{"id":3477525,"url":"https://alion.io/job/dedagroup-senior-cloud-platform-engineer","title":"Senior Cloud Platform Engineer","company":{"id":54133,"name":"Dedagroup","domain":"deda.com","url":"https://alion.io/company/deda-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":95,"open_postings":22,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":145,"computed_at":"2026-11-01T06:10:25Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tunis, Tunisia"],"countries":["TN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3508},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Configuration Management","optional":false},{"name":"FinOps","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"Vertex AI","optional":false},{"name":"Amazon S3","optional":true},{"name":"DNS","optional":true},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Loki","optional":true},{"name":"MinIO","optional":true},{"name":"Prometheus","optional":true},{"name":"SLI/SLO/SLA","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-28T09:58:03Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-01T21:52:40Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"We are one of the leading technology groups in Italy, with operations in the United States. We operate as a Business & Technology Accelerator for companies, financial institutions, and public sector organizations, supporting the evolution of their IT and digital strategies. Through an ecosystem of companies that share values, business strategies, and a common vision, we enable our clients to unlock the full potential of technology, amplifying its positive impact on both the economy and society. This role is dedicated to our US market.\nWhat to expect\nAs our Cloud Platform Engineer, you own the environment other engineers build on, and you make a multi-platform estate tidy and well run. Ours is three: Google Cloud, a legacy Oracle Cloud we are retiring, and virtual machines on bare metal in a US data centre, still administered by hand-and we want the third to feel like the first. You design and operate landing zones on GCP, bring the bare-metal VM estate under configuration management and repeatable provisioning, and retire what remains on OCI, expressing the estate in Terraform and Ansible and shipping it through GitHub Actions, where CI runs on two repositories today -so you build that estate rather than inherit one. You run the shared services on top: Kubernetes, PostgreSQL, SQL Server, Keycloak, SeaweedFS, Grafana and Cloudflare. You are also the governance and FinOps function, at the stage where preventing sprawl is cheaper than unpicking it. Our products carry US credit-union member data, so confidentiality, integrity and availability are design constraints in every change. Reliability and toil reduction are in scope, but this is a platform and operations role first, not a pure SRE post. If you get satisfaction from a clean project hierarchy, IAM that reflects who needs what, an Ansible role that retires a runbook, and Terraform state you would hand to a stranger, this is your role. Your ultimate goal is to be the owner of the paved road, not a ticket-taker.\nWhat you will do\nLanding Zones & Estate Design: Design the project and compartment structure, network topology and organizational policy on GCP, and set the naming, tagging and environment standards while they are still cheap to establish-enforceable rather than aspirational.\n\nInfrastructure as Code & Configuration Management: Extend Terraform from partial coverage to everything it reaches- modules, state, drift, imports on a live estate-and bring the VM estate under Ansible, with image builds and provisioning that make a machine rebuildable rather than remembered.\n\nCI/CD on GitHub Actions: Build the pipelines that plan, review and apply infrastructure changes, and the reusable workflows that give product teams secure delivery without reinventing it per repository; two repositories have CI today, and the rest is yours to design.\n\nPlatform Services Operations: Run and evolve Kubernetes, PostgreSQL, SQL Server, Keycloak, SeaweedFS and Cloudflare as managed, documented, upgrade-able services-capacity, backup/restore and lifecycle-with PostgreSQL run through an operator covering replication, failover and tested restores. Prove recovery with disaster-recovery tests run for real, not on paper.\n\nObservability & Incident Response: Build the Grafana dashboards, metrics, logs and alerting that make failures obvious before users report them, on an estate about to carry its first customers, and lead incident response, turning each incident into a guardrail.\n\nIdentity, Access & Security (CIA): Design least-privilege IAM across all three platforms, manage secrets properly, harden network and edge exposure, and keep access review, audit logging and change trails defensible when clients put their SOC 2 and GLBA questions to us.\n\nFinOps & Housekeeping: Make spend attributable from the start-tagging, ownership, showback-so the bill can be explained line by line, and catch orphaned resources, forgotten environments and dormant repositories before they become archaeology.\n\nCross-Functional Enablement: Supply the paved road to a small, mostly junior team shipping AI and data products-Vertex AI, async pipelines, file ingestion-document it, and raise the risk early when a shortcut will cost us later.\n\nWhat we expect from you\nPublic Cloud Depth: Significant hands-on experience operating a major public cloud in production-GCP strongly preferred -across compute, networking, storage and IAM. Prior OCI exposure is an advantage; willingness to operate and retire it is required.\n\nAutomation Below the Managed Line: You have automated machines, not only consumed services-Ansible playbooks, roles and inventories, image builds, and provisioning against bare metal, a hypervisor or a private cloud.\n\nTerraform Mastery: Proven experience writing, structuring and maintaining real-world IaC-modules, state, drift, refactors on a live estate-not just applying someone else’s plans.\n\nKubernetes in Production: Workloads, networking, ingress, RBAC, resource management, upgrades, and debugging clusters when they misbehave. Self-managed control planes, not only managed ones, are an advantage.\n\nCI/CD with GitHub Actions: Practical experience designing pipelines and reusable workflows rather than working inside someone else’s, including secure cloud authentication (OIDC/workload identity).\n\nSecurity Mindset: Genuine command of least-privilege access, secrets management, network segmentation, and the CIA triad as applied to a regulated estate.\n\nScripting & Automation: Fluency in at least one automation language (Python preferred) for the glue work that IaC does not cover.\n\nOwnership & Judgment: Accountable for monitoring, alerting, incident response and the hygiene that prevents incidents- without a platform team behind you-and able to refuse a bad request with an alternative and to document standards others follow without you in the room.\n\nNice to Haves: Cloud governance (organization policies, guardrails, tagging and naming compliance, provisioning approval flows); FinOps (showback and chargeback, commitment and discount management, right-sizing); Regulated environments (SOC 2, ISO 27001, GLBA, HIPAA or GDPR), particularly where a regulation shaped an architecture rather than producing a document; Keycloak (realms, clients, federation, OIDC/SAML) or a comparable identity provider; PostgreSQL operators such as CloudNativePG, PostgreSQL HA, backups and tuning, SQL Server administration, S3-compatible object storage such as SeaweedFS or MinIO, GPU scheduling or pipeline orchestration; Cloudflare (DNS, WAF, tunnels, zero-trust access) or equivalent edge security; Building Grafana stacks (Prometheus, Loki or similar) rather than consuming pre-built dashboards; Prior work at the Cloud or Platform Architect level-designing an estate and its standards, not just operating one; SRE practices (SLOs, error budgets, systematic toil reduction).","description_format":"text","description_chars":6870,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-29T19:17:59Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":145,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/dedagroup-senior-cloud-platform-engineer","json_url":"https://alion.io/job/dedagroup-senior-cloud-platform-engineer.json","meta":{"generated_at":"2026-11-01T23:24:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35634,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":54133},"rest":"https://alion.io/mcp/rest/get_company?id=54133"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdedagroup-senior-cloud-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdedagroup-senior-cloud-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdedagroup-senior-cloud-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dedagroup-senior-cloud-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdedagroup-senior-cloud-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3477525}},{"tool":"search_jobs","arguments":{"company":"deda.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3477525},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}