Job Description

Have you ever looked at a sprawling internal IT estate and known exactly how much smaller and safer it could be? We have one. Hundreds of repositories and thousands of Azure Functions, Logic Apps and low-code flows, built by many hands over many years. We are looking for one person to own turning it into a small number of well-designed, centralized APIs running on Kubernetes.

Greenstep is a Finnish, family-owned growth company founded in 2010 that provides high-quality technology and back-office services to support its clients' growth and success. Today we are a community of more than 800 experts working in the Nordics and across Europe. We have grown organically, and today Greenstep has people in Finland, Åland, Sweden, Norway, Estonia, Denmark and the Netherlands. We share one goal: to help growth companies become leaders in their fields.

Our internal automation grew as fast as the company did. It works, mostly, and nobody can see all of it. That is the problem you will solve.

The Role

You own the target architecture for Greenstep's internal platform and you build a large part of it yourself. You lead our internal developers technically, and you decide what gets consolidated, what gets rewritten and what gets deleted. Deleting is a big part of the job.

What will you do as a Staff Engineer:

• Set and own the target architecture and build most of it. A handful of centralized, versioned APIs with clear ownership, running on AKS, with authentication, observability and access control solved once instead of in every repo.
• Inventory the estate, then shrink it. You map what exists, decide what gets consolidated, what gets rewritten and what gets deleted. Deleting is a big part of the job.
• Design the migration so it is boring. Functions and Kubernetes run side by side while traffic shifts incrementally. No big-bang cutover, no weekend where payroll stops.
• Move business logic out of low-code. HR, payroll, finance and client onboarding flows become services that can be tested, versioned and reused.
• Build the platform, not just the services. Service templates, CI/CD, GitOps, infrastructure as code, secrets handling, API gateway, tracing and metrics. You set the standard by shipping it first.
• Make agentic development normal here. Migrating thousands of functions by hand is not realistic. You design the workflow, the review gates and the guardrails that keep AI-generated code safe to put in front of payroll data, and you use these tools heavily yourself.
• Lead the internal developers technically. Architecture reviews, pairing, code review, and a roadmap business stakeholders can actually follow.
• Partner with the App Factory staff engineer, who owns the internal applications, so those apps consume your APIs instead of talking to source systems directly.

What we're looking for

You have taken a sprawling estate and made it smaller and safer before. You can describe what you kept, what you killed, and how you got people to agree. You are as comfortable in a design review as you are explaining to a payroll team why their flow is being replaced and what they gain.

What you bring

• 7+ years in software and cloud engineering, including several years leading platform or API consolidation at scale. You can describe an estate you made smaller: what you kept, what you killed, and how you got people to agree.
• Deep Python backend experience, and the judgment to know when a service should not be Python at all.
• Production Kubernetes you have operated, not just deployed: Helm, GitOps, ingress, secrets, resource limits, upgrades.
• Event-driven workloads on Kubernetes, specifically KEDA or equivalent. You know why scale-to-zero and queue-depth scaling decide whether this migration saves money or costs it.
• Azure fluency: networking, security, Entra ID, Workload Identity, Key Vault, API Management, Functions and Logic Apps, including how to migrate off the parts that should not be there.
• Terraform, as the single source of truth for infrastructure. State management, modules, drift, and a review process that treats infrastructure changes like code changes.
• Security as a default, not a review stage. Centralizing payroll and HR APIs across six jurisdictions means centralizing trust: least privilege, managed identity over secrets, auditability, data residency, ISO 27001 and GDPR in the design rather than bolted on after.
• Deliberate, heavy use of AI coding agents to write and refactor in volume, and clear opinions about where they fail.
• Technical leadership without a management title.
• Working language is English. Finnish helps when working with Finnish business teams but is not required.

Extra but not mandatory: Reading Go well enough to debug the tooling you depend on.

You join Greenstep's internal technology team, which builds and runs the platforms our 800 experts use every day. You work alongside our internal developers, the BI Book product team and our data and analytics specialists, and directly with the business owners in HR, payroll and finance whose processes run on the platform.

Why Greenstep?

Greenstep Oy is a family company founded in 2010 that provides high-quality services to support its clients' business and growth. Every Greenstepper matters to us, and alongside interesting work we want to offer excellent employment for everyone. You join a community where expertise, responsibility and caring for each other show in everyday work. Across Greenstep we are already a network of more than 800 experts. Together we move forward while building our own professional expertise.

💚 Support for your well-being. For us, everyone's well-being and well-being at work are top priorities. Our occupational health is comprehensive, and our offices are ergonomically designed. The Flex benefit and lunch discount offered through Epassi are available to you. However, the number one thing that supports your well-being at work is a sustainably built resource budget.

💚 A salary model that matches your responsibilities and experience. All Greenstep employees are also included in our Together bonus, through which we share 10% of the annual operating profit among all employees, regardless of role.

💚 Support and time for development and strengthening your skills. At Greenstep, continuous learning is at the core of what we do. Our own Greenstep Academy offers training in various topics almost weekly!

💚 Career opportunities in a growing family-owned company. We grow organically primarily with a few small exceptions where the culture has been 100% on par with ours. Because, we want to grow in a controlled manner, profitably and without compromising on quality. For us, growth means new opportunities: we can make a more positive impact on society, create new jobs, invest in the development and skills of our personnel, and enable business continuity. Our culture has developed together over the years, and our values are reflected in our everyday work.

Interested? Great, we'd love to hear from you!

This role is located in our Espoo office. With our hybrid work model, we are at least 50% of the work time at the office with our colleagues! Please note that Greenstep doesn't sponsor work visas, so to work with us, you need to hold a full-time work permit and live close to mentioned location.

If what you read sparked your interest, we’d love to hear more about you! We review applications on a rolling basis and will proceed as soon as suitable candidates are identified, so please submit your application before 11.10.2026.

Our process usually has three interview rounds. One of them is a practical work sample that mirrors the real job, and you are welcome to use any AI tooling you like. For the selected candidate we call references and run a credit check.

We can't wait to hear from you!