Platform Engineer - Fintech/ Crypto
Incubly
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Job summary
Incubly is seeking a Platform Engineer to enhance our developer platform and CI/CD tooling. You will own self-hosted GitHub Actions runners, size resource footprints, and help migrate away from GitHub-hosted environments. Collaborate with DevOps on pipelines, observability, and infrastructure-as-code across multi-cluster environments.
You will work with Terraform, ArgoCD, Helm, Kustomize, and JFrog Platform, ensuring fast, secure, and reliable delivery pipelines for product teams.
Qualifications
- 5+ years in Platform Engineering/DevOps/SRE roles supporting product engineering teams.
- Hands-on with GitHub Actions including self-hosted runners and provisioning via Terraform.
- Experience with JFrog Platform (Artifactory/Xray/Curation) for artifact management and security.
- Familiarity with container registries and Helm chart repositories (ChartMuseum on S3).
- Experience with GitOps using ArgoCD and progressive delivery patterns across clusters.
Responsibilities
- Own and evolve self-hosted GitHub Actions runners (Linux/macOS) and related Terraform provisioning.
- Size runner classes to balance cost and velocity, support migration away from GitHub-hosted runners.
- Collaborate with DevOps for pipeline optimization, dependency graph, and reduced CI spend.
- Maintain observability stack (Grafana, Prometheus, Alertmanager) and instrument with OpenTelemetry.
- Design and evolve IaC with Terraform/Terragrunt; contribute to developer portal and golden-path templates.
Skills
Tools
Job description
At Incubly, we believe that great people want to work with great people, so we started to build a company that attracts great minds and enables us to achieve great things while genuinely enjoying what we do. Our mission is to support tech companies and startups (scaleups) in scaling their teams quickly and with high quality, while boosting product development, testing, and deployment so we can succeed together.
We are currently working with a French company that is a leader in security and infrastructure solutions for cryptocurrencies and blockchain applications. It has a team of more than 400 professionals developing a variety of products and services to safeguard cryptocurrency assets, including worldwide leading hardware wallets.
As aPlatform Engineer, you will work closely with product engineering teams to improve the developer experience and remove friction from the build, package, and deployment process. You will own and improve developer tooling, self-service platforms, golden paths, runners, registries, delivery tooling, and observability. You will collaborate with engineering and DevOps teams to ensure the platform is fast, reliable, secure, and easy to use, while using automation and strong systems thinking to help teams ship faster and more safely.
Own and evolve the self-hosted GitHub Actions runner fleet, including Linux runners managed via Actions Runner Controller (ARC), self-hosted macOS runners, and the Terraform modules that provision and scale self-hosted infrastructure.
Right-size runner classes (CPU/memory/storage) against real workload profiles, balancing cost efficiency against engineering velocity, and supporting engineering teams in understanding and owning the resource footprint of their own jobs.
Support the migration away from GitHub-hosted runners, including evaluating trade-offs between containerised and VM-based execution for workloads with special hardware requirements (e.g. KVM access for Android emulators).
Partner with embedded DevOps engineers on pipeline and dependency-graph optimisations (build triggers, job fan-out, monorepo change detection) to reduce queue times and unnecessary CI spend — you own the platform and runner layer these pipelines execute on.
Investigate and resolve macOS virtualisation performance issues (e.g. Tart) and help evaluatealternative approaches such as remote simulator hosts.
Administer the JFrog Platform (Artifactory, Xray, Curation) as the organization’s primary artifact
repository, including repository structure, access control, vulnerability scanning policies, and
curation/allow-listing of upstream dependencies.
Provide light-touch, minimal support for GitHub Container Registry (GHCR) and GitHub Packages where teams use them alongside JFrog.
Operate and maintain ChartMuseum as the organization’s Helm chart repository, hosted on S3,
including storage lifecycle, access, and chart promotion workflows.
Define and enforce container image ownership boundaries — platform-owned hardened/minimal base images (e.g. Docker Hardened Images, Chainguard) versus engineering-owned project extensions — and drive Dockerfile build and layer optimisation best practices across teams.
Operate two ArgoCD / Argo Rollouts environments, one serving internal tooling and one serving product workloads supporting GitOps-based, progressive delivery (canary/blue-green) patterns for engineering teams.
Author, maintain, and support Helm charts and Kustomize overlays as the standard configuration management approach for Kubernetes workloads, providing golden-path templates that reduce boilerplate for product teams.
Design, review, and evolve Terraform and Terragrunt modules for infrastructure-as-code, including maintaining a public/internal module registry that product and platform teams can consume in a self-service manner.
Improve and help unify the observability stack; Grafana, Prometheus, and Alertmanager. Fixing
metric accuracy issues, building meaningful dashboards, and defining SLOs/alerting that reflect real platform and pipeline health.
Work across Datadog and VictoriaLogs/VictoriaMetrics to reduce tool sprawl, and help define a
coherent strategy for where metrics, logs, and events should live.
Provide platform-level telemetry (runner utilization, build queue times, artifact scan results, deployment health) that gives engineering teams and leadership a single, trustworthy view of pipeline and platform performance.
Evaluate and help operate Crossplane as a control-plane layer for self-service, Kubernetes-native infrastructure provisioning, complementing the existing Terraform/Terragrunt IaC estate.
Contribute to a developer portal / internal catalogue strategy (e.g. Backstage, Cortex, or Port) so engineers have a single place to discover services, ownership, docs, and golden-path templates.
Implement and maintain policy-as-code guardrails using Kyverno and/or Open Policy Agent (OPA) across the Kubernetes and CI/CD estate (e.g. image provenance, resource limits, security baselines).
Support Knative-based serverless/event-driven workloads on Kubernetes where teams need
scale-to-zero or request-driven compute.
Roll out OpenTelemetry instrumentation and pipelines to standardise traces, metrics, and logs across services, feeding the Grafana/Prometheus/Datadog/VictoriaLogs stack with consistent, correlated telemetry.
Act as the platform’s embedded point of contact for one or more product engineering teams:
Understand their day-to-day friction, prioritise platform work accordingly, and close the loop on
delivery.
Build self-service tooling, templates, and documentation (golden paths) so engineers can provision runners, publish artifacts, and deploy without needing deep platform expertise.
Clearly document ownership boundaries between platform and product teams (e.g. base images vs. application extensions) and help engineering teams operate confidently within them.
Contribute to the platform roadmap, bringing a developer-experience lens to prioritisation — and measure success in terms of engineer-facing outcomes such as build time, queue time, and self-service adoption, not just infrastructure uptime.
5+ years in a Platform Engineering, DevOps, SRE, or infrastructure engineering role, ideally
supporting product engineering teams directly.
Hands-on experience with GitHub Actions, including self-hosted runner architectures (Actions Runner Controller / Kubernetes-based Linux runners, self-hosted macOS runners) and provisioning them via Terraform.
Practical knowledge of the JFrog Platform (Artifactory, Xray, and ideally Curation) for artifact
management and dependency security.
Familiarity with container registries beyond a single vendor (GHCR/GitHub Packages) and Helm chart repositories such as ChartMuseum on object storage (S3).
Experience with GitOps continuous delivery using ArgoCD, and ideally Argo Rollouts for progressive delivery (canary/blue-green) across multiple clusters/environments.
Strong Kubernetes configuration management skills with Helm and Kustomize.
Solid Infrastructure-as-Code experience with Terraform and Terragrunt, including designing and
consuming shared/reusable modules.
Experience with Crossplane (or a comparable Kubernetes-native control-plane approach) for building self-service infrastructure APIs, alongside deep Terraform proficiency for the underlying IaC.
Experience building or operating an internal developer portal/software catalogue such as Backstage, Cortex, or Port, including modelling service ownership and scorecards.
Hands-on experience with policy-as-code enforcement in Kubernetes using Kyverno and/or Open Policy Agent (OPA / Gatekeeper) — e.g. image provenance, resource limits, security baselines.
Familiarity with Knative or similar Kubernetes-native serverless/eventing frameworks for scale-to-zero or request-driven workloads.
Experience building, hardening, and optimizing container images (Dockerfile best practices,
minimal/hardened base images such as Docker Hardened Images or Chainguard).
Working knowledge of an observability stack — Grafana, Prometheus, and Alertmanager — plus exposure to Datadog and/or VictoriaLogs/VictoriaMetrics, and practical experience instrumenting services and pipelines with OpenTelemetry (traces, metrics, logs).
Comfortable in Linux/Unix environments, with solid scripting ability (e.g. Bash, Python, or Go) and strong Git fundamentals.
AWS cloud experience (compute, storage/S3, networking fundamentals) is a plus.
Genuine product mindset toward internal platforms: you think in terms of the engineer as a customer, and you seek out and act on their feedback.
Strong cross-functional collaborator, comfortable embedding with a product engineering team and building trust with people who don’t share your infrastructure background.
Clear written and verbal communicator, able to explain infrastructure concepts (e.g. Kubernetes, runner sizing, build performance) to engineers without a platform background, and able to tailor the level of detail to the audience.
Pragmatic and cost-conscious: able to balance reliability, security, developer speed, and infrastructure cost, and to make and explain trade-offs rather than defaulting to “more resources.”
Ownership mindset with strong personal accountability; comfortable working autonomously and
driving initiatives from discovery through to rollout.
Curious and continuously improving: proactively investigates root causes (e.g. inconsistent metrics, flaky runners) rather than just resolving symptoms.
Comfortable with ambiguity and evolving priorities, and able to sequence and negotiate scope in a fast-moving, PI-based planning environment.
Empathetic and collaborative when defining ownership boundaries between platform and product teams, favouring clarity and shared documentation over friction.
Experience supporting mobile/device-testing CI (e.g. Android emulator/KVM requirements, iOS
simulators) in a self-hosted runner context.
Experience with developing platform API and CLI for developers to consume blueprints and patterns using either Kratix or Crossplane tooling.
Experience with large Kubernetes cluster fleet automation from provisioning to upgrade to
decommissionExperience operating in a large monorepo, including build-graph/dependency-aware CI triggering.
Prior experience defining or operating SLOs/SLAs and error budgets for internal platform services.
In addition to a great company and challenging projects, we can offer much, much more:
- Agile and friendly atmosphere, non-violent communication and full respect for diversity
- B2B or Employment Contract – you choose
- Remuneration on B2B contract: 1.200–1.400 PLN net/day
- Remuneration on Employment Agreement: 19.000–22.000 PLN gross per month
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
