Role Summary
We are looking for a hands-on DevOps / Platform Engineer to own the cloud infrastructure, delivery pipelines, and internal IT.
Our platform runs on Google Cloud Platform with containerised workloads on GKE. You will be responsible for the reliability, security, and governance of this environment (access management, deployment controls, disaster recovery, release quality, and endpoint management) working alongside our development teams.
This is a broad, high-trust role at the centre of our engineering operation. You will be the infrastructure owner: the person who defines how we build, deploy, secure, test, and recover. It suits a versatile engineer who enjoys owning the full operational picture rather than one narrow slice of it.
Key Responsibilities
Cloud Platform
- Own and operate our GCP estate, including GKE, databases, networking, and IAM, across live and development environments
- Maintain and improve the reliability, security, and cost-efficiency of a live production environment
- Manage our edge and DNS configuration and security posture
- Introduce infrastructure-as-code and repeatable provisioning where beneficial
Access Governance and Security
- Design and enforce RBAC and least-privilege access models across our cloud and tooling estate
- Maintain an auditable access model appropriate to a regulated financial services environment, including joiner/mover/leaver processes and periodic access reviews
- Keep the environment documented end-to-end
CI/CD, Release Engineering and Quality
- Design, document, and run disaster recovery and backup restoration exercises, with evidenced outcomes
- Establish monitoring, logging, and alerting for clear visibility of platform health and security events
- Support audit, regulatory, and banking partner requests with infrastructure evidence and control documentation
Internal IT and Endpoint Management
- Manage MDM for a small distributed team using Microsoft Intune and Autopilot
- Define device compliance, encryption, and onboarding standards
- Act as the first port of call for internal IT matters, coordinating with external support providers where needed
Our Expectations
- Demonstrable experience owning production cloud infrastructure on Google Cloud Platform, including GKE
- Strong grounding in identity and access management: RBAC design, least-privilege models, and access review processes
- Hands-on experience building and maintaining CI/CD pipelines in a production setting, including automated testing and quality gates
- Practical experience operating containerised microservice workloads
- Experience designing and executing disaster recovery and backup restoration exercises, not just documenting them
- Experience with Microsoft Intune and Autopilot for endpoint management, or clear capability to stand this up
- Infrastructure-as-code experience (Terraform or equivalent)
- Experience operating in a regulated environment (EMI, PSP, banking, or similarly controlled) is strongly advantageous
- Versatile and self-directed: comfortable owning a broad remit spanning infrastructure, delivery, and internal IT, with the discipline to document and share knowledge