Senior Cloud Engineer

OpenKrill; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work

Private medical care

Group insurance

Wellbeing platform

Training budget

Job summary

XTB is seeking a Senior Cloud Engineer to design, build, and scale XTB’s hybrid and multi-cloud infrastructure, supporting millions of clients worldwide. In this role, you will drive infrastructure automation and cloud engineering best practices, ensure platform resilience, and shape highly available environments across multiple cloud providers.

In collaboration with Security, SRE, and Platform teams, you will implement CI/CD pipelines with GitLab CI/CD, IaC with Terraform, and manage core cloud

Qualifications

• 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.
• Proven practical experience with highly available cloud environments in a multi-cloud setup (AWS, Azure, GCP).
• Strong understanding of DevOps, Platform Engineering, and GitOps principles.
• Solid hands-on experience with managed Kubernetes orchestration (AKS, EKS, GKE).
• Experience in regulated industries (FinTech, banking) with strong compliance, security, auditability, and governance requirements.

Responsibilities

• Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.
• Deploy and operate containerized workloads using managed Kubernetes services (AKS, EKS, GKE).
• Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.
• Design and implement robust CI/CD pipelines using GitLab CI/CD, incorporating GitOps principles.
• Implement and manage core cloud services, including global content delivery, DNS, and object storage (CloudFront, Route 53, S3).
• Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using Grafana and Prometheus.
• Implement and manage IAM policies, RBAC, and least-privilege access across cloud environments.
• Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (Azure Policies, AWS SCPs, tagging).
• Manage hybrid networking connectivity and troubleshoot networking issues across distributed cloud/on-prem environments.
• Collaborate with Security, SRE, and Platform teams to drive cloud best practices for observability, compliance, and reliability.
• Support FinOps initiatives to optimize cloud environments for cost efficiency, scalability, and performance.

Skills

Cloud architecture

Kubernetes

GitOps

Terraform

CI/CD

Python scripting

Security & IAM

FinOps

Tools

Terraform

AKS

EKS

GKE

Grafana

Prometheus

S3

Route 53

CloudFront

Job description

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

About the roleWe are looking for a Senior Cloud Engineer to design, build, and scale XTB’s hybrid and multi-cloud infrastructure, supporting systems for millions of clients worldwide. In this role, you will drive infrastructure automation and cloud engineering best practices, ensure platform resilience, and shape our highly available environments across multiple cloud providers, ensuring our systems remain robust, secure, and scalable.

Responsibilities

• - Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.
• - Deploy and operate containerized workloads using managed Kubernetes services (e.g., AKS, EKS, GKE).
• - Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.
• - Design and implement robust CI/CD pipelines using GitLab CI/CD, incorporating GitOps principles.
• - Implement and manage core cloud services, including global content delivery, DNS, and object storage (e.g., CloudFront, Route 53, S3).
• - Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using tools such as Grafana and Prometheus.
• - Implement and manage Identity & Access Management (IAM) policies, Role-Based Access Control (RBAC), and least-privilege access across cloud environments.
• - Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (e.g., Azure Policies, AWS SCPs, tagging strategies).
• - Manage hybrid network connectivity and troubleshoot complex networking issues across distributed cloud and on-premises environments.
• - Collaborate with Security, SRE, and Platform teams to define and drive cloud best practices for observability, compliance, and operational reliability.
• - Support FinOps initiatives to optimize cloud environments for cost efficiency, scalability, and performance.

Requirements

• - 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.
• - Proven practical experience with highly available cloud environments in a multi-cloud setup (strong hands-on knowledge of at least two providers: AWS, Azure, GCP).
• - Strong understanding of DevOps, Platform Engineering, and GitOps principles.
• - Solid hands-on experience with managed Kubernetes orchestration (e.g., AKS, EKS, GKE).
• - Experience working in regulated industries (e.g., FinTech, banking) with strong compliance, security, auditability, and governance requirements.
• - Strong scripting or programming skills in Python, Bash, or similar languages.
• - Proficiency in creating and maintaining infrastructure using Terraform.
• - Strong experience designing and implementing CI/CD pipelines, preferably using GitLab CI/CD.
• - Practical experience configuring metrics, dashboards, and alerts using tools like Grafana and Prometheus.
• - Hands-on experience with Identity & Access Management (IAM), RBAC models, and implementing least-privilege security.
• - Solid understanding of hybrid networking concepts (e.g., BGP, VPN, Direct Connect / ExpressRoute, hybrid DNS resolution) and network troubleshooting.
• - Ability to work independently, take ownership of technical delivery, and support production-grade environments.

Nice to have

• - Experience with IaC PR-workflow automation and orchestration tools (e.g., Atlantis, Terragrunt).
• - Experience with GitOps delivery tools (e.g., Argo CD, Flux).
• - Experience with the Wiz security platform or similar cloud security posture management (CSPM) tools.
• - Experience with configuration management tools like Ansible.
• - Practical knowledge of FinOps practices and cloud cost optimization strategies.
• - Official certifications from AWS, Azure, GCP, or CNCF (e.g., CKA, CKAD).

What we offer

• - Real influence on the development of the company and the product.
• - Work in an experienced team that is happy to share its knowledge.
• - A clear vision of development thanks to regular feedback and clear career paths.
• - Regular team-building meetings.

Benefits

• - A training budget for courses and conferences that interest you.
• - An extra day off on your birthday.
• - An extra day off for parents.
• - Equipment tailored to your needs.
• - Private medical care and group insurance.
• - Access to an e-learning platform for learning English and a benefits platform.
• - Access to a wellbeing platform and the opportunity to take advantage of workshops and private therapy sessions.
• - Remote work, from the office in Warsaw or from a coworking space in your city.