Senior Cloud Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

About the role

We are looking for a Senior Cloud Engineer to design, build, and scale XTB’s hybrid and multi-cloud infrastructure, supporting systems for millions of clients worldwide. In this role, you will drive infrastructure automation and cloud engineering best practices, ensure platform resilience, and shape our highly available environments across multiple cloud providers, ensuring our systems remain robust, secure, and scalable.

Responsibilities

• Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.

• Deploy and operate containerized workloads using managed Kubernetes services (e.g., AKS, EKS, GKE).

• Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.

• Design and implement robust CI/CD pipelines using GitLab CI/CD, incorporating GitOps principles.

• Implement and manage core cloud services, including global content delivery, DNS, and object storage (e.g., CloudFront, Route 53, S3).

• Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using tools such as Grafana and Prometheus.

• Implement and manage Identity & Access Management (IAM) policies, Role-Based Access Control (RBAC), and least-privilege access across cloud environments.

• Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (e.g., Azure Policies, AWS SCPs, tagging strategies).

• Manage hybrid network connectivity and troubleshoot complex networking issues across distributed cloud and on-premises environments.

• Collaborate with Security, SRE, and Platform teams to define and drive cloud best practices for observability, compliance, and operational reliability.

• Support FinOps initiatives to optimize cloud environments for cost efficiency, scalability, and performance.

Requirements

• 5+ years of hands-on experience in cloud engineering, DevOps, or infrastructure with large-scale environments.

• Proven practical experience with highly available cloud environments in a multi-cloud setup (strong hands-on knowledge of at least two providers: AWS, Azure, GCP).

• Strong understanding of DevOps, Platform Engineering, and GitOps principles.

• Solid hands-on experience with managed Kubernetes orchestration (e.g., AKS, EKS, GKE).

• Experience working in regulated industries (e.g., FinTech, banking) with strong compliance, security, auditability, and governance requirements.

• Strong scripting or programming skills in Python, Bash, or similar languages.

• Proficiency in creating and maintaining infrastructure using Terraform.

• Strong experience designing and implementing CI/CD pipelines, preferably using GitLab CI/CD.

• Practical experience configuring metrics, dashboards, and alerts using tools like Grafana and Prometheus.

• Hands-on experience with Identity & Access Management (IAM), RBAC models, and implementing least-privilege security.

• Solid understanding of hybrid networking concepts (e.g., BGP, VPN, Direct Connect / ExpressRoute, hybrid DNS resolution) and network troubleshooting.

• Ability to work independently, take ownership of technical delivery, and support production-grade environments.

Nice to have

• Experience with IaC PR-workflow automation and orchestration tools (e.g., Atlantis, Terragrunt).

• Experience with GitOps delivery tools (e.g., Argo CD, Flux).

• Experience with the Wiz security platform or similar cloud security posture management (CSPM) tools.

• Experience with configuration management tools like Ansible.

• Practical knowledge of FinOps practices and cloud cost optimization strategies.

• Official certifications from AWS, Azure, GCP, or CNCF (e.g., CKA, CKAD).

What we offer

• Real influence on the development of the company and the product.

• Work in an experienced team that is happy to share its knowledge.

• A clear vision of development thanks to regular feedback and clear career paths.

• Regular team-building meetings.

Benefits

• A training budget for courses and conferences that interest you.

• An extra day off on your birthday.

• An extra day off for parents.

• Equipment tailored to your needs.

• Private medical care and group insurance.

• Access to an e-learning platform for learning English and a benefits platform.

• Access to a wellbeing platform and the opportunity to take advantage of workshops and private therapy sessions.

• Remote work, from the office in Warsaw or from a coworking space in your city.