Senior Cloud Engineer

Job Overview

We're looking for an experienced Cloud Engineer to join the Cloud Team at Supercell. The Cloud Team provides the foundation, expertise, and support that lets every Supercell team build and operate securely, efficiently, and at scale across our multi-provider cloud environment. Our mission is to help every team use the cloud effectively and safely with minimal overhead, while making sure there are no unwelcome surprises.

In this role you'll help us scale with the company's growth. As headcount and complexity increase, so does the demand on our cloud infrastructure. Rather than absorbing that linearly, we want to meet it with opinionated golden paths, automation, and self-service. You'll look several months ahead to spot scalability bottlenecks, technical debt, and emerging needs across the company, turning those into concrete technical direction and actions. You will design guardrails that minimise risk without being invasive, building paved roads that make the secure and efficient choice the easy choice. You’ll also ensure these paths work smoothly for both human developers and the AI tools or agents they use.

You will operate with very high autonomy: keeping stakeholders and the team informed, and proactively deciding what makes the most sense for Supercell, so that teams can focus on creating great games.

What You'll Be Doing

• Build golden paths. Design and maintain opinionated, production-ready golden paths (think \"hosting in 15 minutes\") covering infrastructure, CI/CD, DNS, monitoring, auth, and storage. You’ll back these with reusable IaC templates and patterns that other developers build on. The goal is to enable teams and individuals to provision and run what they need themselves; we provide the paved roads, templates, and guardrails rather than owning and operating their infrastructure.


• Automate high-risk operations into self-service. Turn manual operations (like account provisioning and deprovisioning, access grants and revocations, domain issuance) into deterministic, auditable pipelines triggered through self-service. Teams own their resources; we own the orchestration and guardrails, so changes run consistently and stay traceable across hundreds of accounts.


• Own governance and security guardrails. Design and implement cloud governance using vendors’ native and customer tooling for Service Control Policies, WAF, IAM, SSO/Okta access and account governance. Pair preventative controls with detective layers that surface anomalies, configuration drift, and unexpected behaviour before they become problems. Minimise risk without getting in developers' way.


• Enable safe AI-assisted development. Build guardrails for AI coding tools and \"vibecoding\" workflows (such as secrets handling, scoped permissions, sandboxing) and define how AI agents safely access cloud resources with agent identities and least-privilege IAM


• Write opinionated docs for humans and agents. Create and maintain golden-path guidance, runbooks, and best practices that are equally consumable by developers and LLM agents (e.g. machine-readable/structured docs, MCP-style interfaces, and developer-portal content)


• Raise Supercell’s game. Act as a force multiplier by mentoring other engineers, leading architectural reviews, and facilitating consensus during technical disagreements. Set the technical standards rather than just following them, and share learnings — including failures — openly through post-mortems.


• Support FinOps. Help teams use the cloud cost-efficiently by surfacing cost-optimisation opportunities, improving cost visibility, and supporting accountability for usage across teams and projects.


• Be a trusted partner to technical teams. Advise on cloud architecture, troubleshoot complex issues, and maintain close relationships across Supercell and with our cloud vendors. React quickly to emerging business and technical topics.

What You Have

• Strong cloud computing and networking knowledge, with deep experience from at least one major cloud provider (e.g. AWS, Google Cloud)


• Deep technical mastery across intersecting systems. You're the person others turn to for the hardest problems, but you also know when to route teams to the right internal expertise or external partners.


• Solid grounding in cloud security and the common threat patterns in modern cloud environments


• Hands-on experience with Terraform and GitHub Actions


• Strong scripting and programming experience used to automate tasks and build custom tooling


• Experience with cloud identity and access management, including IAM policies, roles, and permission boundaries across AWS and GCP.


• Experience with application level identity, such as SSO, OIDC, and identity providers like Okta.


• Familiarity with Internal Developer Platforms, including AI-assisted development tools, and a clear-eyed view of their security implications.


• A track record of influence beyond your own work: mentoring engineers, leading architectural reviews, and setting technical standards


• High autonomy. You identify and tackle problems before they're assigned, turn vague business pain points into technical roadmaps, and independently drive complex, ambiguous projects to completion.


• Comfortable managing priorities and tight deadlines, even when dealing with incomplete data.


• A humble, kind, and respectful attitude toward others and their work

Would Be Nice if You Also Have

• Experience from multiple hyperscalers and a feel for how they compare


• Experience securing AI agents, building MCP servers, or authoring agent-readable documentation


• Experience with workflow automation tooling (e.g. n8n, Temporal)


• Familiarity with Internal Developer Portals (e.g. Backstage)


• Hands-on experience with FinOps tooling, reporting, and cost-optimisation experience


• Experience with vendor management and direct collaboration with external partners


• Enthusiasm for games