We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet a Senior Platform Engineer for a project with a remote working model.

What you’ll be doing

• Plan and execute controlled upgrades of platform components, including backups, tested rollback/restore procedures, approved maintenance windows, and post-change validation.
• Modernise our Infrastructure as Code by migrating legacy Terraform code into reusable, versioned OpenTofu modules and clearly separated provisioning configurations.
• Manage OpenTofu, Terraform, and AWS provider upgrades, ensuring compatibility, safe state handling, and careful review of plans before production changes.
• Deliver critical platform version and dependency updates through versioned IaC and controlled releases.
• Design and implement high-availability and resilience improvements, including failover and recovery testing where applicable.
• Maintain and continuously test Kubernetes and platform backup/restore procedures, measuring recovery times and providing evidence of successful recovery.
• Improve platform monitoring and alerting, and implement self-healing capabilities through probes, automated restarts, autoscaling, and controlled remediation.
• Optimise Amazon EKS and AWS cost and capacity through rightsizing and, where appropriate, scheduled scaling or start/stop strategies.
• Build and maintain reusable OpenTofu/Terraform modules and Ansible automation, including semantic versioning, automated testing, naming/tagging standards, and shared GitLab CI/CD integrations.
• Implement secure delivery workflows using GitLab, Vault, AWS IAM/RBAC, least privilege, and segregation of duties.
• Investigate and remediate Checkmarx findings in Infrastructure as Code.
• Produce technical designs, ITIL-aligned operational procedures, observability/backup documentation, and progress reporting.
• Collaborate with platform owners, internal teams, and third parties on technical delivery, access, maintenance windows, and production approvals.
• Participate in a Scrum environment, working with Jira and Confluence.

What we’re looking for

• 5+ years of experience in DevOps, SRE, or Platform Engineering, including 3+ years managing production Infrastructure as Code on AWS.
• Strong hands-on experience with Terraform and OpenTofu, including reusable/versioned modules, state management, provisioning configurations, and AWS provider upgrades.
• Solid Ansible experience.
• Production experience with Amazon EKS, including cluster, add-on, and node-group lifecycle management.
• Strong AWS knowledge, particularly EC2, S3, IAM, and related platform services.
• Proven experience delivering production infrastructure migrations and upgrades safely, including risk assessment, backup, rollback/restore, change approval, and post-change validation.
• Strong Kubernetes knowledge, including Helm, ingress controllers, probes, HPA, and PodDisruptionBudgets.
• Practical knowledge of high availability, backup/restore, disaster recovery, and recovery testing.
• Experience with monitoring and alerting, using service-health data to assess the impact of infrastructure changes.
• Strong GitLab CI/CD experience, including merge requests, pipelines, reusable integrations, branch protection, and approval workflows.
• Practical experience with HashiCorp Vault, secrets management, CI/CD integration, IAM/RBAC, least privilege, and TLS fundamentals.
• Experience investigating and remediating Checkmarx findings in IaC.
• Strong Bash and Linux administration skills.
• Familiarity with Jira, Confluence, and VS Code.
• A senior mindset: technically autonomous, comfortable with ownership, but equally committed to peer review, governance, segregation of duties, and production controls.
• Familiarity with Generative AI and agentic development tools, including GitHub Copilot and other LLM-powered development clients, to accelerate IaC development, optimisation, and automation.
• Fluent in Portuguese and English.

Nice to have

• Advanced IaC module testing, migration automation, and orchestration.
• Experience with Kubernetes node OS or ingress-controller migrations.
• Stateful-service administration and HA design, including PostgreSQL backup/restore and failover testing or Vault HA.
• Experience with Kubernetes backup solutions such as Velero and automated recovery/self-healing.
• Experience with SLOs/SLIs, cost analysis, and capacity optimisation.
• Experience with additional CI/CD technologies such as Jenkins.
• Configuration-as-code experience.
• Enterprise identity integration and Python or Go scripting.
• Experience with data-platform workloads and their operational dependencies.
• Relevant AWS, Kubernetes, Terraform, Vault, or ITIL certifications.
• Availability for occasional, pre-agreed maintenance windows when required.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long-term projects with national and international context
• Opportunities to grow technically and professionally
• A people-first culture, focused on transparency and trust
• Teams that value ownership, collaboration and stability

Join us:

Send us your CV in English to with “DA / SPE”.

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.