Staff Cloud Platform Engineer (m/f/d) Golden Paths, Guardrails as Code & AI-ready Platform | Remote

Project overview

Our client is building an AI-ready internal platform that makes the right path the easy path. You’ll simplify a complex ecosystem into a clear, safe and fast developer experience, designing opinionated golden paths and embedding guardrails as code into platform components so that both humans and AI agents can ship with confidence.

Responsibilities

First topics on the roadmap

• Shape end-to-end golden paths from repo to runtime, with good practices baked in
• Partner with Security, Architecture, QA and Operations to define patterns, guardrails and shared responsibility models
• Move from resource vending to intent-driven automation that delivers production-ready outcomes
• Standardize a machine-readable system model (services, components, APIs, ownership) for cross-tool visibility
• Reduce toil and risk through SLO-aware delivery, safe rollouts and clear trust boundaries across accounts and clusters
• Service scorecards: a traffic light per service in the developer portal, backed by evidence from the systems themselves, used for SRE takeover, team self-checks and lifecycle governance. Checks are tracked as metrics over time, not snapshots.
• Test automation as a launch guardrail: anchoring spec-driven development and a high degree of test automation in the non-functional requirements from the start, as a precondition for go-live and operational handover.
• Vulnerability triage: runbooks and tooling (including agent support) that let every SRE and platform engineer assess a new vulnerability on their own, decide “patch” or “not affected and why”, and document the outcome.

Requirements

Tech stack

Kubernetes, AWS (some Azure/GCP), GitLab CI, Helm, ArgoCD, Terraform, Grafana Cloud (LGTM stack). Services are written in Python, Java (Spring Boot), Node.js and Go; you should be fluent enough to pair with developers debugging in production.

• Deep experience with Kubernetes, GitOps and IaC (Terraform) on at least one major cloud, ideally AWS
• Track record of replacing bespoke setups with well-documented, adoptable patterns
• Practical security expertise: identity and permissions, isolation patterns, admission and policy engines (policy-as-code)
• Exposure to AI-assisted SDLC and to integrating managed services to offload toil while preserving control
• Product mindset: you measure time-to-first-success, adoption and developer satisfaction
• Strong communicator who can explain infrastructure to executives and engineers alike, builds trust across teams and mentors others
• Pragmatic: you turn ideas into safe increments and iterate quickly

Project details

If youre interested please apply with your updated CV, hourly rate and 2-3 sentences regarding relevant experience

• Start: ASAP, latest 1.1
• Duration: long-term, open-ended
• Workload: full-time preferred, part-time negotiable but no less than 20h per week
• Location: remote
• Language English (German is a plus)
• Start: ab sofort
• Duration: 12 Monate
• Location: DE