Principal Cloud Engineer

Moniepoint

Who we are Moniepoint Inc. is Africa’s all-in-one financial platform, helping 20 million businesses and individuals access seamless payments, banking, credit, cross-border, and business management tools each month.  As Nigeria’s largest merchant acquirer, we power most of the country’s point-of-sale (POS) transactions. Through our subsidiaries, Moniepoint Inc. processes over $250 billion in digital payment transaction value annually. About the role Engineering at Moniepoint is an inspired, customer-focused community dedicated to crafting solutions that redefine our industry. Our infrastructure runs on some of the cool tools that excite infrastructure engineers - kubernetes, docker etc. We also make business decisions based on the large stream of data we receive daily, so we work daily with big data, perform data analytics and build models to make sense of the noise and give our customers the best experience. Curious about what makes Moniepoint an incredible place to work? Check out posts on how we cultivate a culture of innovation, teamwork, and growth. Position Overview We are seeking an experienced Cloud Engineer to design, implement, and manage our multi-cloud infrastructure. The ideal candidate will have deep expertise in cloud platforms, container orchestration, infrastructure automation, CI/CD pipelines, and observability solutions, ensuring scalable, reliable, and cost-effective cloud operations across multiple cloud providers. Principal Duties and Responsibilities Cloud Infrastructure Management * Design, deploy, and manage multi-cloud infrastructure across Google Cloud Platform (GCP), Amazon Web Services (AWS), Azure, and Oracle Cloud Infrastructure (OCI) * Architect and implement highly available, fault-tolerant, and scalable cloud solutions * Manage cloud resources including compute instances and networking components * Design and implement disaster recovery and business continuity plans for cloud workloads * Migrate on-premises applications and services to cloud environments with minimal disruption * Optimize cloud resource utilization and implement auto-scaling policies * Maintain comprehensive documentation of cloud architectures, configurations, and runbooks Kubernetes & Container Orchestration * Design, deploy, and manage production-grade Kubernetes clusters across multiple cloud providers * Implement and maintain container orchestration strategies for microservices architectures * Configure and manage Kubernetes resource objects * Manage Kubernetes cluster upgrades, scaling, and performance optimization * Troubleshoot complex container and orchestration issues in production environments * Implement multi-cluster and multi-region Kubernetes deployments for high availability Service Mesh & Advanced Networking * Design, deploy, and manage Istio service mesh for microservices communication and observability * Configure Istio traffic management, including virtual services, destination rules, and gateways * Implement advanced traffic routing (canary deployments, A/B testing, traffic splitting) using Istio * Deploy and manage Istio observability components (telemetry, distributed tracing, service graphs) * Implement circuit breaking, retries, timeouts, and fault injection for resilience testing * Configure Istio ingress and egress gateways for external traffic management * Monitor and optimize service mesh performance and resource utilization * Implement multi-cluster service mesh architectures across different cloud providers Reverse Proxy & Load Balancing * Deploy, configure, and manage HAProxy for high-performance load balancing and reverse proxy * Implement HAProxy ACLs, backend routing, health checks, and session persistence * Design and implement Nginx as reverse proxy for web applications and API gateways * Configure Nginx for rate limiting and request filtering * Implement Nginx load balancing algorithms and upstream health monitoring * Manage Nginx Plus features for advanced traffic management and monitoring * Optimize HAProxy and Nginx performance for high-throughput environments Infrastructure as Code & Configuration Management * Develop and maintain infrastructure as code using Terraform * Create reusable, modular Terraform configurations for various cloud resources and Implement Terraform state management and remote backends * Design and implement configuration management solutions using Ansible * Develop Ansible playbooks and roles for automated server provisioning and configuration * Integrate Terraform and Ansible workflows for end-to-end infrastructure automation * Implement infrastructure version control, code review processes, and GitOps practices * Manage infrastructure drift detection and remediation * Create and maintain infrastructure documentation and architecture diagrams * Implement policy-as-code using tools like OPA (Open Policy Agent) or Sentinel CI/CD Pipeline Management * Design, implement, and maintain continuous integration pipelines using Jenkins and Harness * Optimize build times and pipeline efficiency * Integrate security scanning (SAST, DAST, container scanning) into CI/CD pipelines * Configure Jenkins jobs, pipelines, and shared libraries for automated build, configure build agents, runners, and execution environments * Implement Harness deployment pipelines for cloud-native applications * Integrate CI/CD pipelines with version control systems (Git, GitHub, GitLab) * Implement continuous deployment workflows using ArgoCD for Kubernetes-based applications * Design and implement GitOps workflows with ArgoCD for declarative application delivery * Manage ArgoCD application definitions, sync policies and multi-cluster deployments * Implement progressive delivery strategies (blue-green deployments, canary releases) using ArgoCD Message Streaming & Event-Driven Architecture * Deploy and manage Apache Kafka clusters for real-time data streaming and event-driven architectures * Configure Kafka topics, partitions, replication factors, and retention policies * Implement Kafka Connect for data integration with various sources and sinks * Monitor Kafka cluster health, performance metrics, and consumer lag * Optimize Kafka performance for high-throughput and low-latency use cases * Troubleshoot Kafka producer and consumer issues Database & Proxy Management * Deploy, configure, and manage ProxySQL for MySQL load balancing and high availability * Implement query routing, caching, and connection pooling strategies using ProxySQL * Optimize database performance through ProxySQL query analysis and optimization * Implement database failover and disaster recovery using ProxySQL * Monitor ProxySQL metrics and troubleshoot connection and performance issues * Integrate ProxySQL with database clusters and replication topologies * Implement database access security and audit logging through ProxySQL Cloud Networking * Design and implement cloud networking architectures, including VPCs, subnets, and network segmentation * Configure and manage cloud load balancers (Application Load Balancers, Network Load Balancers, Cloud Load Balancing) * Implement VPN connections, Direct Connect/Interconnect, and hybrid cloud networking solutions * Implement network security controls, including security groups, network ACLs, and firewall rules * Implement network monitoring and traffic analysis * Troubleshoot complex networking issues across multi-cloud environments * Design and implement private connectivity between cloud providers Secrets Management & Security * Configure and manage HashiCorp Vault for centralized secrets management across multi-cloud environments * Configure Vault secret engines (KV, database, PKI, AWS, GCP, Azure dynamic secrets) * Manage Vault high availability clusters and disaster recovery procedures * Implement dynamic database credentials and secret rotation strategies * Manage Vault encryption as a service for application-level encryption * Implement Vault agent and sidecar injectors for Kubernetes workloads * Migrate secrets from legacy systems to Vault   Qualifications, Competency & Skills Required Education & Experience * Bachelor's degree or diploma in Computer Science, Information Technology, Engineering, or related field * Minimum of 5 years of proven experience in cloud engineering, DevOps, or platform engineering roles * Hands-on experience managing production workloads across multiple cloud platforms * Relevant cloud and technology certifications are highly desirable  Technical Skills Cloud Platforms (Required) * Google Cloud Platform (GCP): Deep expertise in Compute Engine, GKE, Cloud Storage, Cloud SQL, VPC, Cloud Functions, Cloud Run, IAM * Amazon Web Services (AWS): Proficiency in EC2, EKS, S3, RDS, VPC, Lambda, ECS, CloudFormation, IAM * Microsoft Azure: Experience with Virtual Machines, AKS, Blob Storage, Azure SQL, Virtual Networks, Azure Functions, ARM templates * Oracle Cloud Infrastructure (OCI): Familiarity with Compute, OKE, Object Storage, networking, and OCI-specific services * Multi-cloud architecture design and implementation experience * Cloud migration strategies and execution (lift-and-shift, re-platforming, re-architecting) Container & Orchestration (Required) * Expert-level Kubernetes knowledge, including cluster architecture, networking, storage, and security * Hands-on experience with managed Kubernetes services (GKE, EKS, AKS) * Proficiency in Docker containerization, image optimization, and registry management * Experience with Helm charts for application packaging and deployment * Knowledge of container runtime environments (containerd, CRI-O) Service Mesh & Microservices (Required) * Istio: Deep expertise in Istio architecture, deployment, and operations * Istio traffic management (virtual services, destination rules, gateways, service entries) * Istio security features (mTLS, authorization policies, peer authentication, request authentication) * Istio observability and telemetry configuration * Multi-cluster and multi-mesh deployments * Service mesh troubleshooting and performance optimization * Understanding of sidecar proxy patterns and Envoy proxy * Experience with other service mesh solutions (Linkerd, Consul Connect) is a plus Reverse Proxy & Load Balancing (Required) * HAProxy Advanced configuration and management for load balancing and high availability * Nginx Expert-level configuration as reverse proxy and API gateway * Nginx rate limiting, and performance tuning * Nginx load balancing algorithms and upstream configurations * Experience with Nginx modules and custom configurations * High availability configurations using keepalived, VRRP, or similar * Integration with Kubernetes ingress controllers (Nginx Ingress, Istio Ingress) Infrastructure as Code (Required) * Advanced Terraform skills for multi-cloud infrastructure provisioning * Terraform module development, state management, and workspace strategies * Proficiency in Ansible for configuration management and automation * Ansible playbook development, roles, and inventory management * Experience with version control systems (Git) and GitOps workflows * Infrastructure testing frameworks (Terratest, Kitchen-Terraform) CI/CD Tools (Required) * Jenkins: Pipeline development (declarative and scripted), shared libraries, plugin management * Harness: Deployment pipeline configuration, workflow creation, approval gates * ArgoCD: GitOps workflows, application synchronization, multi-cluster management * Integration of CI/CD tools with Kubernetes and cloud platforms * Automated testing and deployment strategies * Artifact repository management (Nexus, Artifactory, cloud-native registries) Messaging & Streaming (Required) * Apache Kafka architecture, cluster management, and operations * Kafka topic design, partitioning strategies, and performance tuning * Kafka Connect experience * Experience with Kafka management tools (Kafka Manager, Cruise Control) * Understanding of event-driven architectures and patterns Database & Proxy Technologies (Required) * ProxySQL configuration, management, and optimization * MySQL database administration basics * Understanding of database replication and clustering Observability & Monitoring (Required) * Prometheus metrics collection, PromQL, and alerting rules * Grafana dashboard design and visualization techniques * Log aggregation and analysis Networking (Required) * Deep understanding of TCP/IP, DNS, HTTP/HTTPS, and network protocols * Cloud networking concepts (VPC, subnets, routing tables, NAT, VPN) * Load balancing strategies and implementations * Service discovery and DNS-based routing * Network security and firewall configuration * Software-defined networking (SDN) concepts Scripting & Programming * Proficient in scripting languages: Python, Bash * Go or python programming basics for tooling development * YAML and JSON for configuration management * Understanding of software development best practices Secrets Management (Required) * HashiCorp Vault: Advanced knowledge of Vault architecture, deployment, and operations * Vault authentication methods and integration with cloud providers and Kubernetes * Vault secret engines (KV v1/v2, database, transit, cloud dynamic... What we can offer you * Culture -We put our people first and prioritize the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human. * Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks. * Compensation - You’ll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits. What to expect in the hiring process * A technical interview with the Hiring Manager * A behavioural and technical interview with a member of the Executive team.

Supercell

WE'RE LOOKING FOR AN EXPERIENCED CLOUD ENGINEER TO JOIN THE CLOUD TEAM AT SUPERCELL. THE CLOUD TEAM PROVIDES THE FOUNDATION, EXPERTISE, AND SUPPORT THAT LETS EVERY SUPERCELL TEAM BUILD AND OPERATE SECURELY, EFFICIENTLY, AND AT SCALE ACROSS OUR MULTI-PROVIDER CLOUD ENVIRONMENT. OUR MISSION IS TO HELP EVERY TEAM USE THE CLOUD EFFECTIVELY AND SAFELY WITH MINIMAL OVERHEAD, WHILE MAKING SURE THERE ARE NO UNWELCOME SURPRISES. In this role you'll help us scale with the company's growth. As headcount and complexity increase, so does the demand on our cloud infrastructure. Rather than absorbing that linearly, we want to meet it with opinionated golden paths, automation, and self-service. You'll look several months ahead to spot scalability bottlenecks, technical debt, and emerging needs across the company, turning those into concrete technical direction and actions. You will design guardrails that minimise risk without being invasive, building paved roads that make the secure and efficient choice the easy choice. You’ll also ensure these paths work smoothly for both human developers and the AI tools or agents they use. You will operate with very high autonomy: keeping stakeholders and the team informed, and proactively deciding what makes the most sense for Supercell, so that teams can focus on creating great games. WHAT YOU'LL BE DOING * Build golden paths. Design and maintain opinionated, production-ready golden paths (think "hosting in 15 minutes") covering infrastructure, CI/CD, DNS, monitoring, auth, and storage. You’ll back these with reusable IaC templates and patterns that other developers build on. The goal is to enable teams and individuals to provision and run what they need themselves; we provide the paved roads, templates, and guardrails rather than owning and operating their infrastructure. * Automate high-risk operations into self-service. Turn manual operations (like account provisioning and deprovisioning, access grants and revocations, domain issuance) into deterministic, auditable pipelines triggered through self-service. Teams own their resources; we own the orchestration and guardrails, so changes run consistently and stay traceable across hundreds of accounts. * Own governance and security guardrails. Design and implement cloud governance using vendors’ native and customer tooling for Service Control Policies, WAF, IAM, SSO/Okta access and account governance. Pair preventative controls with detective layers that surface anomalies, configuration drift, and unexpected behaviour before they become problems. Minimise risk without getting in developers' way. * Enable safe AI-assisted development. Build guardrails for AI coding tools and "vibecoding" workflows (such as secrets handling, scoped permissions, sandboxing) and define how AI agents safely access cloud resources with agent identities and least-privilege IAM * Write opinionated docs for humans and agents. Create and maintain golden-path guidance, runbooks, and best practices that are equally consumable by developers and LLM agents (e.g. machine-readable/structured docs, MCP-style interfaces, and developer-portal content) * Raise Supercell’s game. Act as a force multiplier by mentoring other engineers, leading architectural reviews, and facilitating consensus during technical disagreements. Set the technical standards rather than just following them, and share learnings — including failures — openly through post-mortems. * Support FinOps. Help teams use the cloud cost-efficiently by surfacing cost-optimisation opportunities, improving cost visibility, and supporting accountability for usage across teams and projects. * Be a trusted partner to technical teams. Advise on cloud architecture, troubleshoot complex issues, and maintain close relationships across Supercell and with our cloud vendors. React quickly to emerging business and technical topics. WHAT YOU HAVE * Strong cloud computing and networking knowledge, with deep experience from at least one major cloud provider (e.g. AWS, Google Cloud) * Deep technical mastery across intersecting systems. You're the person others turn to for the hardest problems, but you also know when to route teams to the right internal expertise or external partners. * Solid grounding in cloud security and the common threat patterns in modern cloud environments * Hands-on experience with Terraform and GitHub Actions * Strong scripting and programming experience used to automate tasks and build custom tooling * Experience with cloud identity and access management, including IAM policies, roles, and permission boundaries across AWS and GCP. * Experience with application level identity, such as SSO, OIDC, and identity providers like Okta. * Familiarity with Internal Developer Platforms, including AI-assisted development tools, and a clear-eyed view of their security implications. * A track record of influence beyond your own work: mentoring engineers, leading architectural reviews, and setting technical standards * High autonomy. You identify and tackle problems before they're assigned, turn vague business pain points into technical roadmaps, and independently drive complex, ambiguous projects to completion. * Comfortable managing priorities and tight deadlines, even when dealing with incomplete data. * A humble, kind, and respectful attitude toward others and their work WOULD BE NICE IF YOU ALSO HAVE * Experience from multiple hyperscalers and a feel for how they compare * Experience securing AI agents, building MCP servers, or authoring agent-readable documentation * Experience with workflow automation tooling (e.g. n8n, Temporal) * Familiarity with Internal Developer Portals (e.g. Backstage) * Hands-on experience with FinOps tooling, reporting, and cost-optimisation experience * Experience with vendor management and direct collaboration with external partners * Enthusiasm for games WHERE YOU'LL BE This role is based in our Helsinki office. We value a collaborative work environment and genuine human interactions. You will work very closely with our other Helsinki-based teams. If you are not local, our relocation team would be excited to help you with your move to Helsinki. We provide comprehensive support not only for you, but also for your family! ––– That's it about the role! Below, we've gathered some things we feel are important for you to know. Totally optional, but a highly recommended read. Once you're ready to apply, just send us your application through the form on the bottom of the page. ––– ABOUT SUPERCELL Supercell is a games company from Helsinki, Finland, with offices also in San Francisco, Seoul, Shanghai, and London. You might know us as the makers of Hay Day, Clash of Clans, Boom Beach, Clash Royale, and Brawl Stars. Our mission is to create great games that as many people as possible play for years and that are remembered forever. So, how do we make great games? By putting together the best teams and giving them the freedom and independence to succeed. And by taking risks, failing, sharing learnings, and killing lots of projects. HEY, YOU MIGHT LOVE IT HERE! Independent cells and trust are at the core of our culture. But it takes more than that to make great games. We take good care of our people, providing them with the compensation, work environment, and resources they need to succeed while having fun along the way. YOU ARE NOT YOUR JOB TITLE ™ Here, you won’t need to focus on chasing titles or climbing ladders. Internally, our job titles don’t include prefixes like Senior, Junior, Principal, or Director. Recognition isn’t tied to your title, as it doesn't define the impact you can have around here. BENEFITS AND COMPENSATION Luring you in with glitter, glamour, and gems isn't what we're about. We want you to enjoy your time here fully, so we structure our compensation and benefits with that in mind. It starts with perceiving you as a human being, not a resource. RELOCATION? YES! No matter where you’re moving from, our dedicated mobility team and partners will support you throughout your move. We’ll ensure the process is as smooth as possible for you and anyone joining you – whether they’re family members of the human or animal kind! NOT SURE IF YOU SHOULD APPLY? Many candidates with great skills and experience second-guess themselves. The bar is high, but if this role excites you, apply! We’re here to help you succeed. Also, we're happy to learn about any specific accommodations you may need to fully engage in our recruitment process. Wishing you all the best, The Supercell Recruitment team

LearnUpon

Work Mode: Flex 1+ days per week in our Dublin office Department: Engineering   ABOUT THE COMPANY  LearnUpon partners with over 1,600 organisations globally to unlock the potential of employees, customers & members through learning that’s easy, scalable and focused on results. Read more about life at LearnUpon here.    ABOUT THE TEAM Our Engineering organization is dedicated to building robust, scalable infrastructure that handles world-scale platform demands. As part of the Site Reliability Engineering (SRE) team, we focus on system architecture, absolute performance, and technical innovation. Operating with high ownership and technical expertise, we are responsible for the scale-out of the LearnUpon infrastructure, championing internal self-service tooling, and embedding a culture of observability and shared operational responsibility across all engineering squads.   ABOUT THE OPPORTUNITY As a Staff Site Reliability Engineer, you will be a principal technical leader and a key catalyst for our infrastructure's evolution. In this role, you will take ownership of our core platform resilience, driving the strategy to build out an advanced, cost-effective observability function spanning metrics, logs, and transaction tracking. This opportunity requires a strategic thinker who can design cross-team SLO/SLI frameworks, navigate complex distributed system requirements, and mentor talent to ensure LearnUpon scales efficiently to support our ambitious global goals. In addition, you’ll be responsible for: * Infrastructure Optimization: Identify opportunities to improve and scale our infrastructure for performance, observability, maintainability, and cost, by creating innovative solutions. * Observability Function Strategy: Lead our efforts to build an observability function that incorporates application metrics, application transaction tracking, and event log management. * Resilience & Scaling: Drive the processes to maintain resilient, scalable, and cost-effective infrastructure while working with other Engineering teams to provide solutions that meet their ongoing requirements. * Tooling & Self-Service: Build tools focused on measuring, monitoring, and alerting, with an eye towards self-service in order to promote Engineers’ ownership of observability. * Operational Agility & Support: React quickly to changing customer and business needs and actively participate in the team's on-call rota.  Team Up-Leveling: Mentor junior talent and effectively communicate complex technical ideas to both technical and non-technical peers.   SKILLS & EXPERIENCE  Must-Haves                                                                          * 7+ years of experience in a software or Ops role. * 5+ years of cloud engineering experience, with at least 2 years of experience with AWS. * Experience deploying Microservice environments using containerisation technologies such as Kubernetes and Docker. * Experience designing and implementing Observability tech stacks, championing its benefits to Engineering teams, and managing the associated cost analysis of metrics gathering, effort, and tooling. * Ability to architect the design of SLO/SLI implementations that balance the needs of different teams. * Experience building and supporting large-scale distributed systems that back a consumer app or website with associated requirements of performance, security, and disaster recovery. * Experience with implementing IaC (e.g., CloudFormation, Terraform, etc.), automation tooling (e.g., Puppet, Ansible etc.), and CI/CD (e.g., Jenkins, Travis CI, GitLab, etc.). * Experience using AI tools to streamline tasks and improve efficiencies.   Nice-to-Haves * Experience with database scaling would be a strong plus. * Certification in AWS, any PaaS, and/or related technologies. *If you don’t tick every box but believe this role is a mutually good fit, please don’t hesitate to apply. We’d love to hear from you.   WHY CHOOSE LEARNUPON? From comprehensive rewards and generous time off to meaningful investment in your growth and development, LearnUpon gives you the support, trust, and opportunity to do the most impactful work of your career. Learn more here.    HIRING PROCESS * Qualified applicants may be invited to an initial screening call with a member of our TA Team. * Successful candidates will be invited to a series of practical interviews. * Finally, candidates will have an interview with our CTO. * Successful candidates will be contacted with an offer to join our team.   Note: At LearnUpon, we utilise AI to enhance the speed and quality of our screening and assessment practices, but our hiring decisions are always human.    LearnUpon is an Equal Opportunities Employer.  We do not discriminate on the basis of gender, marital status, family status, age disability, sexual orientation, race, religion, membership of the Traveller community, or any other legally protected status.   Check out our Careers site and Instagram to learn more about working at LearnUpon.   By submitting your application, you agree to LearnUpon's Privacy Policy.