- All our services are cloud-hosted on AWS, using serverless and event-driven architectures for scalability and resilience.
- We use a fully automated deployment pipeline, allowing you to release to production within minutes, multiple times per day.
- We define our infrastructure as code, and we emphasise observability, testing and secure-by-design principles from the start.
As a squad we own our work end-to-end, including development, maintenance and support. You will play a key role in ensuring the reliability and quality of what we provide to the rest of engineering, and contribute to a culture of rapid learning and continuous improvement.
Your responsibilities
ü Build and maintain secure platform foundations
o Design, build and maintain the shared cloud infrastructure, tooling and deployment pipelines that other squads rely on.
o Define infrastructure as code so our environments are consistent, repeatable and reviewable.
o Make secure configuration the default, so squads get it without having to ask for it.
o Maintain the edge and network security tooling that protects our services.
o Share in the day-to-day operational ownership of the platform, responding to requests and issues raised by other squads.
Make our security posture measurable
o Automate the gathering of evidence for ISO 27001 and our other compliance obligations, so that an audit means pulling a report rather than running a manual exercise.
o Write the scripts and small services that turn a manual security check into a scheduled, repeatable one.
o Triage findings from our scanning and posture tooling such as Aikido and Ascidian, work out which ones actually matter, and either fix them or get them in front of the team that can.
o Work with our Head of Security to turn written policy into controls that are enforced by tooling.
Strengthen access and identity controls
o Review and tighten access across our cloud accounts, working towards least privilege.
o Improve how we manage secrets, credentials and machine identities.
o Make access changes auditable, and straightforward for engineers to request and for us to review.
Extend our platform standards beyond AWS
o Help us apply the standards, tooling and controls we have built in AWS to our Google Cloud estate.
o Work with the teams who use Google Cloud to understand their needs and where the gaps are.
Team collaboration
o Work closely with other squad members and stakeholders to align on goals and solutions.
o Support engineers across other squads who use our platform, and take their feedback seriously.
o Proactively build shared understanding across the team through pairing, discussions, and reviews.
o Document your work clearly to support knowledge sharing and future maintenance.
Self development
o Take ownership of your learning journey and technical development plan.
o Approach challenges with curiosity and a growth mindset.
o Learn from your peers and actively seek feedback and mentorship.
Your skills and experience