AWS Platform engineer

Braid is a fintech company building modern banking and payment infrastructure to empower Community banks and Credit Unions to compete and thrive. We are a lean, senior team that values ownership, collaboration, and moving fast without breaking things that moves billions of dollars.

We are hiring a Senior AWS Platform Engineer to take ownership of our AWS environments. You will be the directly responsible individual for how our infrastructure is built, deployed, monitored, and secured. You will work closely with the engineering team and founders. This is a hands‑on individual‑contributor role. You will spend most of your time writing infrastructure as code, improving our deployment workflow, tightening our security posture, and making production boring in the best possible way.

• Own the design, deployment, and ongoing health of our multi‑account AWS environment
• Evolve our account strategy — improve environment isolation, security boundaries, and access patterns across accounts
• Write and maintain infrastructure as code, and continuously improve how changes are reviewed, tested, and rolled out
• Own VPC design, network segmentation, and security group hygiene across the platform
• Operate containerized services and managed databases in production, including backups, upgrades, and capacity planning
• Tighten the platform's security posture — IAM, network boundaries, secrets management, and compliance controls
• Build and maintain monitoring, alerting, and on‑call runbooks so incidents are caught early and resolved quickly
• Own cloud cost visibility — implement tagging, budgets, and reporting so the team understands what we spend and why
• Partner with application engineers to improve developer experience and shorten the path from commit to production
• Contribute to disaster recovery planning, incident response, and post‑incident reviews
• Write clear technical documentation that your teammates and future hires can actually use

• Five or more years building and operating production AWS environments — this is an AWS‑only shop and we need someone who already knows the platform deeply
• Hands‑on experience with AWS infrastructure as code (Cloud Formation, CDK, or Terraform with the AWS provider)
• Strong networking fundamentals in AWS — VPC design, subnets, security groups, NACLs, Route 53, and routing
• Production experience running containerized workloads on ECS or EKS
• Solid operational experience with Amazon RDS, including backups, upgrades, parameter groups, and performance tuning
• Strong working knowledge of AWS IAM and the ability to reason about least‑privilege access, SCPs, and permission boundaries
• Experience owning the full incident lifecycle: detection, triage, mitigation, and blameless post‑mortems
• Comfortable writing Python, Go, Type Script, or Bash well enough to build and debug glue code and automation
• Proficiency with AI‑assisted development tools — you use LLMs and coding assistants to move faster and expect to keep up as the tooling evolves
• Excellent written communication; you write runbooks and design docs without being asked

• Prior experience in fintech, banking, payments, or another regulated industry
• Familiarity with SOC 2, PCI‑DSS, or similar compliance frameworks
• Experience with AWS Organizations, SCPs, or multi‑account governance patterns
• Experience leading an infrastructure modernization or migration without a big‑bang rewrite
• Working knowledge of AWS security services and logging / audit tooling
• Experience with AWS cost management, tagging strategies, or Fin Ops practices
• AWS certifications (Solutions Architect Professional, Dev Ops Engineer Professional, or Security Specialty)

• You're biased toward making production safer, not toward chasing novelty
• You write things down and treat documentation as part of the deliverable
• You push back constructively when a request would take the platform in a worse direction
• You are comfortable holding context for a complex system and moving it forward a step at a time