Platform Engineer

You'll own Volta's infrastructure end to end, across AWS and GCP, and you'll make every engineer on the team faster. You'll be the EU-based owner of production access and of the technical security controls behind our ISO 27001 and SOC 2 program. You report directly to the CTO: a senior individual contributor role with no team to manage at the start and a lot to own.
• Own the infrastructure end to end: AWS as the primary platform (EKS, RDS Postgres, S3, IAM, networking), GCP Cloud Run for our AI services, cross-region backup replication
• Hold the keys, from the EU: admin and production access, IAM, identity federation and the GDPR-relevant technical controls
• Run the AWS partner, don't get replaced by it: set the direction, review their work, own the escalations and keep the knowledge in-house
• Make the SLA boring: 99.5% uptime commitment, observability on Grafana Cloud and Loki, trusted alerts, backups and point-in-time recovery that have actually been restored
• Execute security: hardening, pentest remediation, technical controls and audit evidence for ISO 27001 and SOC 2
• Make engineers faster: fast CI/CD on GitHub, GitOps with ArgoCD, per-prospect demo environments, per-tenant feature flags, secrets management and least-privilege IAM
• Scale with the customer count: about 15 new enterprise customers expected in the next 6 to 12 months, so onboarding a tenant should be infrastructure as code and a checklist
• Keep cloud cost honest: spend visibility, right-sizing, commitments
• Senior DevOps or platform engineer, still hands-on: 6+ years running production workloads in the cloud, Kubernetes included, still writing Terraform and pipelines yourself
• Owned production, not just tasks: you've been on the hook for uptime, incidents and postmortems on a system customers paid for
• Security as engineering: you've implemented the technical side of ISO 27001, SOC 2 or similar audits and worked through pentest findings
• DevX instinct: you've built tooling other engineers liked using (pipelines, ephemeral environments, internal CLIs)
• Multi-cloud comfort: AWS in depth, GCP enough to own Cloud Run services, IAM and networking there
• Worked through others: you've managed an MSP, a vendor or contractors and kept quality high
• Must have: deep AWS (EKS, RDS Postgres, IAM, VPC, S3, CloudTrail, GuardDuty); Kubernetes in production (Helm, ingress, debugging under pressure); infrastructure as code (Terraform or equivalent); CI/CD on GitHub Actions and GitOps (ArgoCD or Flux); observability with Grafana, Prometheus, Loki or equivalent; tested backup, restore and disaster recovery; hands-on security (least-privilege IAM, secrets management, network hardening); fluent English
• Nice to have: GCP (Cloud Run, Vertex AI); ISO 27001 or SOC 2 certification experience; feature flags and per-customer environments; managing an AWS partner; Python scripting and familiarity with LLM tooling such as Langfuse; Italian or French
•

Location:
based in Milan or Paris, hybrid, 3 office days a week
• Screen with the Chief of Staff (30 min): scope, seniority, motivation, location
• Infrastructure deep dive with the CTO and the Connect Tech Lead (60 min): a simplified version of our setup and a scenario (onboard a new enterprise tenant, close a pentest finding, protect the SLA). No take-home
• Culture and founder conversation (45 min)
• Reference checks