Senior AWS Platform Engineer (AWS)

TL;DR

Senior AWS Platform Engineer (AWS): Redesigning a secure, scalable, multi-account AWS environment with an accent on cloud architecture, infrastructure automation, security governance, and cost chargeback. Focus on migrating workloads from a monolithic account, establishing landing zones and guardrails, and solving complex networking, operating system, and compliance challenges.

Location: Krakow, Poland; hybrid workplace

Company

hirify.global is an inclusive employer focused on building a diverse workforce and supporting applicants’ needs under applicable labour laws.

What you will do

• Design and implement a secure multi-account AWS architecture using AWS Organizations and Control Tower.
• Plan and execute phased migrations from a monolithic AWS account to separate customer, environment, and shared-service accounts.
• Automate account provisioning, networking, IAM, logging, security controls, and infrastructure baselines with Terraform and CI/CD pipelines.
• Establish security guardrails, centralized monitoring, and compliance controls using SCPs, IAM boundaries, CloudTrail, GuardDuty, Security Hub, and AWS Config.
• Design and operate scalable VPC, segmentation, routing, DNS, and hybrid connectivity solutions.
• Implement AWS cost monitoring, budgeting, reporting, and customer-level chargeback or showback models.

Requirements

• Senior-level experience designing and operating AWS infrastructure at scale.
• Hands-on experience with AWS Organizations, Control Tower, and multi-account architectures.
• Proven experience migrating workloads between single-account and multi-account AWS environments.
• Strong Linux and/or Windows systems engineering and networking fundamentals, including TCP/IP, DNS, and routing.
• Practical Terraform experience and knowledge of AWS security guardrails, SCPs, IAM, and KMS.
• Experience with centralized logging, monitoring, security tooling, AWS cost management, and chargeback or showback models.

Nice to have

• AWS Transit Gateway and advanced networking architecture experience.
• Experience in regulated or compliance-driven environments, including ISO 27001.
• AWS Professional certifications such as Solutions Architect Professional or DevOps Engineer Professional.
• Experience designing long-term AWS platforms or cloud foundations.

Culture & Benefits

• Inclusive workplace committed to increasing representation of designated groups under applicable country legislation.
• Applicant accommodations are supported throughout the recruitment process in accordance with labour law.
• Artificial intelligence tools may support application review and assessment, while final hiring decisions remain with people.