SupercellSenior Cloud Engineer

任职要求

• Strong cloud computing and networking knowledge, with deep experience from at least one major cloud provider (e.g. AWS, Google Cloud)
• Deep technical mastery across intersecting systems. You're the person others turn to for the hardest problems, but you also know when to route teams to the right internal expertise or external partners.
• Solid grounding in cloud security and the common threat patterns in modern cloud environments
• Hands-on experience with Terraform and GitHub Actions
• Strong scripting and programming experience used to automate tasks and build custom tooling
• Experience with cloud identity and access management, including IAM policies, roles, and permission boundaries across AWS and GCP.
• Experience with application level identity, such as SSO, OIDC, and identity providers like Okta.
• Familiarity with Internal Developer Platforms, including AI-assisted development tools, and a clear-eyed view of their security implications.
• A track record of influence beyond y…

工作职责

• Build golden paths. Design and maintain opinionated, production-ready golden paths (think "hosting in 15 minutes") covering infrastructure, CI/CD, DNS, monitoring, auth, and storage. You’ll back these with reusable IaC templates and patterns that other developers build on. The goal is to enable teams and individuals to provision and run what they need themselves; we provide the paved roads, templates, and guardrails rather than owning and operating their infrastructure.
Build golden paths.
• Automate high-risk operations into self-service. Turn manual operations (like account provisioning and deprovisioning, access grants and revocations, domain issuance) into deterministic, auditable pipelines triggered through self-service. Teams own their resources; we own the orchestration and guardrails, so changes run consistently and stay traceable across hundreds of accounts.
Automate high-risk operations into self-service.
• Own governance and security guardrails. Design and implement cloud governance using vendors’ native and customer tooling for Service Control Policies, WAF, IAM, SSO/Okta access and account governance. Pair preventative controls with detective layers that surface anomalies, configuration drift, and unexpected behaviour before they become problems. Minimise risk without getting in developers' way.
Own governance and security guardrails.
• Enable safe AI-assisted development. Build guardrails for AI coding tools and "vibecoding" workflows (such as secrets handling, scoped permissions, sandboxing) and define how AI agents safely access cloud resources with agent identities and least-privilege IAM
Enable safe AI-assisted development.
• Write opinionated docs for humans and agents. Create and maintain golden-path guidance, runbooks, and best practices that are equally consumable by developers and LLM agents (e.g. machine-readable/structured docs, MCP-style interfaces, and developer-portal content)
Write opinionated docs for humans and agents.
• Raise Supercell’s game. Act as a force multiplier by mentoring other engineers, leading architectural reviews, and facilitating consensus during technical disagreements. Set the technical standards rather than just following them, and share learnings — including failures — openly through post-mortems.
Raise Supercell’s game.
• Support FinOps. Help teams use the cloud cost-efficiently by surfacing cost-optimisation opportunities, improving cost visibility, and supporting accountability for usage across teams and projects.
Support FinOps.
• Be a trusted partner to technical teams. Advise on cloud architecture, troubleshoot complex issues, and maintain close relationships across Supercell and with our cloud vendors. React quickly to emerging business and technical topics.
Be a trusted partner to technical teams