Staff Platform Engineer

Fliff Inc.; New York, Austin (NY, TX, PA); À distance; USD 150 000 - 190 000; Plein temps

Résumé du poste

Fliff Inc. is seeking a Platform Engineer to own and scale our CI/CD platform across the engineering org. You’ll drive architectural decisions, manage IaC in AWS, and help standardize delivery pipelines.

The role requires strong AWS, Terraform, Kubernetes experience and a security-minded mindset. You’ll collaborate on platform security, IAM optimization, and observability tooling while supporting Backstage and our developer experience.

Qualifications

• Strong AWS experience and hands-on CI/CD expertise (GitHub Actions and/or Jenkins).
• Solid IaC background with Terraform (Terragrunt/Terramate a plus).
• Real Kubernetes/EKS experience, including Helm and GitOps (ArgoCD).
• A security-conscious mindset with IAM, secrets, and least-privilege concepts.

Responsabilités

• Own and evolve the CI/CD platform (GitHub Actions with self-hosted runners and Jenkins Next).
• Build and maintain IaC across AWS using Terraform and Terragrunt/Terramate.
• Design secure delivery pipelines with branch protection, secrets management, and prod flows.
• Move from IAM users to IAM roles and close security gaps.
• Work with Kubernetes (EKS, Helm, ArgoCD) and support observability (Grafana, Prometheus) and Backstage.
• Review and improve existing Terraform and AWS infra, raise delivery standards.
• Share triage load and boost automation/tools to reduce manual effort.

Connaissances

AWS

CI/CD

GitHub Actions

Jenkins

Terraform

Terragrunt

Terramate

Kubernetes

EKS

Helm

ArgoCD

SOPS

IAM

Backstage

Grafana

Prometheus

Outils

Terraform

Terragrunt

Terramate

Jenkins

GitHub Actions

Kubernetes

ArgoCD

Helm

Backstage

Grafana

Prometheus

Description du poste

We're looking for a Platform Engineer to join our Platform team, which builds shared infrastructure and delivery tooling across Fliff's products. The team is responsible for Cloud Core, CI/CD, Platform Security, and support triage. In this role, you'll take ownership of our CI/CD platform and help it scale, making architectural decisions, evaluating trade-offs, and adapting to changing requirements and production challenges. Your work will shape how software delivery and infrastructure operate across the engineering organization.

Responsibilities

• Own and evolve our CI/CD platform: GitHub Actions with self-hosted runners (RunsOn), plus an in-progress migration and refactor of our Jenkins setup ("Jenkins Next").
• Build and maintain Infrastructure as Code across AWS using Terraform / Terragrunt / Terramate, following reusable component patterns (CloudPosse-style).
• Design secure-by-default delivery pipelines: branch protection and PR approval rulesets, secrets management (SOPS), and prod-approval flows for critical paths.
• Drive our move from IAM users and long-lived access keys toward IAM roles, and help close foundational security gaps (open ports, unmanaged credentials, missing guardrails).
• Work with Kubernetes EKS, Helm, and ArgoCD, and support our observability stack (Grafana, Prometheus) and developer platform (Backstage).
• Review and improve existing components — Terraform, pipelines, AWS infra — not only build new ones, and raise the bar on how the team delivers.
• Share the support/triage load and help reduce it through better automation and tooling.

Requirements

• Strong AWS experience and deep hands-on CI/CD expertise (GitHub Actions and/or Jenkins).
• Solid Infrastructure as Code background with Terraform (Terragrunt / Terramate a plus).
• Real Kubernetes / EKS experience, including Helm and GitOps (ArgoCD).
• A security-conscious mindset — comfortable reasoning about IAM, secrets, network exposure, and least-privilege access (a DevSecOps lean is a strong plus).
• The ability to design a solution, then adapt gracefully when constraints change ("now make it global", "now cost is the primary driver") — digging for context rather than getting flustered.
• Sound judgment on edge cases and incidents: traffic spikes 10x, a region goes down — how do you approach the change and handle the outage?
• Effective, deliberate use of AI tooling, with genuine understanding of what it produces and the ability to explain trade-offs it can't.

We are a multinational company with our headquarters based in Philadelphia, and offices in New York, Austin, and Sofia, Bulgaria. Wherever we are in the world, we pride ourselves on being a close-knit, focused team that is welcoming and friendly, and the work that we do is always interesting and rewarding. Wherever we are in the world, we pride ourselves on being a close-knit, focused team that is:

Welcoming and Friendly

We want to reflect the diversity of the cities we serve. By creating an inclusive culture where everyone can thrive, we'll make Fliff better for employees and customers alike.

Lively and Creative

We respect and value each other's ideas, experience and expertise. There is no such thing as a bad idea; only ideas that are executed and ideas that are discarded after consideration.

Stimulating and Rewarding

We know bright minds love a challenge, and we understand your desire to see your hard work pay off. We'll make sure your daily tasks align with your career ambitions as we grow together.

Equal Employment Opportunity Statement

Fliff is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.