Platform Infrastructure Engineer

ABOUT US Pliant is a European fintech specializing in B2B payment solutions. Our modular, API-first platform helps businesses streamline spending, improve cash flow, and integrate payments into their financial workflows. Designed for industries with complex payment needs, such as travel and fleet, Pliant enables greater efficiency, control, and profitability. We serve two primary customer segments: companies looking to optimize operational processes through intuitive apps and APIs, and financial software platforms, ERP providers, and banks that want to launch or enhance their credit card offerings using Pliant's embedded finance and white-label solutions. Founded in 2020 and headquartered in Berlin, Pliant supports over 4,000 businesses and more than 20 partners globally. As a licensed e-money institution (EMI), we issue credit cards in 11 currencies across more than 30 countries, helping companies streamline and simplify payments. ABOUT THE ROLE We're looking for a Platform Infrastructure Engineer to join our small platform team with a wide remit: owning the AWS infrastructure across multiple account types, the CI/CD pipelines for 20+ microservices, and the Lambda and ECS runtime that product teams deploy on. Every engineer at Pliant depends on what this team maintains. You'll own one or more infra domains end to end: design, build, operate, on call. That covers Terraform modules, GitHub Actions pipelines, AWS account architecture, Lambda functions in Go and Python, and an active ECS to Kubernetes migration. You'll work directly with product engineers, understand where the friction is, and fix it. You'll report to the Head of Platform Infrastructure. WHAT YOU'LL DO - Own infra domains end to end: Take one or more domains from design through build, operations, and on call. You make the call, review the PRs, and answer the page. - Run Infrastructure as Code: Write and maintain Terraform modules for AWS resources across dev, staging, production, and PCI scoped accounts, orchestrated through Spacelift. - Maintain CI/CD at scale: Own GitHub Actions pipelines for a fleet of Java and Kotlin microservices, including reusable workflows, matrix strategies, and cache behavior. - Build operational tooling: Write Lambda functions in Go and Python for tasks like metrics collection, secret rotation, IAM authentication, and event dispatching. - Own observability: Set up Datadog monitors, dashboards, and SLOs that surface problems before a product engineer notices them. - Own security and compliance controls: Manage IAM, KMS, and access baselines that satisfy PCI DSS and SOC 2 without generating a support ticket every time a product team needs something. - Take part in on call: Join the rotation the team is currently shaping and own your incidents. - Use AI assisted coding tools daily: Claude Code, Cursor, or something equivalent, both to ship features and to help peers get more out of them. WHAT YOU'LL BRING - 5+ years in platform or infrastructure engineering, with meaningful time spent on production AWS at scale. - Solid AWS experience: VPC design, IAM, ECS and EKS, Lambda, RDS. You know when the right answer is a managed service and when it isn't. - Terraform proficiency: you write modules and have dealt with state migrations, drift, and broken remote states in a shared codebase. You're comfortable reading a plan output. - Experience with Spacelift or a similar IaC orchestration tool. - Kubernetes experience designing and running production workloads at scale. We're currently planning a migration from ECS to EKS, so this experience will be especially valuable. - CI/CD experience with GitHub Actions at scale: reusable workflows, matrix strategies, and cache behavior. You're the person other engineers ask when the pipeline is doing something weird. - Observability as a default: Datadog or equivalent, with monitors, dashboards, and SLOs as part of your definition of done. - High Python proficiency: you can navigate our codebase and implement complex features for our internal customers. - Clear communication with product engineers: you can explain a trade off in two sentences and can talk with non technical peers without pulling up code. - Experience with AWS IAM Roles Anywhere and certificate based authentication patterns. - Fluency with AI assisted coding tools such as Claude Code or Cursor, used to ship features, not just review code. BONUS POINTS - Compliance awareness: we operate under PCI DSS, ISO 27001, and SOC 2. - Familiarity with Go, enough to maintain and extend Lambda functions. If you don't tick this box, that's fine as long as you're willing to learn. - Kafka cluster operations experience. WHAT THE FIRST YEAR LOOKS LIKE - The first weeks are orientation: learning the accounts, the IaC setup, the CI pipelines, and the on call history, while shipping small infrastructure changes. - By month three, you own at least one domain. You make the call, review the PRs, and answer the page. - By year one, you've shipped something that made the team's job smaller: a reliability improvement, a security control, or a self service capability that cut the ticket volume coming your way. WHAT WE OFFER - The opportunity to work in a growing team with big responsibilities that thrives on a strong exchange of knowledge and excellence - Attractive remuneration - Your choice of preferred OS, Windows or Mac - Flat hierarchy and transparent communication in a relaxed, professional atmosphere - Opportunity to develop your talent in a dynamic team with ambitious goals - Flexibility and possibility to work remotely - Pliant Card with monthly credit to explore the product and enjoy food with colleagues Pliant is an equal opportunity employer. We welcome applications from people of all backgrounds, identities and abilities, and are committed to an inclusive hiring process. If you need any accommodations during the interview process, please let us know