You'll be our first dedicated platform engineer and the sole owner of our cloud infrastructure - the paved road our backend, security, and ML engineers build on. This is a high-autonomy role: you'll set platform direction, harden our security posture, and automate away toil across a serverless, multi- region AWS environment. You report to the engineering lead and work directly with the founder on architecture decisions. If you want a role where you own the whole platform, your decisions ship, and your security work is visible to enterprise buyers, this is it.

• End-to-end ownership of our AWS platform across two regions (Australia and US)  - provisioning, networking, security, observability, and cost.

• Infrastructure-as-Code as the single source of truth (Terraform and serverless framework) - no click-ops.

• CI/CD pipelines and release automation for a Python/serverless codebase (API Gateway, Lambda, SQS, DynamoDB).

• Security posture of the platform itself: KMS key management and rotation, WAF rules, least-privilege IAM, secrets management, multi-region data isolation and residency.

• Observability and alerting (metrics, logs, traces) so the team catches issues before customers do.

• Internal automation and tooling that removes repetitive work for engineering - environment provisioning, deployment workflows, operational runbooks-as-code.

• Reliability and incident response: you define SLOs, own runbooks, and lead postmortems.