Platform Engineer

Fliff; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Fliff ищет Platform Engineer в команду Platform для развития общей инфраструктуры и инструментов доставки. Вы будете отвечать за CI/CD, архитектурные решения и масштабирование, влияя на то, как разворачивается ПО в компании.

Требуется глубокий опыт AWS, Kubernetes и IaC; акцент на secure-by-default конвейеры, IAM и безопасную настройку. Компания глобальная, офисы в нескольких городах, работа над сложными задачами доставки.

Qualifications

• Опыт работы в AWS и CI/CD на продвинутом уровне
• Опыт инфраструктуры как код: Terraform, Terragrunt, Terramate
• Опыт Kubernetes/EKS, Helm и GitOps (ArgoCD)
• Укропленный подход к безопасности: IAM, секреты, минимальные привилегии

Responsibilities

• Владение и эволюция CI/CD платформы (GitHub Actions, Jenkins Next перенастройка)
• Развитие инфраструктуры как код в AWS (Terraform/ Terragrunt/ Terramate)
• Дизайн delivery pipelines с безопасностью by default, управление секретами (SOPS)
• Перевод инфраструктуры на IAM-роли, устранение уязвимостей и открытых портов
• Работа с Kubernetes (EKS), Helm, ArgoCD; поддержка наблюдаемости (Grafana/Prometheus)
• Обзор компонентов и их улучшение; автоматизация и снижение нагрузки поддержки

Skills

Strong AWS experience

CI/CD expertise

Security-conscious mindset

DevSecOps mindset

Architectural decision making

Adaptive to changing constraints

Incident response mindset

Tools

GitHub Actions

Jenkins

Terraform

Terragrunt

Terramate

Kubernetes

EKS

Helm

ArgoCD

SOPS

IAM

Job description

Описание: We’re looking for a Platform Engineer to join our Platform team, which builds shared infrastructure and delivery tooling across Fliff’s products. The team is responsible for Cloud Core, CI/CD, Platform Security, and support triage. In this role, you’ll take ownership of our CI/CD platform and help it scale, making architectural decisions, evaluating trade‑offs, and adapting to changing requirements and production challenges. Your work will shape how software delivery and infrastructure operate across the engineering organization.

Задачи:

• Own and evolve our CI/CD platform: GitHub Actions with self‑hosted runners (RunsOn), plus an in‑progress migration and refactor of our Jenkins setup ("Jenkins Next").
• Build and maintain Infrastructure as Code across AWS using Terraform / Terragrunt / Terramate, following reusable component patterns (CloudPosse-style).
• Design secure‑by‑default delivery pipelines: branch protection and PR approval rulesets, secrets management (SOPS), and prod‑approval flows for critical paths.
• Drive our move from IAM users and long‑lived access keys toward IAM roles, and help close foundational security gaps (open ports, unmanaged credentials, missing guardrails).
• Work with Kubernetes (EKS), Helm, and ArgoCD, and support our observability stack (Grafana, Prometheus) and developer platform (Backstage).
• Review and improve existing components — Terraform, pipelines, AWS infra — not only build new ones, and raise the bar on how the team delivers.
• Share the support/triage load and help reduce it through better automation and tooling.

Требования:

• Strong AWS experience and deep hands‑on CI/CD expertise (GitHub Actions and/or Jenkins).
• Solid Infrastructure as Code background with Terraform (Terragrunt / Terramate a plus).
• Real Kubernetes / EKS experience, including Helm and GitOps (ArgoCD).
• A security‑conscious mindset — comfortable reasoning about IAM, secrets, network exposure, and least‑privilege access (a DevSecOps lean is a strong plus).
• The ability to design a solution, then adapt gracefully when constraints change ("now make it global", "now cost is the primary driver") — digging for context rather than getting flustered.
• Sound judgment on edge cases and incidents: traffic spikes 10x, a region goes down — how do you approach the change and handle the outage?
• Effective, deliberate use of AI tooling, with genuine understanding of what it produces and the ability to explain trade‑offs it can't.

We are a multinational company with our headquarters based in Philadelphia, and offices in New York, Austin, and Sofia, Bulgaria.

Wherever we are in the world, we pride ourselves on being a close‑knit, focused team that is welcoming and friendly, and the work that we do is always interesting and rewarding.

Wherever we are in the world, we pride ourselves on being a close‑knit, focused team that is: Welcoming and Friendly

We want to reflect the diversity of the cities we serve. By creating an inclusive culture where everyone can thrive, we’ll make Fliff better for employees and customers alike.

Lively and Creative

We respect and value each other’s ideas, experience and expertise. There is no such thing as a bad idea; only ideas that are executed and ideas that are discarded after consideration.

Stimulating and Rewarding

We know bright minds love a challenge, and we understand your desire to see your hard work pay off. We’ll make sure your daily tasks align with your career ambitions as we grow together.

Equal Employment Opportunity Statement

Fliff is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.