Lead Platform Engineer (AWS)

Wyden is the leading provider of institutional digital asset trading technology to financial institutions. We are a collaborative and laser-focused team of leaders and engineers committed to building advanced, scalable and modular trading infrastructure that underpins our clients' digital asset product offerings and operations.Today, dozens of banks, brokers, and financial service institutions rely on Wyden's products. Digital assets are now a mainstream asset class, and financial institutions are fast adopting digital assets in response to digital asset regulations around the globe.If you are passionate about the institutional digital asset ecosystem, thrive on solving complex infrastructure challenges at scale, and want to be the technical authority who keeps mission-critical production environments running reliably across a growing roster of global financial institutions, Wyden is the home for you.

Established in Zurich, Switzerland, Wyden also has a development hub in Poland.

About the role

The Senior Cloud Platform Engineer is the AWS architecture authority for Wyden's Run function — the most senior technical individual contributor in production operations. This role sits within Customer Success & Operations, reporting directly to the Head of Run, and is the engineering backbone on which every customer environment, deployment, and operational system depends.

This is not a pure operational support role and it is not a management role. It is a senior technical leadership position: you own the infrastructure architecture, you set the DevOps standards, and you build the systems that allow the broader Run team to operate with confidence. You will also recruit, onboard, and technically lead a junior SRE — defining what good looks like and building toward genuine team capability.

The Senior Cloud Platform Engineer will work in close daily proximity to the CTO and Head of Customer Success — involved in architectural reviews, compliance discussions, and operational governance decisions at a level that benefits significantly from being in the room.

The deep AWS and DevOps execution that was previously concentrated in a single interim contractor is now formally owned by this role. Wyden's customer base is growing toward 20+ live environments. The infrastructure must scale with it — reliably, automatically.

We will only consider candidates based in the Lisbon region.

Your responsibilities will include:

1. AWS architecture & cloud infrastructure design

• Own the AWS architecture for all Wyden customer environments — multi-tenant and single-tenant — ensuring designs are scalable, secure, cost-efficient, and operationally maintainable

• Design and govern the infrastructure patterns that the Run team and junior SRE operate within: VPC design, EKS cluster architecture, Aurora/RDS configurations, IAM policies, networking (VPN, PrivateLink, Transit Gateway, Direct Connect)

• Lead infrastructure architectural reviews with the CTO, ensuring production decisions are technically sound and aligned with the platform roadmap

• Identify and address infrastructure risk proactively — before incidents occur, not in response to them

• Own AWS cost management: rightsizing, reserved instance strategy, architecture optimisations that reduce spend as the environment footprint grows

2. Infrastructure as Code & DevOps automation

• Own all IaC for customer AWS deployments: design, write, test, and maintain Terraform and Terragrunt modules that are reusable, version-controlled, and reproducible across all environments

• Design, build, and own Wyden's CI/CD pipelines for infrastructure and application deployment: GitLab CI, GitHub Actions, and AWS CodePipeline — not just using pipelines but architecting them from the ground up

• Automate deployment, validation, and rollback processes to the point where routine deployments require minimal human intervention and carry low operational risk

• Define and enforce DevOps standards across the Run team: branching strategy, pipeline structure, deployment gates, environment promotion criteria, and release hygiene

• Identify and eliminate manual operational steps through scripting and automation — Python, Bash, or equivalent — building a team that is systematically less dependent on individual knowledge

• Continuously improve IaC coverage to eliminate configuration drift and manual provisioning across all customer environments

3. Monitoring, observability & alerting automation

• Design and own Wyden's full observability stack: AWS CloudWatch, Prometheus, Grafana, Sign4l, OpenSearch — ensuring complete visibility into every customer environment before customers report issues

• Build monitoring templates that are reusable across environments, reducing the cost of onboarding new customers to production

• Define SLOs and SLAs with the Head of Run; build the alerting infrastructure that makes breaches visible and actionable in real time

• Tune alerting continuously to reduce noise and surface only actionable signals — a noisy alert system is an ignored alert system

• Build and own automated reporting infrastructure: environment health dashboards, SLA metrics, incident summaries, and capacity trend data for both internal and customer-facing use

4. Application deployments & release engineering

• Own deployment execution for application releases, infrastructure upgrades, and configuration changes across all customer environments

• Build and maintain deployment runbooks that are standardised, low-risk, reversible, and executable by other team members — not just by the Senior SRE

• Define pre-deployment validation checklists and automated gates that reduce last-minute surprises and deployment failures

• Coordinate with Engineering and the Head of Run on release handovers: ensuring production environments are validated and ready before go-live decisions are made…

Source: Landing.jobs (https://landing.jobs/at/wyden/lead-platform-engineer-aws)