Senior Cloud Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. It is the largest FinTech in Poland and a leader in Central and Eastern Europe, operating in several countries including Asia and South America. XTB emphasizes employee development through various training and development programs.

• 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.
• Proven practical experience with highly available cloud environments in a multi-cloud setup (strong hands-on knowledge of at least two providers: AWS, Azure, GCP).
• Strong understanding of DevOps, Platform Engineering, and GitOps principles.
• Solid hands-on experience with managed Kubernetes orchestration (e.g., AKS, EKS, GKE).
• Experience working in regulated industries (e.g., FinTech, banking) with strong compliance, security, auditability, and governance requirements.
• Strong scripting or programming skills in Python, Bash, or similar languages.
• Proficiency in creating and maintaining infrastructure using Terraform.
• Strong experience designing and implementing CI/CD pipelines, preferably using GitLab CI/CD.
• Practical experience configuring metrics, dashboards, and alerts using tools like Grafana and Prometheus.
• Hands-on experience with Identity & Access Management (IAM), RBAC models, and implementing least-privilege security.
• Solid understanding of hybrid networking concepts (e.g., BGP, VPN, Direct Connect / ExpressRoute, hybrid DNS resolution) and network troubleshooting.
• Ability to work independently, take ownership of technical delivery, and support production-grade environments.

Nice to have:

• Experience with IaC PR-workflow automation and orchestration tools (e.g., Atlantis, Terragrunt).
• Experience with GitOps delivery tools (e.g., Argo CD, Flux).
• Experience with the Wiz security platform or similar cloud security posture management (CSPM) tools.
• Experience with configuration management tools like Ansible.
• Practical knowledge of FinOps practices and cloud cost optimization strategies.
• Official certifications from AWS, Azure, GCP, or CNCF (e.g., CKA, CKAD).

• Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.
• Deploy and operate containerized workloads using managed Kubernetes services (e.g., AKS, EKS, GKE).
• Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.
• Design and implement robust CI/CD pipelines using GitLab CI/CD, incorporating GitOps principles.
• Implement and manage core cloud services, including global content delivery, DNS, and object storage (e.g., CloudFront, Route 53, S3).
• Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using tools such as Grafana and Prometheus.
• Implement and manage Identity & Access Management (IAM) policies, Role-Based Access Control (RBAC), and least-privilege access across cloud environments.
• Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (e.g., Azure Policies, AWS SCPs, tagging strategies).
• Manage hybrid network connectivity and troubleshoot complex networking issues across distributed cloud and on-premises environments.
• Collaborate with Security, SRE, and Platform teams to define and drive cloud best practices for observability, compliance, and operational reliability.
• Support FinOps initiatives to optimize cloud environments for cost efficiency, scalability, and performance.