(Senior) Cloud Platform Engineer - AWS

Platform Engineering at Shine

Our Engineering Organization of 150+ Engineers is organized into specialized domains. Within the Platform domain, dedicated teams collaborate to provide the foundation that product teams build on.

AWS Infrastructure

Multi-account architecture, networking, IaC, and platform capabilities on AWS.

Governance & Security

IAM, compliance, policy enforcement, and security baselines.

Engineering Efficiency

CI/CD, golden paths, developer tooling, and observability patterns.

FinOps

Cost visibility, optimization, and cloud financial management.

The AWS Infrastructure team manages a large‑scale, multi‑account AWS environment supporting multiple product lines across several AWS Organizations. We are in the middle of a significant consolidation effort — unifying governance, standardizing IaC and networking, establishing security baselines, and building self‑service capabilities that enable product teams to ship with confidence.

This is complex, high‑impact work: migrating accounts between organizations, designing enterprise networking, increasing IaC coverage across diverse maturity levels, and building the platform that dozens of engineers rely on daily.

Our Techstack

• AWS: EC2, ECS, EKS, Fargate, RDS, Aurora, S3, Lambda, VPC, Transit Gateway, Route 53, IAM, Organizations, Security Hub, GuardDuty, Config, CloudWatch
• IaC & Automation: Terraform/Terragrunt, GitHub Actions, OIDC
• Observability: NewRelic, Datadog, CloudWatch
• Networking: VPC, Transit Gateway, VPC Peering, VPN, Route 53

Your Role as a (Senior) Cloud Platform Engineer - AWS

Join the AWS Infrastructure team as a Senior Engineer, leading technical initiatives across our multi‑account AWS environment. You’ll drive architectural decisions, mentor engineers, and build the platform capabilities that product teams depend on. This role combines deep technical AWS expertise with platform leadership — you’ll set technical direction, establish standards, and elevate the team’s capabilities.

Your Responsibilities Will Include

Technical Leadership & Architecture

• Define the Blueprint: Architect and govern multi‑account AWS environments, ensuring scalable networking and platform standards.
• Set the Standard: Lead the adoption of advanced IaC patterns (Terraform/Terragrunt), testing frameworks, and golden paths.
• Own the Big Decisions: Evaluate trade‑offs (e.g., EKS vs. ECS vs. Serverless) and execute high‑stakes migrations or topology changes.

Platform Engineering & Enablement

• Productize Infrastructure: Build self‑service capabilities that allow product teams to deploy faster without friction.
• Connect & Scale: Design enterprise‑grade networking (Transit Gateway, hybrid connectivity) and CI/CD ecosystems.
• Guardrails, Not Gates: Balance organizational standardization with developer autonomy through smart automation.

Team Growth & Operations

• Force Multiplier: Mentor engineers, lead high‑quality code reviews, and foster a culture of platform thinking.
• Operational Health: Define SLIs/SLOs and lead incident response for complex, high‑impact issues.
• Continuous Evolution: Drive measurable improvements in reliability, performance, and cloud cost‑efficiency.

Job located in Berlin, Copenhagen, Amsterdam, Gdanks or Paris, with possibility of two remote working days per week.

About You

• You have at least 7 years of experience in a relevant field.
• Extensive AWS experience with proven track record of architecting large‑scale, multi‑account systems.
• Expert‑level understanding of AWS Organizations, SCPs, and multi‑account governance.
• Advanced Terraform/Terragrunt expertise with module library design and testing frameworks.
• Deep experience with GitHub Actions: building composite actions, reusable workflows, and efficient pipelines.
• Strong container platform experience (ECS/Fargate and/or Kubernetes/EKS).
• Expert AWS networking skills (Transit Gateway, complex VPC architectures, hybrid connectivity).
• Proven ability to evaluate trade‑offs between compute platforms (EC2, ECS, Fargate, EKS, Lambda).
• Experience with IAM Identity Center (SSO), cross‑account access patterns, and least‑privilege design.
• Familiarity with AWS security and compliance services (Security Hub, GuardDuty, AWS Config, CloudTrail).
• Experience with cost optimization practices and FinOps fundamentals.
• Experience leading technical initiatives and driving architectural decisions.

Equal Opportunity Employer

We follow the principle of equal treatment to consider all job applicants and do not discriminate based on their gender, sexual orientation, color, racial or ethnic origin, religion, disability, etc. as per applicable law.