worked through others: you’ve managed an MSP, a vendor or contractors and kept quality high Must have: deep AWS (EKS, RDS Postgres, IAM, VPC, S3, CloudTrail, GuardDuty); Kubernetes in production (Helm, ingress, debugging under pressure); infrastructure as code (Terraform or equivalent); CI/CD on GitHub Actions and GitOps (ArgoCD or Flux); observability with Grafana, Prometheus, Loki or equivalent; tested backup, restore and disaster recovery; hands‑on security (least‑privilege IAM, secrets management, network hardening); fluent English Nice to have: GCP (Cloud Run, Vertex AI); ISO 27001 or SOC 2 certification experience; feature flags and per‑customer environments; managing an AWS partner; Python scripting and familiarity with LLM tooling such as Langfuse; Italian or French

Location: based in Milan or Paris, hybrid, 3 office days a week

At Volta, we believe diversity makes our teams stronger. We welcome all applications, regardless of gender, background, or experience.