About the role

Cloud Platform Engineer governing AWS and GCP infrastructure for Supabase’s open-source developer platform. Building secure IaC, self-service tooling, and operational primitives for distributed engineering teams.

Responsibilities

Design and implement cloud governance across AWS and GCP, including identity, account organization, access controls, and guardrails
Build reusable infrastructure and platform building blocks with Infrastructure as Code
Create self-service capabilities that reduce organizational friction for engineers
Own resource governance and visibility, including tagging, infrastructure inventory, ownership data, and cross-account billing data
Develop reusable security primitives for secrets storage, KMS, certificate management, token vending, service-to-service authentication, and mTLS
Own cloud-level network and operational primitives, including IP address management, DNS, service-limit alerting, and quota alerting
Build, deploy, monitor, troubleshoot, and improve owned systems
Establish and share cloud engineering best practices through documentation, internal tooling, examples, and enablement
Work within Cloud Engineering in Engineering Operations to shape infrastructure foundations for engineering teams

5+ years of experience in cloud governance, platform engineering, and/or operations
Experience operating production systems at scale and carrying on-call responsibility
Experience undertaking a significant migration, such as rearchitecting AWS account topology, introducing IaC for existing infrastructure, centralizing identity/SSO, or bringing a second cloud under governance
Experience building internal platform and self-service experiences for engineers
Deep expertise in at least one, ideally two, of tooling and ecosystem, software engineering, and operations
Broad AWS services knowledge, particularly IAM/SSO
Knowledge of the AWS Well-Architected Framework
Working knowledge of GCP
Production experience with Infrastructure as Code
Experience collaborating with auditors on compliance requirements
Ability to write production code in Go, Rust, or a comparable systems language
Experience across the SDLC, setting technical direction, de-risking projects, and producing RFCs
Experience running production infrastructure, including pager duty, alerts, runbooks, and SLOs
Relevant experience with IaC and automation
Clear communication and ability to work with a wide range of stakeholders
Ability to thrive in asynchronous, globally distributed teams
Comfort navigating ambiguity and iterating toward better systems

Fully remote; work from anywhere in the world
WeWork membership or co-working allowance usable anywhere in the world
ESOP (equity ownership) for every team member
Tech allowance for laptop, monitor, headphones, or other work equipment
Supabase covers 100% of health insurance for employees and 80% for dependents
Annual company off-sites
Flexible, asynchronous work
Annual education allowance for courses, books, conferences, or other professional development