Platform Engineer

act digital; Portugal; On-site; EUR 90,000 - 120,000; Full time

Job summary

act digital seeks a senior DevOps/Platform Engineer to ensure the availability, security and efficiency of an AWS-based data platform. You will plan upgrades for Vault, Nexus and GitLab, upgrade EKS clusters, and migrate components with minimal downtime.

You will also enhance monitoring, automate recovery, optimize costs, and develop reusable Terraform/Ansible modules while enforcing security and change-control processes.

Qualifications

• Minimum 5 years of experience in DevOps, SRE or Platform Engineering.
• At least 3 years hands-on IaC experience in AWS production environments.
• Strong AWS knowledge (EC2, S3, IAM).
• Proficient in Kubernetes including Helm and HPA.

Responsibilities

• Ensure availability, security, stability and efficiency of an AWS-based enterprise data platform.
• Plan and execute upgrades of self-hosted Vault, Nexus and GitLab with backups and rollback plans.
• Upgrade EKS clusters and add-ons with node group migrations without downtime.
• Migrate ingress controller to a replacement solution while maintaining access to services.
• Upgrade Terraform/OpenTofu and AWS provider with non-destructive plans.
• Deliver version/dependency updates for Kafka, Jenkins and Uptime Kuma.
• Design PostgreSQL high-availability and perform failover testing.
• Improve monitoring/alerting and implement self-healing mechanisms (probes, restarts, autoscaling).
• Optimize EKS costs via rightsizing and Kubecost.
• Develop reusable Terraform/Ansible modules with semantic versioning and automated tests.
• Manage infrastructure changes via GitLab MR approvals and change control.
• Secure secrets with Vault and enforce least privilege.
• Address security findings from Checkmarx, Fortify, etc. in IaC.
• Produce technical designs and ITIL-aligned procedures.
• Maintain Confluence docs and monthly progress reports.

Skills

DevOps

SRE

IaC

Terraform

OpenTofu

Ansible

AWS

EKS

Kubernetes

PostgreSQL

Vault

Nexus

GitLab

CI/CD

Prometheus

Grafana

Velero

Linux

Bash

Jira

Confluence

VS Code

Portuguese

English

Tools

GitLab

Jenkins

Confluence

Jira

VS Code

Job description

• Minimum of 5 years of experience in DevOps, SRE or Platform Engineering, including at least 3 years of hands‑on experience with Infrastructure as Code (IaC) in AWS production environments.
• Strong experience with Terraform (AWS Provider) and/or OpenTofu, including reusable modules, semantic versioning and provider upgrades.
• Hands‑on experience with Ansible.
• Production experience with Amazon EKS, including cluster version upgrades, add‑on upgrades and node group migrations.
• Solid knowledge of AWS services, particularly EC2, S3 and IAM.
• Strong Kubernetes skills, including Helm, ingress controllers, probes, Horizontal Pod Autoscaler (HPA) and PodDisruptionBudgets (PDBs).
• Experience administering PostgreSQL databases, including backup and restore procedures, high availability and failover testing.
• Experience upgrading self-hosted platforms, particularly HashiCorp Vault, Sonatype Nexus and GitLab running on virtual machines.
• Experience with CI/CD using GitLab, including pipelines, merge requests, branch protection and approval workflows, as well as Jenkins.
• Experience with monitoring and alerting using Prometheus/Grafana or equivalent tools.
• Experience implementing Kubernetes backup and restore procedures using Velero.
• Knowledge of security fundamentals, including IAM/RBAC, least privilege, secrets management with Vault and TLS.
• Strong Linux administration and Bash scripting skills.
• Familiarity with Jira, Confluence and Visual Studio Code.
• Ability to work autonomously, take ownership of technical activities and manage changes in production environments.
• Fluency in Portuguese and English.

Responsabilities:

• Ensure the availability, security, stability and efficiency of an AWS‑based enterprise data platform.
• Plan and execute upgrades of self-hosted HashiCorp Vault, Sonatype Nexus and GitLab, ensuring backups, rollback plans and post‑upgrade validation are in place.
• Upgrade Amazon EKS clusters and add‑ons, and migrate node groups from Amazon Linux 2 to Amazon Linux 2023 without service downtime.
• Migrate the end‑of‑life ingress‑nginx controller to a replacement solution while maintaining uninterrupted access to exposed services.
• Upgrade Terraform/OpenTofu and the AWS Provider, validating that execution plans are non‑destructive before applying changes.
• Deliver critical version and dependency updates for components such as Kafka, Jenkins and Uptime Kuma.
• Design and implement PostgreSQL high‑availability solutions, including failover testing and recovery validation.
• Strengthen the resilience of core platform components and regularly test Kubernetes backup and restore procedures using Velero, measuring recovery times
• Define and implement availability improvements for critical services, providing evidence that changes do not degrade service performance.
• Improve monitoring and alerting, and implement self‑healing mechanisms, including probes, automatic restarts, autoscaling and automated remediation.
• Optimise EKS costs and capacity across pre‑production and production environments through rightsizing, scheduled start/stop and tools such as Kubecost.
• Develop and maintain reusable Terraform and Ansible modules, ensuring semantic versioning, tagging, pipeline templates and automated testing.
• Manage infrastructure changes through GitLab merge requests and approval workflows, enforcing branch protection and change control processes.
• Secure secrets using Vault and enforce least privilege and segregation of duties.
• Investigate and remediate security findings identified by Checkmarx, Fortify and other security scanning tools in IaC modules.
• Produce technical designs and ITIL‑aligned operational procedures covering upgrades, backup and restore, and observability.
• Maintain technical documentation in Confluence and prepare monthly progress reports.
• Take ownership of ongoing activities, conduct knowledge transfer sessions and collaborate with platform owners and third‑party providers.
• Coordinate access requirements, maintenance windows and production change approvals.
• Work within a Scrum team, contributing to two‑week sprints and using Jira and Confluence for task management, collaboration and documentation.