Senior Principal Platform Engineer

Our client is a global leader in field service management software, born in Brisbane in 2002. Its platform helps electricians, plumbers, HVAC technicians, fire and security specialists and other trades quote, schedule, manage jobs, track time and get paid, all in one place. It serves businesses across Australia, New Zealand, the United Kingdom, Canada and the United States, and is building an AI-first platform that runs a trade business end to end.

As Senior Principal Platform Engineer, you will own the cloud foundation the platform runs on: a multi-region SaaS platform with more than two decades of history and customers who rely on it every working day. You will set the technical direction for the infrastructure layer and stay hands-on in the systems you design, making them reliable, secure, scalable and cost-efficient as the platform modernizes.

Reporting to the Platform Engineering Manager, you will work alongside Principal Software Engineers and product engineering leads. They build the product; you build what it stands on: AWS environments, container orchestration, networking, identity and access, infrastructure as code, CI/CD, and the observability and security foundations every service depends on. You own the infrastructure platform, not the application code, and you will co-own standards, paved paths and shared components with Engineering and Security.

- Own the technical direction for cloud infrastructure on AWS: Kubernetes fleet design on Amazon EKS, EC2, compute, networking, identity and storage across all operating regions.

- Design and run a resilient multi-region platform, including VPC design, multi-account structure, autoscaling, disaster recovery and data residency controls for five countries.

- Make critical infrastructure design calls, architect solutions with software engineers and lead build-versus-buy decisions.

- Lead and mentor a team of up to six Platform engineers, and own technical hiring for the team.

- Write and own Terraform for the whole AWS footprint, and build self-service paths so teams can provision what they need without a ticket.

- Build CI/CD and observability foundations with GitHub Actions, Jenkins, CloudWatch, Datadog, Grafana and Prometheus.

- Own reliability and cost for the infrastructure layer: SLOs, AWS spend and FinOps, capacity planning and major incident response, including on-call rotations.

- Proactively identify gaps in the current system and improve them.

Security is a property of the platform you build. You will own the infrastructure controls, policies and standards, including:

- Least-privilege identity across AWS accounts (IAM, AWS Organizations, SSO), secrets management, network segmentation and private connectivity.

- Supply chain and workload security for the EKS fleet: image scanning, admission policy, runtime controls and CVE response.

- Encryption and key management (AWS KMS) over customer data.

- Controls enforced in code and in the pipeline, so the secure path is the default path.

- Platform controls supporting ISO 27001 / SOC 2 and privacy requirements across all operating regions.

AWS (EKS, EC2, VPC, Transit Gateway, PrivateLink, Route 53, IAM, KMS) • Kubernetes • Terraform • GitHub Actions • Jenkins • Argo CD • CloudWatch • Datadog • Grafana • Prometheus • OpenTelemetry

Required

- 10+ years in DevOps, platform or infrastructure engineering, including several years at senior or principal level running production SaaS platforms at scale.

- Deep hands-on expertise in Amazon EKS: cluster design and upgrades, Karpenter or Cluster Autoscaler, right-sizing, bin-packing, Spot and Graviton adoption, and performance and cost tuning.

- Strong command of EC2 and AWS compute: instance selection, Auto Scaling groups, launch templates, Savings Plans, Reserved Instances and capacity planning.

- Proven AWS architecture experience across multi-account, multi-region environments: VPC design, Transit Gateway, PrivateLink, Route 53, load balancing, high availability and disaster recovery, grounded in the AWS Well-Architected Framework.

- Deep AWS security knowledge (IAM, Organizations and SCPs, KMS, Secrets Manager, Security Hub, GuardDuty, WAF) plus Kubernetes security (RBAC, IRSA or Pod Identity, network policies, admission control).

- Expert-level Terraform or equivalent IaC: module design, state management and standards across multiple teams.

- Strong experience building CI/CD and GitOps workflows (e.g., GitHub Actions, Jenkins, Argo CD) with security and quality gates.

- Hands-on observability at scale (metrics, logs, traces) with tools such as CloudWatch, Prometheus, Grafana, OpenTelemetry or Datadog, and defining and running SLOs.

- A track record of measurable AWS cost reductions and FinOps practices without sacrificing reliability.

- Experience leading incident response and post-incident reviews for customer-facing systems.

- Solid scripting or programming in Python, Go or Bash.

- Experience leading and mentoring engineers and influencing technical direction across teams.

- Advanced English.

- AWS Solutions Architect – Professional, AWS DevOps Engineer – Professional, AWS Security – Specialty, CKA or CKS (current or lapsed within five years).

- Running a multi-tenant SaaS platform across countries, including data residency and regional failover.

- GitOps and progressive delivery at scale (Argo CD, Argo Rollouts, Flux; canary and blue-green).

- Service mesh or advanced Kubernetes networking (Istio, Linkerd, Cilium).

- Policy as code and Kubernetes security tooling (OPA Gatekeeper, Kyverno, Falco).

- AWS cost tooling (Cost Explorer, Compute Optimizer, Kubecost) or FinOps Certified Practitioner.

- Database infrastructure on AWS (RDS, Aurora, DynamoDB): tuning, backups and high availability.

- Internal developer platforms or self-service tooling such as Backstage.

- Modernizing or consolidating legacy infrastructure onto a common platform.

- Supporting ISO 27001 or SOC 2 compliance programs.

- Infrastructure for data platforms or AI/ML workloads.

Please submit your CV with a cover letter (no more than two pages) describing how you have:

- Designed, optimized or scaled an Amazon EKS or AWS platform, and its measurable impact on reliability, performance or cost.

- Strengthened the security or compliance posture of a cloud platform.

- Led a team or influenced engineering direction through a significant infrastructure change or major incident.

- Permanent contract (contrato a término indefinido) with all legal benefits

- Competitive salary

- Private health insurance (medicina prepagada)

- Relocation bonus to Medellín

- On-site role in Medellín with parking