Senior Cloud Engineer

XTB online investing; Województwo mazowieckie; Hybrid; PLN 200,000 - 320,000; Full time

Benefits offered by this job

Training budget

Birthday day off

Parental leave

Private medical care

Wellbeing platform

Remote work option

Job summary

XTB online investing is seeking a Senior Cloud Engineer to design, build, and scale a hybrid and multi-cloud infrastructure supporting millions of clients worldwide. You will drive automation, governance, and reliability across AWS, Azure, and GCP environments.

The role focuses on IaC with Terraform, CI/CD with GitLab, RBAC security, and observability using Grafana/Prometheus. Remote-friendly with Warsaw office access and strong FinTech compliance.

Qualifications

• 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.
• Practical experience with highly available multi-cloud environments (AWS, Azure, GCP).
• Strong scripting skills in Python or Bash.
• Terraform for infrastructure as code.
• Experience with CI/CD pipelines, preferably GitLab CI/CD.
• Experience configuring metrics, dashboards, and alerts with Grafana/Prometheus.
• IAM/RBAC with least-privilege security.
• Hybrid networking concepts and troubleshooting.

Responsibilities

• Design, implement, and maintain multi-cloud and hybrid infrastructure.
• Deploy and operate containerized workloads with Kubernetes (AKS/EKS/GKE).
• Build, maintain, and improve IaC using Terraform.
• Design CI/CD pipelines with GitLab CI/CD and GitOps.
• Manage core cloud services including CDN, DNS, and object storage.
• Ensure observability with Grafana and Prometheus.
• Enforce IAM/RBAC and least-privilege security across environments.
• Define Cloud Governance, Landing Zone structures, and Policy-as-Code standards.
• Collaborate with Security, SRE, and Platform teams on best practices.
• Support FinOps initiatives to optimize cloud costs.

Skills

Cloud engineering

AWS

Azure

GCP

DevOps

GitOps

Kubernetes

Terraform

CI/CD

Python

Bash

IAM

Tools

AKS

EKS

GKE

GitLab CI/CD

Job description

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certifiedGreat Place to Work company.

About the role

We are looking for a Senior Cloud Engineer to design, build, and scale XTB’s hybrid and multi-cloud infrastructure, supporting systems for millions of clients worldwide. In this role, you will drive infrastructure automation and cloud engineering best practices, ensure platform resilience, and shape our highly available environments across multiple cloud providers, ensuring our systems remain robust, secure, and scalable.

Responsibilities

• Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.
• Deploy and operate containerized workloads using managed Kubernetes services (e.g., AKS, EKS, GKE).
• Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.
• Design and implement robust CI/CD pipelines using GitLab CI/CD, incorporating GitOps principles.
• Implement and manage core cloud services, including global content delivery, DNS, and object storage (e.g., CloudFront, Route 53, S3).
• Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using tools such as Grafana and Prometheus.
• Implement and manage Identity & Access Management (IAM) policies, Role-Based Access Control (RBAC), and least-privilege access across cloud environments.
• Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (e.g., Azure Policies, AWS SCPs, tagging strategies).
• Manage hybrid network connectivity and troubleshoot complex networking issues across distributed cloud and on-premises environments.
• Collaborate with Security, SRE, and Platform teams to define and drive cloud best practices for observability, compliance, and operational reliability.
• Support FinOps initiatives to optimize cloud environments for cost efficiency, scalability, and performance.

Requirements

• 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.
• Proven practical experience with highly available cloud environments in a multi-cloud setup (strong hands‑on knowledge of at least two providers: AWS, Azure, GCP).
• Strong understanding of DevOps, Platform Engineering, and GitOps principles.
• Solid hands‑on experience with managed Kubernetes orchestration (e.g., AKS, EKS, GKE).
• Experience working in regulated industries (e.g., FinTech, banking) with strong compliance, security, auditability, and governance requirements.
• Strong scripting or programming skills in Python, Bash, or similar languages.
• Proficiency in creating and maintaining infrastructure using Terraform.
• Strong experience designing and implementing CI/CD pipelines, preferably using GitLab CI/CD.
• Practical experience configuring metrics, dashboards, and alerts using tools like Grafana and Prometheus.
• Hands‑on experience with Identity & Access Management (IAM), RBAC models, and implementing least‑privilege security.
• Solid understanding of hybrid networking concepts (e.g., BGP, VPN, Direct Connect / ExpressRoute, hybrid DNS resolution) and network troubleshooting.
• Ability to work independently, take ownership of technical delivery, and support production‑grade environments.

Nice to have

• Experience with IaC PR-workflow automation and orchestration tools (e.g., Atlantis, Terragrunt).
• Experience with GitOps delivery tools (e.g., Argo CD, Flux).
• Experience with the Wiz security platform or similar cloud security posture management (CSPM) tools.
• Experience with configuration management tools like Ansible.
• Practical knowledge of FinOps practices and cloud cost optimization strategies.
• Official certifications from AWS, Azure, GCP, or CNCF (e.g., CKA, CKAD).

What we offer

• Real influence on the development of the company and the product.
• Work in an experienced team that is happy to share its knowledge.
• A clear vision of development thanks to regular feedback and clear career paths.
• Regular team-building meetings.

Benefits

• A training budget for courses and conferences that interest you.
• An extra day off on your birthday.
• An extra day off for parents.
• Equipment tailored to your needs.
• Private medical care and group insurance.
• Access to an e-learning platform for learning English and a benefits platform.
• Access to a wellbeing platform and the opportunity to take advantage of workshops and private therapy sessions.
• Remote work, from the office in Warsaw or from a coworking space in your city.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.