DevOps Engineer SFTPGo | London hybrid

Role: DevOps Engineer with SFTPGo experience

Location: London, office based 3-4 days per week, the rest remote

Start: ASAP

Contract Duration: Full time role (Monday to Friday) 6 months initially (inside IR35)

The DevOps Engineers will provide hands-on platform engineering and infrastructure-as-code capability. Working as part of the SFTP-Go delivery team, they will build and automate the platform, establish GitOps and CI/CD delivery, implement onboarding pipelines, support operational readiness and assist with the controlled migration of services from Axway.

Key Responsibilities:

Platform Engineering

• Build and deploy SFTP-Go on Red Hat OpenShift across development, test and production environments.
  
• Implement a highly available platform using PostgreSQL as the database backend and S3-compatible object storage.
  
• Create repeatable infrastructure-as-code components for platform deployment, configuration and environment promotion.
  
• Implement resilience, backup, restore and recovery arrangements in collaboration with Infrastructure and Database teams.
  

GitOps and Configuration Automation

• Establish GitOps delivery using Argo CD and Git-centred, pull-request-based workflows.
  
• Ensure platform infrastructure and configuration are version controlled, reviewable, auditable and capable of automated reconciliation.
  
• Build an onboarding repository for account and file-flow definitions, with CI validation against agreed technical and security guardrails.
  
• Apply approved SFTP-Go configuration through Terraform, with secrets and SSH keys managed through HashiCorp Vault or External Secrets Operator.
  

CI/CD Engineering

• Design and implement CI/CD pipelines for platform image builds, Helm chart linting and testing, policy validation and promotion between environments.
  
• Automate quality, security and compliance checks within the delivery pipeline.
  
• Develop and maintain reusable Helm charts, Terraform modules, pipeline templates and engineering standards.
  
• Promote controlled, peer-reviewed change and minimise undocumented manual configuration.
  

Security and Platform Hardening

• Work with Security and Network Engineers to harden the OpenShift and SFTP-Go platform.
  
• Implement RBAC, network policies, secrets management, TLS/PKI controls and secure connectivity patterns.
  
• Support vulnerability remediation, image assurance, policy-as-code and the production-readiness approval process.
  
• Ensure configuration and deployment practices meet our clients security, audit and operational-control requirements.
  

Observability and Operational Readiness

• Integrate Prometheus metrics, dashboards, logging and alerting with approved enterprise tooling.
  
• Implement and test PostgreSQL backup and restore processes.
  
• Produce operational runbooks, troubleshooting procedures and recovery documentation.
  
• Support service transition, operational acceptance, training and knowledge transfer to support teams.
  

Axway Migration and Service Onboarding

• Pre-stage SFTP-Go configuration for migration waves and support testing, cutover, rollback and hypercare activities.
  
• Help translate existing Axway routing and workflow configurations into SFTP-Go Event Manager rules and actions.
  
• Create reusable documentation, templates and golden paths that enable application teams to onboard file-transfer flows consistently.
  
• Work with Integration Engineers and application teams to troubleshoot migration and onboarding issues.
  

Essential Skills and Experience

• Strong hands-on Kubernetes and Red Hat OpenShift experience supporting production workloads, including deployments, services, ingress or routes, RBAC, network policies, persistent storage and storage classes.
  
• Practical experience authoring and maintaining non-trivial Helm charts.
  
• Strong Terraform experience, including reusable modules, peer review and state management for production environments.
  
• Hands-on GitOps experience using Argo CD or an equivalent tool, with Git-centred and pull-request-based workflows.
  
• Experience designing and implementing CI/CD pipelines using tools such as GitLab CI, GitHub Actions or Tekton.
  
• Strong Linux fundamentals and scripting or automation experience.
  
• Experience working with containers, registries, image build processes and deployment promotion.
  
• Working knowledge of secrets management and TLS/PKI fundamentals.
  
• A declarative, automation-first approach, with a strong preference for documented, repeatable and auditable change.
  
• Exposure to SFTP-Go, Axway or another Managed File Transfer platform.
  
• Ability to work effectively across Architecture, Infrastructure, Security, Network, Database, Operations, Integration and application teams.
  

Desirable Skills and Experience

• Working knowledge of SFTP, SSH and enterprise network concepts, including firewalls, NAT, DMZ connectivity and load balancing.
  
• Experience operating PostgreSQL and implementing backup, restore and high-availability arrangements.
  
• Experience with S3-compatible object storage.
  
• Experience with HashiCorp Vault or External Secrets Operator.
  
• Experience implementing policy-as-code using Kyverno or an equivalent technology.
  
• Experience migrating a legacy platform into containers using phased or parallel-run cutovers.
  
• Experience delivering shared platforms in regulated or financial-services environments.
  
• Experience implementing Prometheus-based observability and operational alerting.