<h3>Why Join Exadel</h3> <p>We’re an AI-first global tech company with 25+ years of engineering leadership, 2,000+ team members, and 500+ active projects powering Fortune 500 clients, including HBO, Microsoft, Google, and Starbucks.</p> <p>From AI platforms to digital transformation, we partner with enterprise leaders to build what’s next.<br>What powers it all? Our people are ambitious, collaborative, and constantly evolving.</p> <h3>About the Client</h3> <p>A premier technology provider for the global energy sector. Operating across subsea and surface technology segments, the company delivers integrated deepwater production and surface wellhead systems. Leveraging a proprietary integrated execution model, the firm optimizes project economics and accelerates production for both traditional offshore and emerging energy ventures worldwide.</p> <h3>What You’ll Do</h3> <ul> <li>Design, build, and maintain core platform components, including SSO, access management, compute clusters, networking, CI/CD, and observability</li> <li>Own and evolve Terraform modules, baseline configurations, state-management strategies, and platform guardrails for distributed teams</li> <li>Design secure platform “golden paths,” including approved defaults, templates, standards, and reusable deployment patterns</li> <li>Integrate platform capabilities with team-owned AWS CDK stacks through stable and well-defined contracts</li> <li>Lead the evolution of platform abstraction layers and internal service catalogs</li> <li>Design and manage a multi-account AWS landing zone using AWS Organizations, Service Control Policies, and permissions boundaries</li> <li>Create and maintain developer-onboarding patterns for IAM Identity Center access, automation, and deployment pipelines</li> <li>Build secure cross-account deployment workflows using GitHub OIDC and least-privilege access principles</li> <li>Design, operate, and scale production ECS and EKS clusters supporting more than 100 workloads</li> <li>Establish best practices for container execution, networking, security, resilience, and autoscaling</li> <li>Manage centralized networking components, including VPCs, Transit Gateway, Route 53, and cross-account connectivity</li> <li>Ensure secure east-west communication between workloads operating across different AWS accounts</li> <li>Develop self-service tools and templates for pipelines, service definitions, and platform actions</li> <li>Abstract infrastructure complexity to enable development teams to deploy applications quickly and safely</li> <li>Operate and evolve platform-wide logging, monitoring, metrics, and distributed-tracing capabilities</li> <li>Define and maintain operational, security, and reliability standards for platform components</li> <li>Produce clear documentation and deliver workshops, reusable patterns, and architectural guidance to engineering teams</li> </ul> <h3>What You Bring</h3> <ul> <li>Senior-level hands-on experience as a Platform, DevOps, Site Reliability, Infrastructure, or Cloud Engineer</li> <li>Extensive production experience operating within complex, multi-account AWS environments</li> <li>Hands-on experience with AWS Organizations, Service Control Policies, landing zones, and cross-account governance</li> <li>Deep understanding of AWS IAM, including roles, policies, permissions boundaries, identity federation, and cross-account access</li> <li>Advanced, hands-on Terraform experience used at scale in a professional production environment</li> <li>Production experience designing and operating EKS and/or ECS environments supporting more than 100 workloads</li> <li>Demonstrated experience running and supporting software in large-scale production environments</li> <li>Strong experience building CI/CD pipelines that enable frequent and reliable releases</li> <li>Hands-on experience with Git and modern source-control workflows</li> <li>Strong knowledge of cloud-native architecture and engineering principles</li> <li>Experience designing scalable, resilient, and highly available AWS architectures</li> <li>Hands-on experience with Kubernetes and container orchestration</li> <li>Experience with infrastructure as code and platform automation</li> <li>Strong understanding of cloud networking and security</li> <li>Experience implementing monitoring, centralized logging, metrics, and observability solutions</li> <li>Experience with API gateways and service-integration patterns</li> <li>Strong technical documentation and communication skills</li> <li>AWS Organizations, Control Tower or landing-zone architecture, and Service Control Policies</li> <li>AWS IAM, IAM Identity Center, roles, policies, permissions boundaries, and cross-account access</li> <li>Terraform modules, remote state, reusable configurations, and multi-account governance</li> <li>Amazon EKS and/or Amazon ECS</li> <li>Kubernetes and containerized workloads</li> <li>GitHub Actions, OIDC, and CI/CD automation</li> <li>VPC, Transit Gateway, Route 53, and cloud-networking concepts</li> <li>Logging, monitoring, metrics, tracing, and observability platforms</li> <li>Infrastructure automation and configuration management</li> <li>Programming and scripting using one or more languages such as TypeScript, Java, Kotlin, Python, or Bash</li> </ul> <h3>Nice to have</h3> <ul> <li>Experience deve