Senior DevOps Engineer - AWS Cloud & FinOps Lead

LocalStack; Poland; On-site; PLN 353,000 - 453,000; Full time

Job summary

LocalStack is hiring a Senior Cloud Infrastructure Engineer to own and operate our internal cloud platform. You will manage multi-account AWS environments, enforce security, governance, and SOC 2 Type II / ISO 27001 compliance, and guide the IAM, SSO/MFA and joiner/mover/leaver processes.

This is a remote-first role for a globally distributed team. You will work with Terraform/OpenTofu, CDK or Pulumi, monitor costs, improve reliability, and collaborate with engineering to scale our cloud

Qualifications

• Deep AWS knowledge at org level (multiple accounts, IAM/SCPs, VPC, Security Hub).
• IaC only approach; real depth in at least one: Terraform/OpenTofu, CDK or Pulumi.
• Ability to evolve systems toward SOC 2 / ISO 27001 compliance.
• IdP-backed SSO/MFA and joiner/mover/leaver processes.
• Self-hosted tooling ownership, uptime and on-call readiness.
• Observability and alerting design for a distributed team.
• Cloud cost management and FinOps fundamentals.
• Comfort with remote-first, first hire in a new function.

Responsibilities

• Own the internal cloud infrastructure and serve as the primary contact for cloud operations.
• Manage and improve multi-account cloud environment with security and governance.
• Maintain SOC 2 Type II and ISO 27001 compliance, with continuous audit evidence.
• Operate IAM, SSO, MFA and joiner/mover/leaver workflows.
• Maintain self-hosted internal services, ensure SLAs and resolve vulnerabilities.
• Monitor cloud health and posture; identify and remediate risks proactively.
• Own infrastructure cost management and foresee cost/reliability risks.
• Collaborate with engineering to boost reliability and scalability.

Skills

AWS multi-account

IaC tooling

Compliance knowledge

SSO MFA IAM

Cost management

Bash/Python/Go

Cloud security

Remote collaboration

Tools

Terraform/OpenTofu

CDK

Pulumi

Job description

LocalStack is hiring a Senior Cloud Infrastructure Engineer to own and operate our internal cloud platform. You will manage multi-account AWS environments, enforce security, governance, and SOC 2 Type II / ISO 27001 compliance, and guide the IAM, SSO/MFA and joiner/mover/leaver processes.

This is a remote-first role for a globally distributed team. You will work with Terraform/OpenTofu, CDK or Pulumi, monitor costs, improve reliability, and collaborate with engineering to scale our cloud