Cloud Platform Engineer - AWS

6 days ago

London, United KingdomSenior

Responsibilities

Build and operate a highly available Coder control plane on AKS with managed PostgreSQL, provisioner separation, and OIDC single sign-on.
Create production-quality Terraform workspace templates using hardened base images and Docker-based or Envbuilder dev-container approaches.
Implement source-control, package-registry, internal API, and database connectivity with egress allowlisting, default-deny NetworkPolicy, SSH restrictions, managed secrets, and SIEM audit events.
Load test and tune prebuilds, autostop, dormancy, quotas, and warm capacity while measuring cold starts, responsiveness, cost, and developer access friction.
Maintain cloud portability and produce evidence about platform behavior, assumptions, controls, operational viability, and production requirements.
Write platform design documentation, implementation rationale, control results, runbooks, limitations, and production recommendations.

Production-quality Terraform experience including module authorship, composition, versioning, state management, drift handling, and maintainable infrastructure code.
Managed Kubernetes experience with AKS or EKS, including Pod Security Standards or equivalent admission controls, NetworkPolicy, RBAC, node pools, resource governance, secrets handling, and troubleshooting.
Experience engineering hardened container images, registries, caching, and Kubernetes-based image builds without privileged containers or mounted Docker sockets.
Linux and network troubleshooting experience covering overlay networking, NAT traversal, DNS, HTTP proxy behavior, TLS, package access, source-control connectivity, and remote responsiveness.
Experience integrating OIDC single sign-on, group and role mapping; SCIM provisioning is desirable.
Ability to implement control designs, test controls honestly, and clearly report unexpected behavior.
Experience with Coder or comparable cloud development environments such as GitHub Codespaces, Gitpod, Microsoft Dev Box, or Daytona is desirable.
Experience with dev containers, @devcontainers/cli, Envbuilder-style patterns, container isolation, egress allowlisting, TLS inspection, load testing, cost engineering, idle reclamation, quota management, platform operations, AWS and Azure portability, or regulated environments is desirable.

Genuine hybrid working and a home office budget.
Profit share, recognition programs, private healthcare, competitive salary benchmarking, and a confidential employee assistance program covering counseling, mental health support, and financial wellbeing.
Paid time off including birthday leave, interest-based communities, monthly socials, and cross-regional events.
Learning budgets, Udemy access, a clear career framework, internal mobility, and thought leadership opportunities.
Family-friendly flexibility, inclusive working practices, and interview accommodations where needed.

51-200 employees