Senior Platform Engineer

What you will do:

• Contribute to the design and operation of our multi-tenant AWS environment, including account structure, guardrails, and network and security baselines
• Build and maintain Infrastructure-as-Code modules and landing zones using Terraform or OpenTofu
• Collaborate on the design of our observability approach for a distributed serverless system
• Work with the team on FinOps practice: cost visibility, per-tenant attribution, and tuning of concurrency, memory, and cost per invocation
• Help build the guardrails, access patterns, and cost controls for product teams consuming Amazon Bedrock
• Support platform identity across Amazon Cognito and federation into client-managed identity providers such as Microsoft Entra ID for production workloads
• Share an on-call rotation with the other platform engineers, and help shape a coverage model that works across time zones
• Mentor colleagues and support a platform-as-a-product culture that gives teams autonomy without losing governance

Our stack:

Serverless-first on AWS: Lambda, DynamoDB, SQS, S3, and Bedrock. Terraform and OpenTofu for infrastructure, GitHub Actions for CI/CD. Product teams work in Rust, TypeScript, Python, Vue, and Angular. We do not run containers

• 5+ years in platform engineering, cloud infrastructure, or DevOps, with substantial hands-on AWS experience
• Hands-on Infrastructure-as-Code experience with Terraform or OpenTofu, including multi-account and landing zone design
• A clear point of view on observability for distributed systems, and the reasoning behind it
• Solid automation and scripting ability. We are language-agnostic; Rust, TypeScript, or Python all work here
• Excellent collaboration and communication skills, with the ability to influence and enable product teams

It would be a real bonus if you have:

• Experience with AWS serverless and event-driven architecture, including idempotency, retries, dead-letter queues, and failure handling. Strong AWS generalists who want to go deep here are welcome
• Experience building AI agents to monitor platform health
• FinOps or cloud cost optimization experience
• Experience with identity federation into client-managed identity providers such as Entra ID, and with multi-tenant identity models
• Experience building or scaling a B2B SaaS platform
• Familiarity with financial services requirements around security, compliance, and auditability
• Strong CI/CD and automation background, ideally with GitHub Actions
• Experience with Amazon Bedrock or comparable managed AI services
• AWS certification, particularly DevOps Engineer - Professional, Solutions Architect - Professional, or Security - Specialty

This role will require regular travel to Switzerland

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.

We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.