{"id":2299423,"url":"https://alion.io/job/cloud-protection-senior-cloud-platform-engineer","title":"Senior Cloud Platform Engineer","company":{"id":2236270,"name":"Cloud Protection","domain":"cloudprotection.com","url":"https://alion.io/company/cloudprotection","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jobylon","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Helsinki, Finland"],"countries":["FI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":126000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2792},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentforce","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"CloudFormation","optional":true}],"status":"live","first_seen_at":"2026-09-02T12:14:10Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-10-12T09:50:12Z","board_verified":true,"closed_at":null,"days_open":40,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":40},"description":"Cloud Protection protects Fortune 500 enterprises and government organizations worldwide from malware, phishing, and identity-based attacks in Salesforce. Our work builds on more than 30 years of experience in analyzing malware and defending against advanced threats - expertise few security companies can match.\nIt's our people who make that possible. Newly independent after years as WithSecure's most autonomous business unit, we combine the focus and speed of a startup with decades of cybersecurity depth. We're a diverse team that values passion, purpose, and genuine wellbeing at work, and we're looking for people who want to set the standard for Salesforce security with us. If that sounds like you, we'd love to hear from you.\nWe're looking for a\nSenior Cloud Platform Engineer\nto help build and own the AWS foundation for Cloud Protection for Salesforce (CPSF) - a fast-growing cybersecurity SaaS product by WithSecure™.\nCPSF is a real-time threat protection solution that scans files, URLs, and QR codes across Salesforce workflows - including Sales Cloud, Service Cloud, Experience Cloud, and Agentforce. It's already trusted by Fortune 500 companies globally, and we're scaling fast. We're building a new, independent AWS environment from the ground up, and you'll own entire layers of that foundation end to end - designing it, building it in Terraform, proving it works, and standing behind it in production.\nThis is a small, hands-on team, so the scope is broad: the judgment you bring to decisions that can't be undone later matters as much as the code you write.\nKey Responsibilities\nDesign, build, and operate our AWS landing zone - multi-account organization, guardrails, and account vending - so every new account is governed from the moment it exists.\nOwn our infrastructure-as-code estate in Terraform, including the module library, layered environments, and the review gates on the changes that carry real risk.\nBuild and own the network: multi-region VPCs, centralized egress, DNS, and private connectivity to external services.\nOwn data protection and identity: encryption and key management, SSO federation, least-privilege access, and break-glass paths that are actually rehearsed.\nOwn the evidence and observability plane: audit logging, configuration recording, security findings, dashboards, and alerting from the first day of every account's life.\nOwn delivery: OIDC-based deployment from CI, artifact and container registries, and policy and security checks that run on every change.\nPlan and execute the migration of live production workloads into the new environment - staged rehearsals, cutover, soak period, and decommissioning what's left behind.\nBuild and maintain a controls baseline as code mapped to the frameworks we report against (SOC 2, ISO 27001), and keep the environment answerable by query rather than screenshots.\nSpot the decisions that can't be undone later, flag them early, and take end-to-end ownership of the ones that affect the whole organization.\nWhat are we looking for?\nSubstantial hands-on experience building and running production AWS at multi-account, multi-region scale - not just consuming it.\nDeep Terraform experience, including the unglamorous parts: state, imports, adopting resources you didn't create, module design, and the review workflow around them.\nReal breadth across networking, IAM, encryption and key management, logging and audit, backup and recovery, CI/CD, and cost.\nExperience with at least one migration, re-platforming, or carve-out that touched live production - including the parts that went wrong.\nA track record of owning an irreversible infrastructure decision, and being able to talk through how you approached it.\nComfortable working where the documentation is imperfect and the right answer has to be established, not just looked up.\nBased in Finland (Uusimaa area) - this is a hybrid role with regular time in our Helsinki office.\nFluent English - written and verbal.\nNice to have: compliance-driven infrastructure work (SOC 2, ISO 27001, or similar), AWS Control Tower and account-vending automation, and CloudFormation experience.\nIf you don’t tick every box above, don’t worry - we’re more interested in your potential and willingness to learn.\nThe salary displayed on this page represents a starting point for the role. Final compensation is discussed individually and depends on experience, skills, and the local market.\nWhat will you get from us\nMeaningful work with real-world impact - your work helps protect businesses and critical infrastructure from modern cyber threats.\nFlexible ways of working, including up to 30 days per year working abroad and paid sick leave from day one.\nA strong focus on well-being, with mental health support and comprehensive benefits.\nContinuous learning, modern tools, and a people-first culture that values trust and collaboration.","description_format":"text","description_chars":4873,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Finland","iso":"FI","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Cloud Security","Threat Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-11T21:02:11Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.577,"p_room":0.45,"age_days":39,"expected_fill_days":22,"reasons":["conf:3","win:tail"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/cloud-protection-senior-cloud-platform-engineer","json_url":"https://alion.io/job/cloud-protection-senior-cloud-platform-engineer.json","meta":{"generated_at":"2026-10-12T16:02:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25479,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2236270},"rest":"https://alion.io/mcp/rest/get_company?id=2236270"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloud-protection-senior-cloud-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloud-protection-senior-cloud-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloud-protection-senior-cloud-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloud-protection-senior-cloud-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloud-protection-senior-cloud-platform-engineer"}]}