Cloud Platform & Infrastructure Engineer

About the role

Aisle, a small, talent-dense team spread across Europe, the US and Canada, builds AI that finds, fixes and verifies software vulnerabilities autonomously, running entirely inside customers' perimeters (cloud, on-prem or air-gapped). It is looking for a Cloud Platform & Infrastructure Engineer in Prague with 5+ years of experience as a high-impact individual contributor in cloud infrastructure, platform engineering or SRE.

Key responsibilities

• Engineer and scale the cloud infrastructure to support a hybrid/BYOC delivery model across AWS, GCP and Azure without adding friction for developers.
• Act as a core technical driver for compliance certifications such as FedRAMP, SOC2 or ISO27001, ensuring infrastructure, networking, logging and access controls meet federal and commercial security standards.
• Design, implement and maintain complex network architectures that connect the company's systems to customers' private clouds.
• Apply FinOps practices to optimise cloud spend and resource utilisation.
• Establish reliability through SLAs, SLOs and error budgets, drive blameless post-mortems and continuous improvement.
• Partner with Security to embed security into CI/CD pipelines, Terraform modules and platform defaults.

Required profile

• 5+ years of experience in cloud infrastructure, platform engineering or SRE.
• Expert-level, hands-on knowledge of multiple cloud providers, with AWS as the primary focus; GCP or Azure familiarity is a plus.
• Strong experience in highly regulated environments, including controls for FedRAMP, SOC2 and ISO27001.
• Experience deploying software into restricted, customer-managed environments such as BYOC, on-premise, air-gapped and GovCloud setups.

Required skills

• Infrastructure as Code with Terraform or OpenTofu.
• Enterprise identity integration (SSO, SAML, OIDC, SCIM).
• Kubernetes, including EKS, Helm, RBAC and multi-cluster environments.
• OpenTelemetry observability stack.
• Advanced cloud networking (VPCs, transit gateways, peering, DNS, ingress/egress, VPNs).