Platform Architect / Hands-on Lead — plan & build an AI-native development platform

We are an Estonian energy company bringing software development in-house from a long-time vendor. The architecture stays as it is — ownership moves. The transition roadmap is drafted but needs a review; we now need the person who turns it into a working platform and runs the first delivery through it. You will plan and build: CI/CD gates on an existing Bitbucket monorepo (submodules): PR-only, secrets scanning, characterization tests on money-critical paths, preview environments, named human approval Sandboxed development where AI agents (Claude Code) and external developers work with zero production access — egress allowlists, hooks blocking destructive commands A masked/synthetic test-data pipeline (rules generated from schema, human-approved, fail-closed on schema change) so developers outside the EU can work safely — real data never leaves our zone Credential inventory, rotation and transfer from the vendor: AWS (eu-north-1: ECS, Lambda, RDS PostgreSQL, MQ), Secrets Manager, CodeArtifact, ~13 external API integrations AI working agreements: per-repo rulebooks, reference implementations, per-run guardrails and cost controls First proof: our CRM client rebuilt in a fixed React + TypeScript framework, delivered end-to-end through the new pipeline during a shadow period with the vendor Stack: AWS · Java 17 / Spring Boot backend · React 18 / TypeScript clients · Bitbucket Engagement: milestone-based, remote, EU-overlap hours. M1 = detailed implementation plan against our existing roadmap (paid, ~2 weeks). M2+ = phased build-out (gates → sandbox + masking → shadow-period support). We prefer part-time senior over full-time mid-level. You are a fit if you have built developer platforms and guardrails (not just used them), can point to one system where "whoever writes code never sees the data" was enforced in infrastructure rather than policy, and you use AI coding tools daily in your own work. Individual contributors only, no agencies. Budget: milestone-priced; propose your M1 rate.