Senior Cloud Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest Fin Tech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs.

If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

About the role

We are looking for a Senior Cloud Engineer to design, build, and scale XTB’s hybrid and multi-cloud infrastructure, supporting systems for millions of clients worldwide. In this role, you will drive infrastructure automation and cloud engineering best practices, ensure platform resilience, and shape our highly available environments across multiple cloud providers, ensuring our systems remain robust, secure, and scalable.

• - Design, implement, and maintain large-scale, highly available multi-cloud and hybrid infrastructure.
• - Deploy and operate containerized workloads using managed Kubernetes services (e.g., AKS, EKS, GKE).
• - Build, maintain, and improve Infrastructure as Code (IaC) using Terraform.
• - Design and implement robust CI/CD pipelines using Git Lab CI/CD, incorporating Git Ops principles.
• - Implement and manage core cloud services, including global content delivery, DNS, and object storage (e.g., Cloud Front, Route 53, S3).
• - Ensure full operational visibility across cloud infrastructure by setting up metrics, dashboards, and alerts using tools such as Grafana and Prometheus.
• - Implement and manage Identity & Access Management (IAM) policies, Role-Based Access Control (RBAC), and least-privilege access across cloud environments.
• - Define and enforce Cloud Governance, Landing Zone structures, and Policy-as-Code standards (e.g., Azure Policies, AWS SCPs, tagging strategies).
• - Manage hybrid network connectivity and troubleshoot complex networking issues across distributed cloud and on-premises environments.
• - Collaborate with Security, SRE, and Platform teams to define and drive cloud best practices for observability, compliance, and operational reliability.
• - Support Fin Ops initiatives to optimize cloud environments for cost efficiency, scalability, and performance.

• - 5+ years of hands-on experience in cloud engineering, Dev Ops, or infrastructure with large-scale environments.
• - Proven practical experience with highly available cloud environments in a multi-cloud setup (strong hands-on knowledge of at least two providers: AWS, Azure, GCP).
• - Strong understanding of Dev Ops, Platform Engineering, and Git Ops principles.
• - Solid hands-on experience with managed Kubernetes orchestration (e.g., AKS, EKS, GKE).
• - Experience working in regulated industries (e.g., Fin Tech, banking) with strong compliance, security, auditability, and governance requirements.
• - Strong scripting or programming skills in Python, Bash, or similar languages.
• - Proficiency in creating and maintaining infrastructure using Terraform.
• - Strong experience designing and implementing CI/CD pipelines, preferably using Git Lab CI/CD.
• - Practical experience configuring metrics, dashboards, and alerts using tools like Grafana and Prometheus.
• - Hands-on experience with Identity & Access Management (IAM), RBAC models, and implementing least-privilege security.
• - Solid understanding of hybrid networking concepts (e.g., BGP, VPN, Direct Connect / Express Route, hybrid DNS resolution) and network troubleshooting.
• - Ability to work independently, take ownership of technical delivery, and support production-grade environments.

• - Experience with IaC PR-workflow automation and orchestration tools (e.g., Atlantis, Terragrunt).
• - Experience with Git Ops delivery tools (e.g., Argo CD, Flux).
• - Experience with the Wiz security platform or similar cloud security posture management (CSPM) tools.
• - Experience with configuration management tools like Ansible.
• - Practical knowledge of Fin Ops practices and cloud cost optimization strategies.
• - Official certifications from AWS, Azure, GCP, or CNCF (e.g., CKA, CKAD).

• - Real influence on the development of the company and the product.
• - Work in an experienced team that is happy to share its knowledge.
• - A clear vision of…