What we need

5+ years building and operating production infrastructure, at least 4 of them deep in AWS - and you've been on call for what you built.
Real Infrastructure-as-Code ownership (Terraform, Pulumi or CDK), including the unglamorous parts: state, module design, drift, provider upgrades.
Strong judgement about AWS services - Lambda, ECS/EKS, API Gateway, DynamoDB, IAM - including when the right answer is a plain EC2 instance or RDS rather than something clever.
You've run AWS at the account level, not just the resource level - multi-account setups with Control Tower or Organizations, SCPs, centralised logging, and the boring discipline of keeping new accounts consistent with the ones that came before.
Security is part of how you build, not a review gate at the end: least-privilege IAM you actually enforce, findings from Security Hub / GuardDuty / GitHub Advanced Security triaged rather than accumulated, secrets and supply chain handled properly. Bonus if you've worked under a formal regime (ISO 27001, KRITIS or similar).
You write code, not just config. Python or Go to a standard where other engineers want to use your tooling.
Containers and CI/CD in production, including rollbacks and how they fail.
You've run monitoring and alerting that people actually trust (DataDog, Grafana, Prometheus or equivalent) and can tell a useful alert from noise.

What would set you apart

Energy, grid, trading, or any domain where being late costs money.
Time-series data at scale.
Fleets of devices you don't physically control - IoT, edge, intermittent connectivity.
Streaming and data platforms (Kafka, Kinesis, Flink).
Working in an audited or regulated environment.

This role may not be for you if

You want to join a finished platform. Parts of this are greenfield, parts need replacing, and you'll have real influence over which is which - but nothing is handed to you tidy.
On-call is not a formality here. These systems move money, and you'd share the rotation.
Compliance is genuine engineering work in this role, not a checkbox someone else ticks.
The team is small enough that you own your own operations, which some weeks means unglamorous work.
You need remote or hybrid-heavy. This is an office-first role in Munich.

At flexa, we are committed to diversity - of backgrounds and experiences. You don’t need 100% of the preferred qualifications to add incredible value to our team. If you’re passionate about what you could accomplish here, we’d love to hear from you.

Senior Cloud Engineer (d/f/m)

Documents