Cloud Platform Engineer

About the Role

Join Airwallex's Cloud Platform Engineering team, responsible for infrastructure systems that give the organization visibility and control over its cloud resources. We build two critical platforms: Cloud Cost Management Platform and Security & Access Platform. This role focuses on designing and delivering cost, billing, and access-control capabilities to enable cost governance and secure production environments across GCP and CI/CD pipelines.

What You'll Do

• Design and build a multi-level billing and cost attribution pipeline that ingests raw GCP billing data and distributes costs across business units, departments, and feature teams.

• Build the billing dashboard — a self-serve cost reporting system used by all department leads across the organization.

• Develop anomaly detection and alerting for abnormal cloud usage patterns.

• Build cost optimization recommendation systems based on utilization signals across GCP resources.

• Implement automated resource rightsizing and waste reduction tooling.

• Implement and roll out a Just-In-Time (JIT) access request system to replace standing IAM privileges.

• Build a self-service credential management system.

• What We're Looking For

• Minimum qualifications:

• 5+ years of software engineering experience, with at least 2 years building platform or infrastructure tooling.

• Strong backend engineering skills — Go, Python, or Java.

• Hands-on experience with GCP or AWS.

• Experience designing and building data pipelines or backend services that process and aggregate large datasets.

• Solid understanding of cloud security principles: IAM, RBAC/ABAC, least-privilege access, secrets management.

• Comfortable owning a project end-to-end: design → implementation → rollout → monitoring.

• Preferred qualifications:

• Experience building cost management, FinOps, or billing systems.

• Experience with access control systems (JIT, PAM, ABAC/RBAC frameworks).

• Familiarity with HashiCorp Vault or similar secrets management platforms.

• GitLab CI/CD administration experience, including runner security.

• Experience with Kubernetes resource management, autoscaling, or rightsizing tooling (e.g. ScaleOps, VPA).

• Prior work in a platform engineering or DevOps/SRE team.

• Nice to Have

• Experience building cost management, FinOps, or billing systems.

• Experience with access control systems (JIT, PAM, ABAC/RBAC frameworks).

• Familiarity with HashiCorp Vault or similar secrets management platforms.

• GitLab CI/CD administration experience, including runner security.

• Kubernetes resource management, autoscaling, or rightsizing tooling (e.g. ScaleOps, VPA).

• Prior work in a platform engineering or DevOps/SRE team.