Cloud Infrastructure Engineer

About the role

LOCATION: Londrina, Parana, Brazil

Who We Are

At Platform Science, we’re working to connect everything that moves.

Founded in 2015, Platform Science is an open IoT platform partnering with innovative fleets, application developers, vehicle manufacturers, and equipment providers across the transportation industry. Our technology helps deliver modern solutions to supply chain professionals around the world.

Our employees bring diverse backgrounds, experiences, and perspectives. We believe great ideas can come from anywhere, and we foster a culture built around innovation, collaboration, empathy, resilience, and transparency.

About the Role

Platform Science is looking for a Cloud Infrastructure Engineer to join our CloudOps team.

CloudOps owns the foundational cloud infrastructure that enables our engineering teams to build, deploy, and operate products at scale. The team manages identity, networking, governance, security guardrails, backup, disaster recovery, and shared cloud services across a multi-account AWS environment spanning hundreds of accounts and multiple business units. We are also extending this operating model across Azure and GCP.

This is a hands-on senior individual contributor role for an engineer who enjoys building foundational infrastructure and solving complex cloud problems. You will own infrastructure and platform capabilities end to end, work primarily through Infrastructure as Code, and create guardrails and self-service capabilities that allow engineering teams to move quickly without sacrificing security or reliability.

The scope is intentionally broad. You may work on cloud identity and permissions, private networking, multi-cloud governance, backup and disaster recovery, security remediation, or developer self-service capabilities.

AI-assisted engineering is also part of how the team operates. We use AI coding agents to accelerate implementation and automation while maintaining rigorous engineering review, security, and production standards.

What You'll Do

- Implement and maintain components of our multi-account AWS Landing Zone (AWS Organizations, Control Tower, AFT, tagging standards, permission boundaries) within established patterns.

- Support governance, security controls, observability, and backup capabilities across AWS, and increasingly Azure and GCP, following established standards.

- Administer cloud identity and access management day-to-day — Okta federation, AWS IAM Identity Center, permission sets, group membership, credential hygiene — applying least-privilege principles within existing frameworks.

- Configure and maintain cloud networking components: IP address management, VPC configuration, routing, transit connectivity, DNS — following architecture set by senior engineers.

- Contribute to migrating workloads from public-internet exposure to private/zero-trust networking models under established playbooks.