Senior Cloud Engineer I

About the role

Checkout.com is looking for a senior cloud engineer who can hit the ground running on a large, regulated, multi‑cloud estate. You will treat infrastructure as software, write reusable Terraform modules, and help shape the platform that powers billions of transactions.

Key responsibilities

• Lead Design & Delivery: Own large‑scale platform projects from architecture through Terraform to production, ensuring scalability, security and cost‑optimisation.
• Build the paved road: Design platform primitives that product teams use, making the secure path also the easy path.
• Architectural Influence: Work with engineering managers and architects to refine requirements, shape technical direction and document decisions as ADRs.
• Operational SME: Provide advanced support for team‑owned services, guaranteeing high availability for global payment systems.
• Evangelise Best Practices: Produce exemplary code and documentation that inspire others and spread standards across the group.
• Manage Dependencies: Navigate technical dependencies across pillars to optimise delivery speed and business outcomes.
• Foster Culture: Embody Checkout Operating Principles, model professional excellence and mentor peers.
• AI Integration: Explore and implement AI‑driven automation to improve infrastructure efficiency and team productivity.

Required profile

• Deep AWS expertise with multi‑account, IAM, KMS and core compute/storage/security services.
• Production‑grade Azure experience, including landing zones, VNet architecture and Entra ID.
• Software‑engineering mindset: expert‑level Terraform, Git‑based CI/CD (Spacelift) and automation with Python.
• Strong cloud networking skills: VPC/VNet design, hub‑and‑spoke, Transit Gateway/Cloud WAN, PrivateLink and DNS.
• Kubernetes experience on EKS/AKS, covering cluster lifecycle, workload deployment and operational health at scale.
• Security and compliance awareness, preferably with PCI DSS in a regulated payments environment.
• 5+ years of cloud engineering experience and a track record of delivering resilient, multi‑region architectures.

Required skills

• AWS
• Azure
• Terraform
• Python
• Git
• CI/CD (Spacelift)
• Kubernetes (EKS/AKS)
• VPC/VNet design
• PrivateLink
• PCI DSS awareness