Senior DevOps / Platform Engineer

About the Role

We’re looking for a Senior DevOps / Platform Engineer for CipherScale’s AI-native platform to take independent ownership of the platform and release-engineering systems behind our continuous delivery model.

You’ll own the infrastructure, automation, and controls that govern how software is built, integrated, validated, and released. Your initial focus will be on strengthening trunk-integration safety, introducing robust release gates, isolating build and QA environments, and improving confidence across the entire delivery lifecycle.

This is not a ticket-execution role. You’ll set direction for the platform and release-engineering surface, establish the standards behind it, and work directly with engineers to remove delivery bottlenecks. You’ll be expected to identify foundational gaps, design pragmatic solutions, and take them through implementation, adoption, and operation.

We are an AI-native engineering organisation. AI agents and tooling perform a meaningful share of the implementation and operational work, and fluency with this way of working is essential. You’ll use AI to design systems, build automation, investigate failures, accelerate delivery, and continuously improve the platform.

Our philosophy is that we are a small, close-knit team, and we care deeply about you:

• Competitive pay rates

• Fully remote work environments

• Self-managed time off

Important:

• This will be a permanent employment opportunity for candidates based in Spain. For other locations, it will be a B2B contract.

Responsibilities

• Own the strategy, architecture, and operation of our platform and release-engineering systems

• Design and maintain scalable infrastructure using GCP, Cloud Run, infrastructure as code, and managed cloud services

• Own CI across a six-repository cluster, ensuring changes can be built, tested, integrated, and released safely at high velocity

• Build and operate the platform gates governing trunk integration, merge readiness, regression testing, and production releases

• Implement and maintain merge queues, GitHub rulesets, branch protections, required checks, and repository-level delivery policies

• Design isolated, reproducible review, build, integration, and QA environments

• Build release automation that supports progressive delivery, controlled rollouts, rapid rollback, and clear promotion criteria

• Improve build performance, test reliability, caching, dependency management, and CI resource efficiency

• Establish release observability, including deployment status, pipeline health, failure diagnostics, lead time, and change-failure metrics

• Create clear release-gating policies that balance delivery speed with product stability

• Partner with engineers to improve testability, deployment safety, and operational readiness

• Reduce manual intervention throughout the build, integration, and release lifecycle

• Investigate CI, environment, and release failures, lead root-cause analysis, and implement lasting corrective actions

• Apply secure-by-default practices to credentials, permissions, artefacts, dependencies, environments, and deployment workflows

• Define platform standards and documentation that improve developer autonomy and onboarding

• Use AI agents and AI-enabled engineering tools to build, operate, troubleshoot, and continuously improve platform systems

• Evaluate emerging AI-native approaches to release engineering, infrastructure management, testing, and operational automation

Day-One Mandate

Your initial mandate will be to take ownership of the platform gates and release pipeline, including:

• Establishing a reliable merge queue and trunk-integration model

• Defining integration and regression gates across the repository cluster

• Introducing isolated review and QA environments

• Strengthening GitHub rulesets, branch protection, and required-check policies

• Creating a consistent, automated release pipeline

• Implementing progressive delivery and rollback mechanisms

• Improving visibility into build, integration, and release health

• Prioritising and delivering the existing backlog of foundational platform work

Required Qualifications

• 6+ years of experience in Platform Engineering, Release Engineering, DevOps, SRE, Infrastructure Engineering, or a closely related role

• Demonstrated experience independently owning a platform or release-engineering function

• Strong production experience with Google Cloud Platform, particularly Cloud Run and related managed services

• Deep experience designing and operating CI/CD systems using GitHub Actions

• Strong knowledge of GitHub rulesets, branch protection, required checks, merge queues, and Git-based delivery workflows

• Experience operating CI at scale across multiple repositories, services, or interdependent components

• Proven experience building release automation and progressive-delivery workflows Experience designing safe trunk-based development and continuous-delivery systems

• Strong understanding of build pipelines, test orchestration, artefact management, environment promotion, and rollback strategies

• Experience creating isolated preview, review, integration, or QA environments

• Strong knowledge of infrastructure as code and automated cloud provisioning

• Solid understanding of Linux, containers, networking, IAM, secrets management, and cloud security fundamentals

• Experience improving CI reliability, performance, reproducibility, and cost efficiency

• Ability to diagnose complex failures across source control, CI systems, cloud infrastructure, applications, and test environments

• Proficiency in at least one scripting or programming language, such as Python, Bash, Go, or TypeScript

• Strong written communication and the ability to define technical standards, explain trade-offs, and drive adoption

• Ability to work effectively with a Europe-based distributed team

AI-Native Working

• AI-native fluency is a non-negotiable requirement for this role.

• You should be comfortable using AI agents and tooling as part of your normal engineering

• workflow—not as an occasional assistant, but as a core part of how you deliver work.

• This includes using AI to:

• Design and evaluate platform architectures

• Generate, review, and improve infrastructure and pipeline code

• Build internal tooling and release automation

• Investigate CI failures and production issues

• Analyse logs, tests, deployments, and operational signals

• Create and maintain documentation

• Automate repetitive engineering and operational tasks

• Coordinate complex changes across multiple repositories

• Increase the speed and scope of your individual contribution

You’ll also help establish effective patterns for how AI agents interact with our repositories,

delivery systems, environments, and operational workflows.

Optional, but Good to Have

• Experience with Cloud Build, Artifact Registry, Pub/Sub, Workflows, Secret Manager, or other GCP platform services

• Experience with Terraform, Pulumi, or similar infrastructure-as-code tooling

• Familiarity with progressive-delivery platforms or techniques such as canary releases, traffic splitting, feature flags, or automated promotion

• Experience managing monorepos or tightly coupled multi-repository architectures

• Familiarity with contract testing, end-to-end testing, test-impact analysis, or selective CI execution

• Experience implementing ephemeral environments and automated environment lifecycle management

• Experience with container supply-chain security, software bills of materials, artefact signing, or provenance controls

• Familiarity with policy-as-code, dependency scanning, vulnerability scanning, and secrets detection

• Experience with observability tooling such as Google Cloud Monitoring, OpenTelemetry, Grafana, Datadog, or Sentry

• Experience defining and tracking delivery metrics such as deployment frequency, lead time, change-failure rate, and recovery time

• Experience building developer platforms, internal developer portals, or self-service engineering workflows

• Familiarity with AI coding agents, agent orchestration, model context protocols, or AI-enabled operational tooling

• Experience in a startup or other fast-moving product engineering environment

• Experience mentoring engineers or leading cross-functional platform initiatives

What Success Looks Like

• Within your first months, we expect to see:

• A clearly owned and prioritised platform and release-engineering roadmap

• Safer trunk integration with predictable, enforceable merge gates

• Reliable integration and regression testing across the repository cluster

• Isolated review and QA environments that can be created and removed automatically

• A consistent release process with progressive rollout and rollback support

• Faster, more reliable CI with fewer unexplained or intermittent failures

• Greater visibility into pipeline health, release status, and delivery performance

• Reduced manual intervention and increased developer confidence in continuous delivery

• Effective use of AI agents to accelerate platform development and ongoing operations

About CipherScale

CipherScale is building an AI-native Zero Trust security platform for a world where enterprise infrastructure is increasingly operated by humans and autonomous agents through natural language, agent protocols, and machine- to-machine capabilities.

• AI agents and agentic systems

• Model Context Protocol (MCP)

• Zero Trust, identity, and authorization

• Networking and distributed systems

• Cloud infrastructure and enterprise security

What We Offer

• Competitive salary and comprehensive benefits

• A senior ownership role with responsibility for a critical engineering surface

• The autonomy to define platform strategy, standards, and technical direction

• The opportunity to build foundational systems with immediate, measurable impact

• A fast-moving, AI-native engineering environment

• Direct collaboration with technical leadership and product engineers

• Support to experiment, automate, and introduce better ways of working

• A culture that values speed, ownership, sound judgement, and reliable delivery