ABOUT US

Pliant is a modular B2B payments platform that combines commercial card issuing, payment accounts, FX, and spend management in one system — adapting to existing setups rather than requiring customers to replace them.

Businesses across industries such as travel, e-commerce, and insurance use Pliant to manage complex payment workflows with cards, backed by credit lines Pliant underwrites itself.

Fintechs and software platforms embed Pliant's payment infrastructure into their own products, from API-based Cards-as-a-Service to fully white-label solutions. Banks use Pliant's Card & Spend OS, the customer-facing interface, on their own infrastructure to run card programs

Founded in 2020 and headquartered in Berlin, Pliant serves 5,000+ businesses and 40+ partners across Europe and the United States. A principal member of Visa and Mastercard, Pliant issues commercial cards in 13 currencies across 32 countries — under its own European e-money license and with licensed partners in the UK and US.

Learn more at www.getpliant.com

ABOUT THE ROLE

We're looking for a Platform Infrastructure Engineer (m/f/d) to join our small platform team with a wide remit: owning the AWS infrastructure across multiple account types, the CI/CD pipelines for 20+ microservices, and the Lambda and ECS runtime that product teams deploy on. Every engineer at Pliant depends on what this team maintains.

You'll own one or more infra domains end to end: design, build, operate, on call. That covers Terraform modules, GitHub Actions pipelines, AWS account architecture, Lambda functions in Go and Python, and an active ECS to Kubernetes migration. You'll work directly with product engineers, understand where the friction is, and fix it. You'll report to the Head of Platform Infrastructure.

WHAT YOU'LL DO

• Own infra domains end to end: Take one or more domains from design through build, operations, and on call. You make the call, review the PRs, and answer the page.

• Run Infrastructure as Code: Write and maintain Terraform modules for AWS resources across dev, staging, production, and PCI scoped accounts, orchestrated through Spacelift.

• Maintain CI/CD at scale: Own GitHub Actions pipelines for a fleet of Java and Kotlin microservices, including reusable workflows, matrix strategies, and cache behavior.

• Build operational tooling: Write Lambda functions in Go and Python for tasks like metrics collection, secret rotation, IAM authentication, and event dispatching.

• Own observability: Set up Datadog monitors, dashboards, and SLOs that surface problems before a product engineer notices them.

• Own security and compliance controls: Manage IAM, KMS, and access baselines that satisfy PCI DSS and SOC 2 without generating a support ticket every time a product team needs something.

• Take part in on call: Join the rotation the team is currently shaping and own your incidents.

• Use AI assisted coding tools daily: Claude Code, Cursor, or something equivalent, both to ship features and to help peers get more out of them.

WHAT YOU'LL BRING

• 5+ years in platform or infrastructure engineering, with meaningful time spent on production AWS at scale.

• Solid AWS experience: VPC design, IAM, ECS and EKS, Lambda, RDS. You know when the right answer is a managed service and when it isn't.

• Terraform proficiency: you write modules and have dealt with state migrations, drift, and broken remote states in a shared codebase. You're comfortable reading a plan output.

• Experience with Spacelift or a similar IaC orchestration tool.

• Kubernetes experience designing and running production workloads at scale. We're currently planning a migration from ECS to EKS, so this experience will be especially valuable.

• CI/CD experience with GitHub Actions at scale: reusable workflows, matrix strategies, and cache behavior. You're the person other engineers ask when the pipeline is doing something weird.

• Observability as a default: Datadog or equivalent, with monitors, dashboards, and SLOs as part of your definition of done.

• High Python proficiency: you can navigate our codebase and implement complex features for our internal customers.

• Clear communication with product engineers: you can explain a trade off in two sentences and can talk with non technical peers without pulling up code.

• Experience with AWS IAM Roles Anywhere and certificate based authentication patterns.

• Fluency with AI assisted coding tools such as Claude Code or Cursor, used to ship features, not just review code.

BONUS POINTS

• Compliance awareness: we operate under PCI DSS, ISO 27001, and SOC 2.

• Familiarity with Go, enough to maintain and extend Lambda functions. If you don't tick this box, that's fine as long as you're willing to learn.

• Kafka cluster operations experience.

WHAT THE FIRST YEAR LOOKS LIKE

• The first weeks are orientation: learning the accounts, the IaC setup, the CI pipelines, and the on call history, while shipping small infrastructure changes.

• By month three, you own at least one domain. You make the call, review the PRs, and answer the page.

• By year one, you've shipped something that made the team's job smaller: a reliability improvement, a security control, or a self service capability that cut the ticket volume coming your way.

WHAT WE OFFER

• The opportunity to work in a growing team with big responsibilities that thrives on a strong exchange of knowledge and excellence

• Attractive remuneration

• Your choice of preferred OS, Windows or Mac

• Flat hierarchy and transparent communication in a relaxed, professional atmosphere

• Opportunity to develop your talent in a dynamic team with ambitious goals

• Flexibility and possibility to work remotely

• Pliant Card with monthly credit to explore the product and enjoy food with colleagues

Pliant is an equal opportunity employer. We welcome applications from people of all backgrounds, identities and abilities, and are committed to an inclusive hiring process. If you need any accommodations during the interview process, please let us know.

At Pliant we use the Ashby AI Criteria to assist with looking over resumes against our job qualifications for this role. All final decisions are made by our Talent Team and Hiring Team.

A human is behind these processes. Ashby does not automatically reject candidates or make final hiring decisions. Our teams review all results and make the final hiring decision with every candidate that applies.