Senior Platform Engineer - AWS, Terraform & Self-Service

Hub; Utrecht; Hybrid; EUR 100,000 - 140,000; Full time

Job summary

Mercell in the Netherlands is seeking a Senior DevOps / Platform Engineer to build a platform used by all engineering teams. You’ll design reusable, self-service components, from Terraform modules to templates, with a focus on scalability and security.

You’ll work on AWS infrastructure, CI/CD pipelines, and observability, ensuring early adoption, cost efficiency and robust security across a multi-account setup. Hybrid office presence in Utrecht.

Qualifications

• Strong experience (ideally 5+ years) in DevOps, SRE or Platform Engineering roles, including at least 3 years with direct accountability for production AWS environments.
• A proven track record of building reusable infrastructure that other teams adopted shared modules, templates or self-service tooling. Be ready to walk us through one.
• Deep Terraform experience across many accounts: module design, versioning, state management and drift. Terragrunt and CloudFormation/CDK experience is a strong plus.
• Designed and maintained CI/CD pipelines with GitHub Actions (or GitLab CI/CD, AWS CodePipeline or similar), including pipelines for infrastructure changes.
• Designed multi-account AWS networking: VPC design, Transit Gateway or PrivateLink, DNS, and how they fit the security model.
• Applied AWS security in production: least privilege, organisation guardrails (SCPs, AWS Config, Security Hub) and a secure SDLC.
• Built observability with CloudWatch and related tooling: metrics, logs, traces, meaningful alerts and SLOs.
• Solid hands-on experience with containers and serverless: Docker, ECS or EKS, and Lambda.

Responsibilities

• Architect and evolve a unified application platform that standardizes how teams build, deploy and operate services across Mercell.
• Build reusable building blocks Terraform modules, golden-path templates, self-service tooling and drive their adoption across teams.
• Write short design proposals covering alternatives, trade-offs, phased rollout and rollback.
• Define success up front SLOs, cost, adoption, lead time and instrument it from day one.
• Think ahead: scale, multi-account growth, security review, operability and handover.
• Design and run scalable, secure and highly available AWS infrastructure across a multi-account organisation, using Terraform with Terragrunt and CloudFormation with CDK.
• Design and improve GitHub Actions pipelines so that delivery is fast, safe and consistent with infrastructure changes reviewed as plans and applied through the pipeline only.
• Build security into the platform by default: least-privilege access, organisation-level guardrails, vulnerability monitoring and compliance with industry standards.
• Build logging, monitoring and alerting that teams actually rely on, and take part in resolving and learning from incidents.
• Find and deliver measurable improvements in cost efficiency, scalability and performance across our services and infrastructure.
• Help roll out AI coding assistants such as Claude Code safely across our engineering organisation: shared configuration and standards, guardrails and permission models, secure access to credentials and infrastructure, auditability, and predictable, reviewable results for infrastructure-as-code changes.
• Work closely with development and security teams, set standards others can follow, and mentor engineers on DevOps and platform practices.

Skills

DevOps

SRE

Platform Engineering

AWS

Terraform

Terragrunt

CloudFormation

CI/CD

GitHub Actions

Security

Observability

Containers

Serverless

Automation

Tools

Terraform

Terragrunt

CloudFormation

CDK

GitHub Actions

GitLab CI/CD

AWS CodePipeline

Docker

ECS

EKS

Lambda

CloudWatch

Job description

Mercell in the Netherlands is seeking a Senior DevOps / Platform Engineer to build a platform used by all engineering teams. You’ll design reusable, self-service components, from Terraform modules to templates, with a focus on scalability and security.

You’ll work on AWS infrastructure, CI/CD pipelines, and observability, ensuring early adoption, cost efficiency and robust security across a multi-account setup. Hybrid office presence in Utrecht.