{"id":2253706,"url":"https://alion.io/job/holcim-platform-engineer","title":"Platform Engineer","company":{"id":448278,"name":"Holcim","domain":"holcim.com","url":"https://alion.io/company/holcim-5","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":91000,"period":"year","method":"role_country_seniority_unknown","sample_n":36},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"VPN","optional":false},{"name":"Ansible","optional":true},{"name":"Linux","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-03T02:00:00Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-13T06:29:44Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Platform Engineer\nJob Description\n1. Objective\nDeliver a multi-cloud and edge platform on which Holcim's business products are developed and run, at enterprise quality and startup efficiency.\nThe measurable outcome is product teams building, deploying and operating independently, on infrastructure that is secure, reliable, compliant and cost-effective.\nThe role sits within Group IT and delivers through the organisation, not around it: in close collaboration with product teams, corporate security, legal and data privacy, finance, and regional and global IT, and aligned with Holcim policies, standards and legal framework.\n2. Scope\n\nCloud\n\nGCP (primary), AWS\n\nEdge\n\nIndustrial plant sites worldwide\n\nPlatform estate\n\n~100 platform services across 10 technical domains, ~30 environments\n\nConsumers\n\n~55 business products, 30+ product teams operating in self-service\n\nPlatform framework\n\nIn-house engineering platform: policy-as-code provisioning across all managed services, self-service interfaces for product teams, safety gates, state verification and immutable audit evidence\n\nOperating model\n\nArchitecture principles and reference designs, engineering standards and naming policy, specification and peer-review process, verification and validation records, document taxonomy, master data registries, multi-jurisdiction legal and compliance framework\n\nTeam\n\n6 engineers\n\nTechnical domains: compute, networking, data storage, data pipelines, edge infrastructure, identity and access, security, secrets management, CI/CD, developer tooling, observability, cost engineering, platform framework.\n3. Professional Standard\nThe role is defined for experienced engineers who work to a professional standard focused on results not tasks. These expectations apply at both levels and are assessed during selection and in the annual review.\nResults\nDelivers a predictable volume of work across the year, and holds it under pressure.\n\nMeasured by outcomes delivered, not activity performed.\n\nReduces the team's total workload through simplification and automation.\n\nUnblocks colleagues rather than becoming a dependency.\n\nQuality\nWork is correct, verifiable and maintainable. Rework is the exception.\n\nNon-trivial work is specified in writing and peer-reviewed before implementation.\n\nDocumented to the standard another engineer needs to operate and extend it.\n\nRoot causes are fixed in code and configuration. Alerts, workarounds and manual procedures are not permanent solutions.\n\nCustomer orientation\nProduct teams are the customer. Their ability to work independently is the measure of whether a service is finished.\n\nUnderstands the business purpose of the work and challenges requests that would not achieve it.\n\nRecurring support demand is a design defect to remove, not a workload to absorb.\n\nCommits to timeframes and flags slippage before the deadline, not after.\n\nEngineering practice\nApplies established practice by default: infrastructure as code, policy as code, version control, testing, peer review, least privilege, defence in depth, documented decisions.\n\nKeeps current with cloud platform and tooling evolution and brings improvements into the team.\n\nWorks within the standards framework and improves it. Working around it is not an alternative.\n\nOriginal thinking\nProposes new approaches where existing ones are inadequate, and challenges solutions that no longer fit.\n\nIdeas are anchored in the expected result, the real constraints and established practice - not novelty for its own sake.\n\nSimplification counts. Removing a system, a step or a dependency is worth as much as adding a capability.\n\nInnovation is delivered inside Holcim's standards and policy framework.\n\nProactive planning\nScopes ambiguous requirements, sequences the work, identifies dependencies and risks, and commits to deliverables and dates before starting.\n\nEstimates against real available capacity, not optimistic capacity.\n\nRaises capacity limits, expiring dependencies, security exposure and architectural risk before they become incidents.\n\nIdentifies what needs improving and drives it, rather than waiting to be assigned.\n\nProfessional maturity\nOwns outcomes, not tasks. Where resolution depends on another team, drives it to closure there.\n\nCommunicates facts early and accurately, including when the news is bad.\n\nDisagrees with reasoning, then commits to the decision taken.\n\nRemains composed and methodical during incidents.\n\nNone of this is unusual at senior level. It is stated explicitly because the team is small, flat, and has no supervisory layer to compensate when any of it is missing.\n4. Key Responsibilities\nPlatform Framework and Automation\nProvision and manage cloud and edge infrastructure end to end as code - networking, compute, storage, databases, identity, secrets.\n\nDevelop and extend the in-house platform framework that provisions, configures and governs every platform service: policy enforcement at authoring time, safety gates and dry-run control ahead of destructive operations, verification of intended against actual state, and immutable audit evidence.\n\nEncode standards and procedures as executable controls, so non-compliant configurations cannot be created rather than being detected afterwards.\n\nBuild and maintain the self-service interfaces through which product teams provision and configure their own resources, without a ticket and without platform-team involvement.\n\nContribute reusable tooling, templates and shared components that other engineers and product teams adopt.\n\nPeer-review other engineers' specifications and code.\n\nArchitecture\nDesign platform architecture and capacity across cloud and edge.\n\nDesign network architecture: VPC, DNS, load balancing, NAT, VPN, interconnect, private connectivity, firewall rules.\n\nDesign identity and access architecture: IAM model, service account governance, access enforcement.\n\nDesign security architecture: WAF, key management, secrets, endpoint protection, vulnerability management.\n\nEvaluate and select cloud services and technologies; maintain the platform technology stack.\n\nProduce and maintain architecture documentation and decision records.\n\nOperations\nOperate the services you design and build, across their full lifecycle.\n\nLead infrastructure incident response: diagnosis, root cause analysis, resolution, post-incident review.\n\nDesign and maintain monitoring, logging, tracing and alerting across all environments.\n\nPlan and execute preventive maintenance, patching, upgrades and security remediation.\n\nManage platform cost: sizing, optimisation, cost reporting per product.\n\nProduct Team Enablement\nAct as technical contact for assigned product teams.\n\nOnboard product teams onto platform services and self-service capabilities.\n\nDiagnose and resolve platform-side integration issues.\n\nStandards, Governance and Compliance\nApply and maintain the engineering standards, procedures and templates that govern all platform work.\n\nProduce and maintain architecture documentation, runbooks, playbooks and service documentation.\n\nMaintain traceability from ticket to implementation to audit record.\n\nSupport audit and compliance evidence across GDPR, NIS2, ISO 27001 and local regulatory requirements.\n\nWork with corporate security, legal, data privacy and global IT on controls that span organisational boundaries.\n\n5. Additional Responsibilities - Lead Platform Engineer\nThe Lead level additionally carries the product-facing engineering scope.\nProduct Architecture and Standards\nDefine product architecture standards, patterns and reference implementations.\n\nReview and approve product architecture at the architecture review gate, before development starts.\n\nOwn the approved technology catalogue for product teams: technologies, versions and configurations supported.\n\nDefine coding standards, design patterns and CI/CD pipeline patterns used by product teams.\n\nDefine and validate the resource and access model for each product workload.\n\nTechnical Leadership\nAct as primary technical reference for platform architecture decisions.\n\nSet direction for platform operations, performance, security posture and cost.\n\nCoach product teams on engineering quality and secure development practice.\n\nMentor engineers through architecture, worked example and peer review.\n\n6. Required Qualifications\nPlanning and foresight. Takes an ambiguous requirement, determines what it actually requires, sequences the work, identifies dependencies and risks, and commits to deliverables and dates before starting. Assessed explicitly during selection.\n\nProduction software development in Python. Maintained, peer-reviewed modules that other engineers depend on.\n\nProduction ownership of cloud infrastructure, including accountability for incident response and root cause resolution.\n\nInfrastructure and policy as code across the full delivery path - provisioning, configuration, deployment, verification, evidence.\n\nBreadth across technical domains. No single-domain specialisation, and no second-line team to escalate to.\n\nWritten technical communication that product owners, security architects and peer reviewers can act on without rework.\n\n7. Preferred Qualifications\nGCP at design depth: IAM, networking, data services, security and cost modelling.\n\nNetwork architecture: VPC design, DNS, load balancing, private connectivity, firewalling.\n\nLinux and container operations at diagnostic level.\n\nCI/CD pipeline design and implementation.\n\nAWS, edge computing, or industrial/OT environments.\n\nManufacturing, plant or industrial context.\n\nRegulated or multi-jurisdiction environments (GDPR, NIS2, ISO 27001).\n\nTerraform, Ansible or equivalent infrastructure-as-code tooling.","description_format":"text","description_chars":9656,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Chemical Manufacturing","Kitchens, Bathrooms & Home Improvement"],"lifecycle":[{"event":"open","at":"2026-10-11T03:21:55Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.716,"p_room":0.75,"age_days":10,"expected_fill_days":14,"reasons":["conf:3","win:late","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/holcim-platform-engineer","json_url":"https://alion.io/job/holcim-platform-engineer.json","meta":{"generated_at":"2026-10-13T06:53:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10196,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":448278},"rest":"https://alion.io/mcp/rest/get_company?id=448278"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fholcim-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fholcim-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fholcim-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/holcim-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fholcim-platform-engineer"}]}