SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fliff is seeking a Staff Platform Engineer to own and evolve the company's CI/CD and infrastructure platform. This is a high-impact individual contributor role focused on building secure, scalable, and maintainable systems that enable the entire engineering organization.
Key Responsibilities:
- Own and evolve the CI/CD platform, including GitHub Actions with self-hosted runners (RunsOn) and an in-progress migration/refactor of Jenkins setup ("Jenkins Next").
- Build and maintain Infrastructure as Code across AWS using Terraform, Terragrunt, and Terramate, following reusable component patterns (CloudPosse-style).
- Design secure-by-default delivery pipelines with branch protection, PR approval rulesets, secrets management (SOPS), and production-approval flows for critical paths.
- Drive migration from IAM users and long-lived access keys toward IAM roles, and help close foundational security gaps including open ports, unmanaged credentials, and missing guardrails.
- Work with Kubernetes (EKS), Helm, and ArgoCD to support the observability stack (Grafana, Prometheus) and developer platform (Backstage).
- Review and improve existing components—Terraform, pipelines, AWS infrastructure—not only build new ones, and raise the bar on how the team delivers.
- Share the support/triage load and help reduce it through better automation and tooling.
This role is ideal for a senior engineer who thrives on platform work, security-first thinking, and mentoring through example. You'll have significant autonomy to shape infrastructure strategy and drive technical excellence across the organization.
Requirements:
- Strong AWS experience and deep hands-on CI/CD expertise (GitHub Actions and/or Jenkins).
- Solid Infrastructure as Code background with Terraform; Terragrunt/Terramate experience is a plus.
- Real Kubernetes/EKS experience, including Helm and GitOps (ArgoCD).
- Security-conscious mindset; comfortable reasoning about IAM, secrets, network exposure, and least-privilege access. DevSecOps experience is a strong plus.
- Ability to design solutions and adapt gracefully when constraints change (scaling globally, cost optimization, etc.), with strong problem-solving and context-gathering skills.
- Sound judgment on edge cases and incidents: ability to approach major incidents (10x traffic spikes, regional outages) methodically and handle outages effectively.
- Effective and deliberate use of AI tooling, with genuine understanding of what it produces and the ability to explain trade-offs.
