Stellenbeschreibungph3Who we are... /h3 pWyden is the leading provider of institutional digital asset trading technology to financial institutions. We are a collaborative and laser-focused team of leaders and engineers committed to building advanced, scalable and modular trading infrastructure that underpins our clients' digital asset product offerings and operations. /p pToday, dozens of banks, brokers, and financial service institutions rely on Wyden's products. Digital assets are now a mainstream asset class, and financial institutions are fast adopting digital assets in response to digital asset regulations around the globe. /p pIf you are passionate about the institutional digital asset ecosystem, thrive on solving complex infrastructure challenges at scale, and want to be the technical authority who keeps mission‑critical production environments running reliably across a growing roster of global financial institutions, Wyden is the home for you. /p pEstablished in Zurich, Switzerland, Wyden also has a development hub in Poland. /p h3About the role /h3 pThe Senior Cloud Platform Engineer is the AWS architecture authority for Wyden's Run function — one of the most senior technical experts in production operations. This role sits within Customer Success, reporting directly to the Head of Run, and is the engineering backbone on which every customer environment, deployment, and operational system depends. /p pThis is not a pure operational support role and it is not a management role. It is a senior technical leadership position: you own the infrastructure architecture, you set the DevOps standards, and you build the systems that allow the broader Run team to operate with confidence. You will also recruit, onboard, and technically lead a SRE — defining what good looks like and building toward genuine team capability. /p pZurich is the preferred location. This role will work in close daily proximity to the CTO and Head of Customer Success — involved in architectural reviews, compliance discussions, and operational governance decisions at a level that benefits significantly from being in the room. bRemote candidates based in Poland will be considered for exceptional profiles. /b /p pThe deep AWS and DevOps execution that was previously concentrated in a single interim contractor is now formally owned by this role. Wyden's customer base is growing toward 20+ live environments. The infrastructure must scale with it — reliably, automatically. /p h3Your responsibilities will include: /h3 ol libAWS architecture cloud infrastructure design /b /li liOwn the AWS architecture for all Wyden customer environments — multi‑tenant and single‑tenant — ensuring designs are scalable, secure, cost‑efficient, and operationally maintainable /li liDesign and govern the infrastructure patterns that the Run team and junior SRE operate within: VPC design, EKS cluster architecture, Aurora/RDS configurations, IAM policies, networking (VPN, PrivateLink, Transit Gateway, Direct Connect) /li liLead infrastructure architectural reviews with the CTO, ensuring production decisions are technically sound and aligned with the platform roadmap /li liIdentify and address infrastructure risk proactively — before incidents occur, not in response to them /li liOwn AWS cost management: rightsizing, reserved instance strategy, architecture optimisations that reduce spend as the environment footprint grows /li /ol ol libInfrastructure as Code DevOps automation /b /li liOwn all IaC for customer AWS deployments: design, write, test, and maintain Terraform and Terragrunt modules that are reusable, version‑controlled, and reproducible across all environments /li liDesign, build, and own Wyden's CI/CD pipelines for infrastructure and application deployment: GitLab CI, GitHub Actions, and AWS CodePipeline — not just using pipelines but architecting them from the ground up /li liAutomate deployment, validation, and rollback processes to the point where routine deployments require minimal human intervention and carry low operational risk /li liDefine and enforce DevOps standards across the Run team: branching strategy, pipeline structure, deployment gates, environment promotion criteria, and release hygiene /li liIdentify and eliminate manual operational steps through scripting and automation — Python, Bash, or equivalent — building a team that is systematically less dependent on individual knowledge /li liContinuously improve IaC coverage to eliminate configuration drift and manual provisioning across all customer environment /li /ol ol libMonitoring, observability alerting automation /b /li liDesign and own Wyden's full observability stack: AWS CloudWatch, Prometheus, Grafana, Sign4l, OpenSearch — ensuring complete visibility into every customer environment before customers report issues /li liBuild monitoring templates that are reusable across environments, reducing the cost of onboarding new customers to production /li liDefine SLOs and SLAs with the Head of Run; build the alerting infrastructure that makes breaches visible and actionable in real time /li liTune alerting continuously to reduce noise and surface only actionable signals — a noisy alert system is an ignored alert system /li liBuild and own automated reporting infrastructure: environment health dashboards, SLA metrics, incident summaries, and capacity trend data for both internal and customer‑facing use /li /ol ol libApplication deployments release engineering /b /li liOwn deployment execution for application releases, infrastructure upgrades, and configuration changes across all customer environments /li liBuild and maintain deployment runbooks that are standardised, low‑risk, reversible, and executable by other team members — not just by the Senior SRE /li liDefine pre‑deployment validation checklists and automated gates that reduce last‑minute surprises and deployment failures /li liCoordinate with Engineering and the Head of Run on release handovers: ensuring production environments are validated and ready before go‑live decisions are made /li liOwn the deployment pipeline architecture: from code commit to production — including build, test, staging validation, and production promotion /li /ol ol libCustomer platform migrations /b /li liLead the technical execution of customer migrations from Wyden's legacy platform (Everyware) to the current NG environment — working in partnership with the Engineering DevOps team /li liDesign and own the migration infrastructure: environment provisioning templates, data migration tooling, validation frameworks, and cutover runbooks /li liBuild reusable migration automation that accelerates each successive customer migration and reduces manual execution risk /li liEnsure monitoring, alerting, and operational runbooks are fully in place for newly migrated environments from day one of production handover /li liManage migration risk: define go/no‑go criteria, maintain rollback capability, and ensure CS teams are operationally prepared before each cutover /li /ol ol libJunior SRE leadership team development /b /li liRecruit, onboard, and technically lead the SRE — actively involved in defining the role requirements, conducting technical screening, and selecting the right candidate /li liSet the technical standards the junior SRE operates within: code review, IaC standards, pipeline conventions, documentation requirements, and operational procedures /li liBuild toward genuine team independence — the SRE should be progressively handling more operational execution /li liWork closely with the Head of Run to bridge the AWS knowledge gap: proactively sharing infrastructure context, explaining architectural decisions, and building the Head of Run's confidence in governing infrastructure choices /li liContribute to the wider team's capability: support Infra Support Engineers as they develop AWS knowledge, and ensure operational knowledge is documented rather than held individually /li /ol ol libOperational documentation compliance /b /li liOwn infrastructure documentation for all customer environments: architecture diagrams, runbooks, deployment guides, and environment‑specific operational notes /li liContribute to ISO 27001 and SOC 2 compliance evidence: infrastructure controls documentation, security patch records, access management logs, and audit‑ready operational records /li liEnsure all infrastructure decisions, architecture patterns, and operational procedures are documented and accessible to the full Run team — building institutional knowledge, not a personal knowledge silo /li /ol h3The ideal candidate would bring: /h3 pbMust have /b /p ol liProven, production‑depth AWS expertise across the full infrastructure stack: EKS (Kubernetes), Aurora/RDS, Lambda, VPCs, IAM, S3, CloudWatch, Route 53, and AWS networking services (VPN, PrivateLink, Transit Gateway) — not familiarity, daily hands‑on depth /li liSenior‑level Infrastructure as Code experience: Terraform and Terragrunt in production, writing and maintaining modular, tested, reusable IaC at scale across multiple environments /li liCI/CD pipeline design and ownership: GitLab CI, GitHub Actions, AWS CodePipeline or equivalent — built pipelines from scratch, not just used them /li liKubernetes operations at depth: EKS cluster design, workload deployment, scaling, upgrade management, and troubleshooting in production multi‑tenant environments /li liStrong scripting and automation: Python, Bash or equivalent — builds automation tooling, not just scripts individual tasks /li liMonitoring and observability stack ownership: CloudWatch, Prometheus, Grafana, and equivalent — has designed and owned a full observability stack, not just configured dashboards /li liExcellent written and spoken English: able to produce clear architecture documentation, conduct technical discussions with a CTO, and communicate infrastructure risk to operational and CS teams /li /ol pbStrong assets /b /p ol liAWS certification at professional level: AWS Certified Solutions Architect Professional, AWS Certified DevOps Engineer Professional, or AWS Certified SysOps Administrator — strong preference for at least one professional‑level certification /li liSaaS or multi‑tenant platform experience: operational complexity of managing customer‑specific environments on shared infrastructure, where one change can impact multiple clients /li liFinancial services or regulated industry background: familiarity with ISO 27001, SOC 2, or equivalent compliance frameworks from an infrastructure design and evidence perspective /li liMigration experience: designed and executed platform migrations at scale, including environment provisioning, data migration tooling, validation frameworks and cutover management /li liAWS networking depth: VPN connectivity, Direct Connect, AWS PrivateLink, Transit Gateway — particularly valuable for Wyden's complex single‑tenant customer integrations /li liExperience mentoring or technically leading junior engineers: setting standards, conducting code review, and building team capability without becoming a bottleneck /li liDatabase operations at depth: Aurora/RDS design, backup and recovery, performance tuning, and upgrade execution for production financial‑grade databases /li liDevSecOps experience: security scanning in pipelines, compliance automation, secrets management (AWS Secrets Manager, HashiCorp Vault), and infrastructure security hardening /li /ol pbThe right mindset /b /p ol liArchitecture thinking: you design systems that scale and stay maintainable, not just solutions that work today /li liAutomation‑first: your instinct is always to eliminate the manual step, not to do it faster /li liBuilder of team capability: you write documentation, set standards, and build systems so others can operate independently — you are not the bottleneck /li liReliability‑focused: you think in terms of SLOs, failure modes, blast radius, and recovery time — not just delivery /li liCalm and systematic under pressure: production incidents are solved methodically, with clear communication, not heroics /li liCollaborative across functions: you work comfortably with a CTO on architecture, with a Head of Run on operational governance, and with CS teams on customer impact — adapting your communication register appropriately /li /ol h3What Wyden offers /h3 ol liAn opportunity to play a key role in shaping the future of the digital assets industry. /li liCompetitive salary and benefits package /li liFlexible / remote working policies /li liRapid growth of responsibility for high performers in a dynamic, scale‑up environment /li liAn open and dynamic work environment where everyone is valued /li liBecome part of a global team of professionals with a diverse range of expertise covering banking, trading, software and systems development, and more. /li /ol /p #J-18808-Ljbffr
