IT Operations Platforms and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third party vendors to deliver a high quality Global IT services. Working in line with the Architecture defined IT principle of a 'buy before build' environment, the individual will need to ensure that outsourced and cloud based services are robust, cost effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets. Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge. Microsoft AD (Entra), Server and SQL experience. O365 administration and design. Global Software Patching and estate management via Intune. Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience. Software Defined Networking (Cisco, Meraki, Versa). Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL based service management, automating operational tasks, and optimising service delivery. IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Problem Solving & Decision Making: Capable of making informed decisions and resolving complex IT issues in a fast paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security first approach. Summary of Skills Required: Global Enterprise level Infrastructure Management position for the last 5 years. Global team management (human resources, strategic delivery, operational service, audit lead for Infra, budget ). Key - 3rd party operational infrastructure vendor management - i.e management of managed service partners. Migration of Legacy VM based estates to SaaS and Cloud services platforms. Legacy tech to Azure knowledge/experience. Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.
26/07/2026
Full time
IT Operations Platforms and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third party vendors to deliver a high quality Global IT services. Working in line with the Architecture defined IT principle of a 'buy before build' environment, the individual will need to ensure that outsourced and cloud based services are robust, cost effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets. Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge. Microsoft AD (Entra), Server and SQL experience. O365 administration and design. Global Software Patching and estate management via Intune. Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience. Software Defined Networking (Cisco, Meraki, Versa). Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL based service management, automating operational tasks, and optimising service delivery. IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Problem Solving & Decision Making: Capable of making informed decisions and resolving complex IT issues in a fast paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security first approach. Summary of Skills Required: Global Enterprise level Infrastructure Management position for the last 5 years. Global team management (human resources, strategic delivery, operational service, audit lead for Infra, budget ). Key - 3rd party operational infrastructure vendor management - i.e management of managed service partners. Migration of Legacy VM based estates to SaaS and Cloud services platforms. Legacy tech to Azure knowledge/experience. Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.
FUJIFILM Holdings America Corporation
Billingham, Yorkshire
Position Overview Protect identities at global scale. We're hiring a hands on Senior Identity Protection Engineer/Specialist to lead detection, investigation, and response for identity based threats across Microsoft Entra ID/Azure AD, on prem Active Directory, and connected SaaS/IaaS. You'll serve as the enterprise SME/administrator for CrowdStrike Identity Protection, tune high fidelity detections, integrate dark web intelligence, and orchestrate automation that measurably reduces MTTD/MTTR and risk. What you'll do Lead identity threat monitoring and triage Operate and tune CrowdStrike Identity Protection; monitor SIEM/UEBA and identity telemetry for risks like impossible travel, atypical sign ins, MFA fatigue, and session hijacking Validate true/false positives, prioritize by business impact, and escalate per playbooks/SLAs Drive rapid containment and remediation Execute containment actions (disable accounts, revoke sessions/tokens, isolate hosts) Coordinate remediation with IAM/Endpoint/Infrastructure; verify risk reduction to closure Own identity focused incident response Lead IR for credential compromise, privilege escalation, directory persistence, and lateral movement Ensure evidence handling, root cause analysis, post incident reviews, and lessons learned Engineer detections and hunt for threats Build and refine detections and hunts across SIEM/EDR/identity platforms using KQL/SQL/regex/Sigma aligned to MITRE ATT&CK Close visibility gaps, reduce false positives, and expand privileged activity monitoring Strengthen privileged access controls Detect anomalous privileged behavior via SIEM/UEBA and Netskope telemetry Recommend/enforce JIT, break glass patterns, and mover/leaver privilege hygiene with IAM Respond to dark web/credential exposure Integrate sources like CyberInt; assess exposure and targeted campaigns Orchestrate takedowns, forced resets, token revocation, and Conditional Access updates Administer platforms and sustain hygiene Maintain coverage/health for identity monitoring; manage upgrades and changes via CAB Keep operational runbooks, SOPs, and playbooks current Automate and orchestrate at scale Use PowerShell/Python and REST/Graph/CrowdStrike APIs (and SOAR where applicable) to automate enrichment and response, standardize workflows, and improve signal fidelity Shape identity policy and controls Advise on Conditional Access, MFA exceptions, SSO/SCIM patterns, and session controls under the shared responsibility model with IAM Report outcomes and support audits Produce executive ready dashboards and KPIs (identity incident volume, MTTD/MTTR, CA/MFA efficacy, exposure/takedown cycle time) Maintain audit ready evidence and support internal/external audits What you'll bring Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; or equivalent practical experience 8+ years in IT/cybersecurity, including 3-5+ years focused on identity security/operations (Entra ID/Azure AD, on prem AD, MFA, Conditional Access, SSO/SCIM) Hands on enterprise experience administering/operating CrowdStrike Identity Protection Proficiency with SIEM/UEBA (Splunk preferred) and cloud security platforms (e.g., Netskope) for identity telemetry, detection, and investigations Demonstrated experience in identity centric IR, threat hunting, and detection engineering (KQL/SQL/regex/Sigma) Scripting/automation with PowerShell and Python; experience with REST/Graph/CrowdStrike APIs and SOAR Clear communication and documentation skills; comfortable producing executive ready reports and audit evidence Operates effectively within change control/CAB and under pressure during high severity incidents Bonus points Certifications: Microsoft SC 200/SC 300; Okta Certified Administrator/Professional; CISSP, SSCP, Security+; GIAC (GMON, GCIH, GCDA) or equivalent Deep knowledge of identity attack paths and protocols (Kerberos/NTLM), token/session abuse, and persistence techniques (e.g., Golden/Silver Ticket, DCShadow) Experience with JIT/JEA, PAM concepts, and global on call rotations Location, work style, and travel Opportunities in the United States, United Kingdom, and Denmark Onsite or hybrid depending on location and business needs Occasional on call coverage may be required Why you'll love it here Own a mission critical identity defense stack and make measurable impact on MTTD/MTTR and privilege hygiene Solve complex problems from dark web exposure to directory persistence and lateral movement Collaborate with experienced global teams and leading vendors to continuously raise the bar Grow your career in a modern, data driven security operations environment Our programs are designed to focus on maintaining and enhancing all pillars of health with a robust benefitspackage including medical, dental, vision and prescription drug coverage with the option of a Health Savings Account with company contributions. In addition, we offer an industry leading 401(k) savings plan, insurance coverage, employee assistance programs and various wellness incentives. We support life work balance with paid vacation time, sick time, and company holidays. Explore a supportive environment that enriches both your personal and professional growth! EEO Information Fujifilm is committed to providing equal opportunities in hiring, promotion and advancement, compensation, benefits, and training regardless of nationality, age, gender, sexual orientation or gender identity, race, ethnicity, religion, political creed, ideology, national, or social origin, disability, veteran status, etc. ADA Information If you require reasonable accommodation in completing this application, interviewing, completing any pre employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our HR Department ().
26/07/2026
Full time
Position Overview Protect identities at global scale. We're hiring a hands on Senior Identity Protection Engineer/Specialist to lead detection, investigation, and response for identity based threats across Microsoft Entra ID/Azure AD, on prem Active Directory, and connected SaaS/IaaS. You'll serve as the enterprise SME/administrator for CrowdStrike Identity Protection, tune high fidelity detections, integrate dark web intelligence, and orchestrate automation that measurably reduces MTTD/MTTR and risk. What you'll do Lead identity threat monitoring and triage Operate and tune CrowdStrike Identity Protection; monitor SIEM/UEBA and identity telemetry for risks like impossible travel, atypical sign ins, MFA fatigue, and session hijacking Validate true/false positives, prioritize by business impact, and escalate per playbooks/SLAs Drive rapid containment and remediation Execute containment actions (disable accounts, revoke sessions/tokens, isolate hosts) Coordinate remediation with IAM/Endpoint/Infrastructure; verify risk reduction to closure Own identity focused incident response Lead IR for credential compromise, privilege escalation, directory persistence, and lateral movement Ensure evidence handling, root cause analysis, post incident reviews, and lessons learned Engineer detections and hunt for threats Build and refine detections and hunts across SIEM/EDR/identity platforms using KQL/SQL/regex/Sigma aligned to MITRE ATT&CK Close visibility gaps, reduce false positives, and expand privileged activity monitoring Strengthen privileged access controls Detect anomalous privileged behavior via SIEM/UEBA and Netskope telemetry Recommend/enforce JIT, break glass patterns, and mover/leaver privilege hygiene with IAM Respond to dark web/credential exposure Integrate sources like CyberInt; assess exposure and targeted campaigns Orchestrate takedowns, forced resets, token revocation, and Conditional Access updates Administer platforms and sustain hygiene Maintain coverage/health for identity monitoring; manage upgrades and changes via CAB Keep operational runbooks, SOPs, and playbooks current Automate and orchestrate at scale Use PowerShell/Python and REST/Graph/CrowdStrike APIs (and SOAR where applicable) to automate enrichment and response, standardize workflows, and improve signal fidelity Shape identity policy and controls Advise on Conditional Access, MFA exceptions, SSO/SCIM patterns, and session controls under the shared responsibility model with IAM Report outcomes and support audits Produce executive ready dashboards and KPIs (identity incident volume, MTTD/MTTR, CA/MFA efficacy, exposure/takedown cycle time) Maintain audit ready evidence and support internal/external audits What you'll bring Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; or equivalent practical experience 8+ years in IT/cybersecurity, including 3-5+ years focused on identity security/operations (Entra ID/Azure AD, on prem AD, MFA, Conditional Access, SSO/SCIM) Hands on enterprise experience administering/operating CrowdStrike Identity Protection Proficiency with SIEM/UEBA (Splunk preferred) and cloud security platforms (e.g., Netskope) for identity telemetry, detection, and investigations Demonstrated experience in identity centric IR, threat hunting, and detection engineering (KQL/SQL/regex/Sigma) Scripting/automation with PowerShell and Python; experience with REST/Graph/CrowdStrike APIs and SOAR Clear communication and documentation skills; comfortable producing executive ready reports and audit evidence Operates effectively within change control/CAB and under pressure during high severity incidents Bonus points Certifications: Microsoft SC 200/SC 300; Okta Certified Administrator/Professional; CISSP, SSCP, Security+; GIAC (GMON, GCIH, GCDA) or equivalent Deep knowledge of identity attack paths and protocols (Kerberos/NTLM), token/session abuse, and persistence techniques (e.g., Golden/Silver Ticket, DCShadow) Experience with JIT/JEA, PAM concepts, and global on call rotations Location, work style, and travel Opportunities in the United States, United Kingdom, and Denmark Onsite or hybrid depending on location and business needs Occasional on call coverage may be required Why you'll love it here Own a mission critical identity defense stack and make measurable impact on MTTD/MTTR and privilege hygiene Solve complex problems from dark web exposure to directory persistence and lateral movement Collaborate with experienced global teams and leading vendors to continuously raise the bar Grow your career in a modern, data driven security operations environment Our programs are designed to focus on maintaining and enhancing all pillars of health with a robust benefitspackage including medical, dental, vision and prescription drug coverage with the option of a Health Savings Account with company contributions. In addition, we offer an industry leading 401(k) savings plan, insurance coverage, employee assistance programs and various wellness incentives. We support life work balance with paid vacation time, sick time, and company holidays. Explore a supportive environment that enriches both your personal and professional growth! EEO Information Fujifilm is committed to providing equal opportunities in hiring, promotion and advancement, compensation, benefits, and training regardless of nationality, age, gender, sexual orientation or gender identity, race, ethnicity, religion, political creed, ideology, national, or social origin, disability, veteran status, etc. ADA Information If you require reasonable accommodation in completing this application, interviewing, completing any pre employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our HR Department ().
Novatus is a Series B scale-up RegTech SaaS provider and boutique advisory practice, enabling financial services firms to solve complex challenges and redefine what's possible through expert-led technology and consulting. Across both our technology and consulting services, Novatus delivers practical solutions to some of the most complex regulatory, data and operational challenges in financial services. Our SaaS platform, En>ACT ( short for Ensuring Accurate, Complete and Timely reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation, providing real-time, independent oversight of transaction reporting across all global regulatory regimes. En>ACT is the only real-time assurance solution that tests 100% of transactions and 100% of fields, replacing sample-based reviews and static PDF reports delivered months after the event with live, actionable insights. This helps firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 45 firms worldwide, the platform is scalable, proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services to solve complex challenges, combining deep expertise, ownership and delivery to create lasting change. Our expertise spans Strategy & Operations, Data & AI, Risk & Resilience, Compliance, Transaction Reporting, and ESG. We embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in 2019, we have scaled rapidly, creating space for our people to grow the business. Backed by North American private equity investment, and partnerships with the London Stock Exchange Group and Snowflake's global data platform, we are shaping the future of financial services through innovation in both consulting and technology. Now a team of 120 globally, our growth plans do not stop here: we are looking for top-tier talent to join us on our journey and enable our next phase of success. Senior DevOps Engineer Novatus HQ - 2 London Wall Place, EC2Y 5AU Job Overview: As a Senior DevOps Engineer , you will scope and deliver complex infrastructure projects end-to-end, building and maintaining scalable, secure, and performant systems. You'll contribute to our technology direction and drive initiatives that align with our business objectives, with an emphasis on automation, delivery pace, reliability, and cost efficiency. This role requires a strong technical background and a proven track record of building and scaling systems in complex environments. You'll be joining as we have begun actively modernizing our infrastructure from traditional deployments to automation and cloud-native systems with AWS, Terraform, GitHub Actions, Databricks, Snowflake and Grafana. Key Responsibilities: Design and implement AWS cloud infrastructure, writing clean and maintainable Infrastructure as Code for repeatable, auditable deployments across environments. Drive reliability, scalability, security, observability and cost efficiency of AWS infrastructure. Provide mentorship to other DevOps engineers, sharing expertise and raising engineering quality across the team. Develop and maintain robust and effective CI/CD pipelines. Troubleshoot and resolve complex infrastructure issues, ensuring minimal impact on business operations. Explore and evaluate new technologies, tools, and patterns that improve platform reliability and delivery pace. Partner with Data Engineering to support platform infrastructure (AWS, Databricks, Snowflake). About You: Requirements: Strong hands-on AWS infrastructure experience, including IAM, VPCs, compute, containers, load balancing, storage, security, resilience, and cost optimization. Hands-on experience deploying and operating applications on Kubernetes in production, including Helm/manifests, ingress, configuration/secrets, observability, and troubleshooting live workloads. Proficient with Infrastructure as Code, especially Terraform, with experience building maintainable, reusable modules and environment patterns. Solid production networking knowledge: TCP/IP, DNS, TLS, BGP, routing, subnets, NAT, firewalls/security groups, VPN/private connectivity, load balancers, and practical troubleshooting. Experience operating cloud infrastructure in regulated environments (e.g. GDPR, ISO 27001, SOC 2). Experience designing observability, monitoring, logging, and alerting solutions for distributed systems. Strong software engineering ability beyond basic scripting. Ideally someone who has contributed to larger software projects or built maintainable platform/backend tooling in a language such as Python, Go, Java, TypeScript, or similar. Comfortable using modern AI-assisted engineering workflows, including agentic coding tools and LLM-based automation. Familiarity with concepts such as MCP servers, tool-calling, RAG/vector search, embeddings, and AI-assisted platform operations. Working knowledge of databases and data platforms, including SQL databases such as PostgreSQL/MySQL and exposure to NoSQL or distributed data stores. Track record of independently scoping and delivering complex infrastructure projects end-to-end. Experience mentoring engineers and sharing technical expertise across a team. Excellent communication and stakeholder management skills. Nice-to-haves: Relevant certifications (e.g., AWS Certified Solutions Architect, AWS Certified Security, or AWS Certified DevOps Engineer). Databricks and/or Snowflake infrastructure experience. Kafka operations or other event streaming platforms. Experience on infrastructure modernization or migration programs. FinTech, RegTech, or financial services background. Why Join Us? Work Across Disciplines: You won't be confined to a single track- you will develop a broader skillset across our capabilities and offerings. Solve Problems that Matter: Work on complex challenges, where your thinking, analysis, and execution have real impact. Flat, Visible, Collaborative: We keep the structure flat, so you can collaborate directly with senior leaders and experienced specialists. Your work is visible, your perspectives are valued, and you will see the impact of your contributions every day. A Place for Builders: This is a great place for people who enjoy driving results and taking ownership. If you are driven to add value and help grow our business, you will enjoy a rewarding experience that recognises your contributions. Perks & Benefits: Private Medical Insurance (via AXA): includes mental health, dental, vision, and private GP access Life Insurance - 4 salary (via Unum) Unum's : includes GP access, medical second opinions, physiotherapy, lifestyle coaching, savings and discounts, mental health support, bereavement counselling, and cancer support services for you, your partner, and your child(ren) Salary sacrifice childcare and nursery scheme (via YellowNest) Employee Assistance Programme Enhanced parental leave (maternity & paternity) Professional qualification sponsorship Accelerated career progression based on readiness and performance, not tenure or time spent in role Holiday entitlement increases with tenure Flexible hours with core collaboration time Paid volunteering leave Gym & fitness discounts Bi-annual socials Office snacks and drinks Interest-based working groups to collaborate and innovate Novatus' Equal Opportunities Statement: Novatus is an Equal Opportunity Employer. All employment decisions are made based on business needs, role requirements, and individual qualifications, without regard to race, age, religion or belief, sex, sexual orientation, gender identity or expression, marital or civil partnership status, pregnancy or maternity, socioeconomic background, disability, or any other characteristic protected under the Equality Act 2010. We maintain a workplace culture that is inclusive, respectful, and supportive. Our recruitment and selection processes are designed to ensure fairness and consistency for all candidates. Reasonable adjustments are available throughout the application and interview process, and candidates are encouraged to contact Human Resources to discuss any specific requirements. This commitment is embedded in all aspects of our employment practices, including recruitment, compensation, professional development, promotion, and workplace conduct.
25/07/2026
Full time
Novatus is a Series B scale-up RegTech SaaS provider and boutique advisory practice, enabling financial services firms to solve complex challenges and redefine what's possible through expert-led technology and consulting. Across both our technology and consulting services, Novatus delivers practical solutions to some of the most complex regulatory, data and operational challenges in financial services. Our SaaS platform, En>ACT ( short for Ensuring Accurate, Complete and Timely reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation, providing real-time, independent oversight of transaction reporting across all global regulatory regimes. En>ACT is the only real-time assurance solution that tests 100% of transactions and 100% of fields, replacing sample-based reviews and static PDF reports delivered months after the event with live, actionable insights. This helps firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 45 firms worldwide, the platform is scalable, proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services to solve complex challenges, combining deep expertise, ownership and delivery to create lasting change. Our expertise spans Strategy & Operations, Data & AI, Risk & Resilience, Compliance, Transaction Reporting, and ESG. We embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in 2019, we have scaled rapidly, creating space for our people to grow the business. Backed by North American private equity investment, and partnerships with the London Stock Exchange Group and Snowflake's global data platform, we are shaping the future of financial services through innovation in both consulting and technology. Now a team of 120 globally, our growth plans do not stop here: we are looking for top-tier talent to join us on our journey and enable our next phase of success. Senior DevOps Engineer Novatus HQ - 2 London Wall Place, EC2Y 5AU Job Overview: As a Senior DevOps Engineer , you will scope and deliver complex infrastructure projects end-to-end, building and maintaining scalable, secure, and performant systems. You'll contribute to our technology direction and drive initiatives that align with our business objectives, with an emphasis on automation, delivery pace, reliability, and cost efficiency. This role requires a strong technical background and a proven track record of building and scaling systems in complex environments. You'll be joining as we have begun actively modernizing our infrastructure from traditional deployments to automation and cloud-native systems with AWS, Terraform, GitHub Actions, Databricks, Snowflake and Grafana. Key Responsibilities: Design and implement AWS cloud infrastructure, writing clean and maintainable Infrastructure as Code for repeatable, auditable deployments across environments. Drive reliability, scalability, security, observability and cost efficiency of AWS infrastructure. Provide mentorship to other DevOps engineers, sharing expertise and raising engineering quality across the team. Develop and maintain robust and effective CI/CD pipelines. Troubleshoot and resolve complex infrastructure issues, ensuring minimal impact on business operations. Explore and evaluate new technologies, tools, and patterns that improve platform reliability and delivery pace. Partner with Data Engineering to support platform infrastructure (AWS, Databricks, Snowflake). About You: Requirements: Strong hands-on AWS infrastructure experience, including IAM, VPCs, compute, containers, load balancing, storage, security, resilience, and cost optimization. Hands-on experience deploying and operating applications on Kubernetes in production, including Helm/manifests, ingress, configuration/secrets, observability, and troubleshooting live workloads. Proficient with Infrastructure as Code, especially Terraform, with experience building maintainable, reusable modules and environment patterns. Solid production networking knowledge: TCP/IP, DNS, TLS, BGP, routing, subnets, NAT, firewalls/security groups, VPN/private connectivity, load balancers, and practical troubleshooting. Experience operating cloud infrastructure in regulated environments (e.g. GDPR, ISO 27001, SOC 2). Experience designing observability, monitoring, logging, and alerting solutions for distributed systems. Strong software engineering ability beyond basic scripting. Ideally someone who has contributed to larger software projects or built maintainable platform/backend tooling in a language such as Python, Go, Java, TypeScript, or similar. Comfortable using modern AI-assisted engineering workflows, including agentic coding tools and LLM-based automation. Familiarity with concepts such as MCP servers, tool-calling, RAG/vector search, embeddings, and AI-assisted platform operations. Working knowledge of databases and data platforms, including SQL databases such as PostgreSQL/MySQL and exposure to NoSQL or distributed data stores. Track record of independently scoping and delivering complex infrastructure projects end-to-end. Experience mentoring engineers and sharing technical expertise across a team. Excellent communication and stakeholder management skills. Nice-to-haves: Relevant certifications (e.g., AWS Certified Solutions Architect, AWS Certified Security, or AWS Certified DevOps Engineer). Databricks and/or Snowflake infrastructure experience. Kafka operations or other event streaming platforms. Experience on infrastructure modernization or migration programs. FinTech, RegTech, or financial services background. Why Join Us? Work Across Disciplines: You won't be confined to a single track- you will develop a broader skillset across our capabilities and offerings. Solve Problems that Matter: Work on complex challenges, where your thinking, analysis, and execution have real impact. Flat, Visible, Collaborative: We keep the structure flat, so you can collaborate directly with senior leaders and experienced specialists. Your work is visible, your perspectives are valued, and you will see the impact of your contributions every day. A Place for Builders: This is a great place for people who enjoy driving results and taking ownership. If you are driven to add value and help grow our business, you will enjoy a rewarding experience that recognises your contributions. Perks & Benefits: Private Medical Insurance (via AXA): includes mental health, dental, vision, and private GP access Life Insurance - 4 salary (via Unum) Unum's : includes GP access, medical second opinions, physiotherapy, lifestyle coaching, savings and discounts, mental health support, bereavement counselling, and cancer support services for you, your partner, and your child(ren) Salary sacrifice childcare and nursery scheme (via YellowNest) Employee Assistance Programme Enhanced parental leave (maternity & paternity) Professional qualification sponsorship Accelerated career progression based on readiness and performance, not tenure or time spent in role Holiday entitlement increases with tenure Flexible hours with core collaboration time Paid volunteering leave Gym & fitness discounts Bi-annual socials Office snacks and drinks Interest-based working groups to collaborate and innovate Novatus' Equal Opportunities Statement: Novatus is an Equal Opportunity Employer. All employment decisions are made based on business needs, role requirements, and individual qualifications, without regard to race, age, religion or belief, sex, sexual orientation, gender identity or expression, marital or civil partnership status, pregnancy or maternity, socioeconomic background, disability, or any other characteristic protected under the Equality Act 2010. We maintain a workplace culture that is inclusive, respectful, and supportive. Our recruitment and selection processes are designed to ensure fairness and consistency for all candidates. Reasonable adjustments are available throughout the application and interview process, and candidates are encouraged to contact Human Resources to discuss any specific requirements. This commitment is embedded in all aspects of our employment practices, including recruitment, compensation, professional development, promotion, and workplace conduct.
PAM Process Automation Business Analyst - Banking Client - London Duration: 12 months Rate: £600 - £650 per day Inside or IR35 - must use an umbrella. Must have CyberArk expertise. Overview We are seeking a Senior Business Analyst to support a strategic Privileged Access Management (PAM) automation initiative, with CyberArk as the core PAM platform. The role will focus on analysing, designing and operationalising automated PAM lifecycle processes, including privileged account onboarding, offboarding, modifications, safe management, permissions management and associated operational controls. Working closely with the Project Lead, PAM Engineers, CyberArk Administrators, Infrastructure, DevOps and Operations teams, you will capture and define requirements, document business processes, develop operating procedures and ensure successful transition into business-as-usual operations. Key Responsibilities Gather, analyse and document business, functional and non-functional requirements. Define and document end-to-end PAM lifecycle processes and automation requirements. Create process maps, use cases, SOPs and operational procedures. Analyse current PAM operations, workloads, pain points and automation opportunities. Define acceptance criteria and support testing, validation and business sign off. Support business case development, including benefits, KPIs and success measures. Facilitate workshops with business, security, infrastructure and operational stakeholders. Support operational readiness, service transition and adoption activities. Ensure traceability of requirements throughout the project lifecycle. Produce clear stakeholder reporting, presentations and governance artefacts. Required Experience 5+ years' experience as a Business Analyst within IT, Cyber Security, Infrastructure or IAM programmes. Strong understanding of Identity & Access Management (IAM) and Privileged Access Management (PAM). Experience working with CyberArk or similar PAM platforms. Proven ability to document business processes, requirements, use cases and operating procedures. Experience supporting process automation and operational transformation initiatives. Strong stakeholder management and workshop facilitation skills. Experience defining acceptance criteria and supporting UAT activities. Excellent analytical, communication and documentation skills. Experience working within Agile and/or traditional delivery environments. Professional level English. Desirable Experience Experience working on CyberArk implementations or PAM transformation programmes. Understanding of PAM automation, workflow integration and DevOps environments. Exposure to Infrastructure as Code, APIs, CI/CD pipelines or automation tooling. Experience within highly regulated environments such as Financial Services. Knowledge of IAM governance, compliance and audit requirements. Business Analysis certifications (CBAP, CCBA, ECBA or equivalent). Personal Attributes Structured and detail oriented. Strong analytical and problem solving skills. Excellent stakeholder engagement and communication abilities. Process improvement mindset. Able to work autonomously and collaboratively. Outcome focused with a strong appreciation for security, controls and operational resilience. A strong team player and relationship builder.
25/07/2026
Full time
PAM Process Automation Business Analyst - Banking Client - London Duration: 12 months Rate: £600 - £650 per day Inside or IR35 - must use an umbrella. Must have CyberArk expertise. Overview We are seeking a Senior Business Analyst to support a strategic Privileged Access Management (PAM) automation initiative, with CyberArk as the core PAM platform. The role will focus on analysing, designing and operationalising automated PAM lifecycle processes, including privileged account onboarding, offboarding, modifications, safe management, permissions management and associated operational controls. Working closely with the Project Lead, PAM Engineers, CyberArk Administrators, Infrastructure, DevOps and Operations teams, you will capture and define requirements, document business processes, develop operating procedures and ensure successful transition into business-as-usual operations. Key Responsibilities Gather, analyse and document business, functional and non-functional requirements. Define and document end-to-end PAM lifecycle processes and automation requirements. Create process maps, use cases, SOPs and operational procedures. Analyse current PAM operations, workloads, pain points and automation opportunities. Define acceptance criteria and support testing, validation and business sign off. Support business case development, including benefits, KPIs and success measures. Facilitate workshops with business, security, infrastructure and operational stakeholders. Support operational readiness, service transition and adoption activities. Ensure traceability of requirements throughout the project lifecycle. Produce clear stakeholder reporting, presentations and governance artefacts. Required Experience 5+ years' experience as a Business Analyst within IT, Cyber Security, Infrastructure or IAM programmes. Strong understanding of Identity & Access Management (IAM) and Privileged Access Management (PAM). Experience working with CyberArk or similar PAM platforms. Proven ability to document business processes, requirements, use cases and operating procedures. Experience supporting process automation and operational transformation initiatives. Strong stakeholder management and workshop facilitation skills. Experience defining acceptance criteria and supporting UAT activities. Excellent analytical, communication and documentation skills. Experience working within Agile and/or traditional delivery environments. Professional level English. Desirable Experience Experience working on CyberArk implementations or PAM transformation programmes. Understanding of PAM automation, workflow integration and DevOps environments. Exposure to Infrastructure as Code, APIs, CI/CD pipelines or automation tooling. Experience within highly regulated environments such as Financial Services. Knowledge of IAM governance, compliance and audit requirements. Business Analysis certifications (CBAP, CCBA, ECBA or equivalent). Personal Attributes Structured and detail oriented. Strong analytical and problem solving skills. Excellent stakeholder engagement and communication abilities. Process improvement mindset. Able to work autonomously and collaboratively. Outcome focused with a strong appreciation for security, controls and operational resilience. A strong team player and relationship builder.
At Bionic, we're on a mission to make it radically easier to run a small business. As the UK's leading business comparison and switching service, we help thousands of small and medium size businesses save time and money on essentials like energy, broadband, insurance, and finance. We combine smart technology with real human support to match our customers with the best deals - quickly and effortlessly. With trusted partnerships including Compare the Market, Uswitch for Business, MoneySuperMarket and we're committed to help SMEs get the best deals for their business essentials every time. Role As a Senior Data Engineer you'll be responsible for designing, building, and scaling robust, high quality data platforms that underpin critical business reporting and operational decision making. You will drive the development of data pipelines, models, and architecture across our modern data stack (AWS, Snowflake, dbt) ensuring performance, reliability, and scalability. Working closely with Architecture, Data Analytics, and Salesforce teams, you will drive the evolution of our data platform, guide best practices, and play a key role in modernising legacy processes. You will act as a technical leader within the team, shaping design decisions, mentoring engineers, and ensuring delivery of resilient, well governed data products. This role requires strong technical expertise, strategic thinking, and the ability to translate complex business needs into scalable, production grade data solutions. Key Responsibilities Design, build and optimise scalable data pipelines and data products across AWS, Snowflake and dbt, setting engineering standards and best practices. Lead the development of robust, testable dbt models and frameworks to ensure high data quality, consistency, and maintainability. Own data pipeline reliability, proactively monitoring, troubleshooting, and resolving complex data and performance issues with minimal disruption. Architect and evolve analytics ready data models (e.g., star schemas, data marts), balancing performance, flexibility, and usability. Collaborate with senior stakeholders (Analytics, Salesforce, Architecture) to define requirements and translate them into scalable technical solutions. Drive continuous improvement of data engineering practices, including CI/CD, observability, testing frameworks, and documentation standards. Provide technical leadership through mentoring, code reviews, and guidance to junior team members, fostering engineering excellence. Ensure compliance with security, governance, and data privacy requirements, embedding best practices in all solutions. Contribute to strategic data platform decisions, including tooling, architecture, and long term roadmap planning. Essential Skills and Experience Required Proven experience designing, building and maintaining scalable data pipelines and cloud based data platforms in production environments. Advanced SQL expertise, including query optimisation, performance tuning and complex data transformations. Strong Python skills for data engineering, automation and system integrations. Hands on experience with Snowflake (or similar cloud data warehouse), including data modelling, optimisation and security/access controls. Strong experience with dbt, including modelling, testing and deployment best practices. Solid knowledge of AWS data services and cloud native architectures (e.g. S3, Lambda, IAM, CloudWatch). Experience with modern software engineering practices, including Git, CI/CD and automated testing. Strong understanding of data modelling and data warehousing principles. Ability to solve complex problems, identify root causes and deliver scalable, reliable solutions. Experience leading technical delivery, influencing architectural decisions and collaborating across multiple stakeholders. Comfortable working in ambiguity, translating complex business requirements into structured technical solutions. Strong communication skills, with the ability to engage both technical and non technical audiences. Nice to have Experience with real time or streaming data architectures. Exposure to Salesforce data models and API integrations. Experience using AWS CDK for infrastructure deployment. Familiarity with orchestration tools such as Airflow. Experience implementing data observability, monitoring and alerting solutions. Knowledge of BI platforms such as Tableau and how data products are consumed by end users. Exposure to MLOps practices, including supporting machine learning pipelines, model deployment and monitoring. Awareness of emerging trends, technologies and best practices within modern data engineering. Why Join Bionic At Bionic, better never stops. You'll join a team obsessed with improvement, innovation and impact - where your expertise will directly shape how thousands of British businesses grow and thrive. Benefits We know that our employees are what sets us aside from our competitors; our benefits are just part of the way we say thanks. Health & Wellbeing Private healthcare cover Employee Assistance Programme, including a virtual GP service, priority physio & talking therapies Eyecare scheme Time Off 25 days annual leave plus the 8 UK bank holidays, increasing with tenure 1 paid family/religious day of leave per year - following successful probation period 1 paid charity volunteering day per year Option to buy/sell up to an additional 3 days leave per year Family Matters Enhanced maternity, paternity or shared parental leave 2 days off for your wedding upon joining, and up to 5 days after 2 years service Flexible working options & a hybrid work approach Financial Wellbeing Auto enrolled salary sacrifice pension scheme Life assurance Season ticket loans, salary advances & loans to buy or rent a home - based on tenure Cycle to work scheme Recognition Highflyers incentive, a VIP experience for our high performers across Bionic group to celebrate success Company summer & Christmas party celebrations, business and local zone & annual awards and recognition Long service awards
25/07/2026
Full time
At Bionic, we're on a mission to make it radically easier to run a small business. As the UK's leading business comparison and switching service, we help thousands of small and medium size businesses save time and money on essentials like energy, broadband, insurance, and finance. We combine smart technology with real human support to match our customers with the best deals - quickly and effortlessly. With trusted partnerships including Compare the Market, Uswitch for Business, MoneySuperMarket and we're committed to help SMEs get the best deals for their business essentials every time. Role As a Senior Data Engineer you'll be responsible for designing, building, and scaling robust, high quality data platforms that underpin critical business reporting and operational decision making. You will drive the development of data pipelines, models, and architecture across our modern data stack (AWS, Snowflake, dbt) ensuring performance, reliability, and scalability. Working closely with Architecture, Data Analytics, and Salesforce teams, you will drive the evolution of our data platform, guide best practices, and play a key role in modernising legacy processes. You will act as a technical leader within the team, shaping design decisions, mentoring engineers, and ensuring delivery of resilient, well governed data products. This role requires strong technical expertise, strategic thinking, and the ability to translate complex business needs into scalable, production grade data solutions. Key Responsibilities Design, build and optimise scalable data pipelines and data products across AWS, Snowflake and dbt, setting engineering standards and best practices. Lead the development of robust, testable dbt models and frameworks to ensure high data quality, consistency, and maintainability. Own data pipeline reliability, proactively monitoring, troubleshooting, and resolving complex data and performance issues with minimal disruption. Architect and evolve analytics ready data models (e.g., star schemas, data marts), balancing performance, flexibility, and usability. Collaborate with senior stakeholders (Analytics, Salesforce, Architecture) to define requirements and translate them into scalable technical solutions. Drive continuous improvement of data engineering practices, including CI/CD, observability, testing frameworks, and documentation standards. Provide technical leadership through mentoring, code reviews, and guidance to junior team members, fostering engineering excellence. Ensure compliance with security, governance, and data privacy requirements, embedding best practices in all solutions. Contribute to strategic data platform decisions, including tooling, architecture, and long term roadmap planning. Essential Skills and Experience Required Proven experience designing, building and maintaining scalable data pipelines and cloud based data platforms in production environments. Advanced SQL expertise, including query optimisation, performance tuning and complex data transformations. Strong Python skills for data engineering, automation and system integrations. Hands on experience with Snowflake (or similar cloud data warehouse), including data modelling, optimisation and security/access controls. Strong experience with dbt, including modelling, testing and deployment best practices. Solid knowledge of AWS data services and cloud native architectures (e.g. S3, Lambda, IAM, CloudWatch). Experience with modern software engineering practices, including Git, CI/CD and automated testing. Strong understanding of data modelling and data warehousing principles. Ability to solve complex problems, identify root causes and deliver scalable, reliable solutions. Experience leading technical delivery, influencing architectural decisions and collaborating across multiple stakeholders. Comfortable working in ambiguity, translating complex business requirements into structured technical solutions. Strong communication skills, with the ability to engage both technical and non technical audiences. Nice to have Experience with real time or streaming data architectures. Exposure to Salesforce data models and API integrations. Experience using AWS CDK for infrastructure deployment. Familiarity with orchestration tools such as Airflow. Experience implementing data observability, monitoring and alerting solutions. Knowledge of BI platforms such as Tableau and how data products are consumed by end users. Exposure to MLOps practices, including supporting machine learning pipelines, model deployment and monitoring. Awareness of emerging trends, technologies and best practices within modern data engineering. Why Join Bionic At Bionic, better never stops. You'll join a team obsessed with improvement, innovation and impact - where your expertise will directly shape how thousands of British businesses grow and thrive. Benefits We know that our employees are what sets us aside from our competitors; our benefits are just part of the way we say thanks. Health & Wellbeing Private healthcare cover Employee Assistance Programme, including a virtual GP service, priority physio & talking therapies Eyecare scheme Time Off 25 days annual leave plus the 8 UK bank holidays, increasing with tenure 1 paid family/religious day of leave per year - following successful probation period 1 paid charity volunteering day per year Option to buy/sell up to an additional 3 days leave per year Family Matters Enhanced maternity, paternity or shared parental leave 2 days off for your wedding upon joining, and up to 5 days after 2 years service Flexible working options & a hybrid work approach Financial Wellbeing Auto enrolled salary sacrifice pension scheme Life assurance Season ticket loans, salary advances & loans to buy or rent a home - based on tenure Cycle to work scheme Recognition Highflyers incentive, a VIP experience for our high performers across Bionic group to celebrate success Company summer & Christmas party celebrations, business and local zone & annual awards and recognition Long service awards
Applicants are advised to apply early as we reserve the right to close a vacancy prior to the closing date if a high number of applications have been received. If you are successful and short listed for interview you will be contacted by email using the address with which you registered. Therefore, please ensure you check your email account regularly All applicants are invited to apply in Welsh, any application submitted in Welsh will not be treated less favourably than an application made in English Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form. The salary scale for a Band 3 has been adjusted as part of the NHS Agenda for Change pay award for 2026/2027 and will be implemented in August 2026 backdated to 01 April 2026 where applicable. Job overview Working within the ICT Infrastructure team, the postholder will be expected to provide an expert and effective ICT support service, predominantly in development, implementation and ongoing maintenance across a range of ICT systems across Wales, including the provision of ICT support and advice to managers and users. Writing documentation for others to follow when necessary. The post holder will be required to work without supervision to a high standard, prioritise work and manage time effectively, deciding when it is necessary to refer to their team leader or a manager. Supporting, maintaining and installing ICT Infrastructure across the Trust in accordance with Organisational policies and procedure. Ensuring scheduled work is completed within timescales to agreed quality standards and in line with departmental procedures. The Post holder will work daily with minimum supervision, managing their own workload and any problems autonomously, ensuring that deadlines and targets are met and that new central and local legislative requirements are worked into the existing local implementation. Main duties of the job The main duties and responsibilities of the post holder are as follows: Providing second line ICT support for users of all ICT systems in The Welsh Ambulance Service Trust, escalating problems in a timely and efficient manner over the telephone, face to face and via electronic communication using own initiative. Supporting the senior infrastructure engineering team colleagues with infrastructure project work, assisting in the implementation and testing of the new systems. Providing additional support to the senior infrastructure engineering team in the ongoing maintenance and monitoring of the key infrastructuresystems once implemented in the Trust. Prioritise and respond to calls assigned in the ICT helpdesk software, ensuring the integrity of the call and solution information is kept up to date. Liaise with both internal and external agencies for the installation/configuration of new and current systems. Advises on and configures servers and other infrastructure equipment to ensure that it is configured to meet system/trust requirements. Including the development and use of centralized administration and distribution. The ability to speak Welsh is desirable for this post; English and/or Welsh speakers are equally welcome to apply. Welsh Language level 1 skills are desirable for this role. Working for our organisation Our workforce is made up of over 4,000 remarkable people who contribute to the delivery of world-class patient care across Wales, 24 hours a day, 365 days a year. Whether you work in a patient-facing role or within our range of support services, the work that you do enables us to provide high quality care, wherever and whenever we're needed. The Trust recognises the need for its workforce to represent the diversity of the population it serves across the whole of Wales and seeks to create an environment where diversity is celebrated and inclusivity matters. We are also keen to break down any barriers into the Trust, and would encourage applications from under-represented groups, including those from Black, Asian and Minority Ethnic communities, LGBTQ+ communities and disability groups. Careers within the Welsh Ambulance Services University NHS Trust are diverse and varied, with opportunities arising right across the service. Whatever your skills and background, you're sure to find a career with us which is fulfilling, challenging, and rewarding. In line with the Trust's Starting Salary Procedure, all applicants will start at the bottom of the band for the position applied for, but can apply for a higher salary if they have previous experience relevant to the position. Detailed job description and main responsibilities Operational management of a wide range of infrastructure systems, including system design, configuration and technical support. To assist the ICT Senior Management Team in developing systems or implementing changes to current architecture by specifying, configuring and installing new software or hardware components. Pro-actively design, develop and maintain a range of reports and respond to ad-hoc information requests for information from and for the many Infrastructure systems. Maintaining ICT systems within the Trust to ensure that systems meet the business and clinical needs of the users and organisation, e.g. maintains virus protection software. Maintains agreed back-up procedures. The post holder will be responsible for maintaining ICT equipment and systems used across the trust, including but not limited to ICT accounts, desktop computer equipment, cabling, and servers. The post holder will ensure all procedures for maintenance/change control of systems have been documented. To work in the UK, all candidates who are not UK or Republic of Ireland (RoI) nationals require sponsorship to obtain either a Health and Care visa or Skilled Worker visa , unless you have permission to work via another route. Non UK / RoI candidates wishing to apply should self-assess the likelihood of obtaining a Certificate of Sponsorship by visiting Work in the UK. If you are eligible for the Health and Care visa, application costs are lower and you do not need to pay the annual Immigration Health Surcharge. Employer certification / accreditation badges Name Jacob Williams Job title ICT Technical Engineer Team Leader Infrastructure Email address
25/07/2026
Full time
Applicants are advised to apply early as we reserve the right to close a vacancy prior to the closing date if a high number of applications have been received. If you are successful and short listed for interview you will be contacted by email using the address with which you registered. Therefore, please ensure you check your email account regularly All applicants are invited to apply in Welsh, any application submitted in Welsh will not be treated less favourably than an application made in English Please check your email account regularly. Successful applicants will receive all recruitment related correspondence via the email account registered on the application form. The salary scale for a Band 3 has been adjusted as part of the NHS Agenda for Change pay award for 2026/2027 and will be implemented in August 2026 backdated to 01 April 2026 where applicable. Job overview Working within the ICT Infrastructure team, the postholder will be expected to provide an expert and effective ICT support service, predominantly in development, implementation and ongoing maintenance across a range of ICT systems across Wales, including the provision of ICT support and advice to managers and users. Writing documentation for others to follow when necessary. The post holder will be required to work without supervision to a high standard, prioritise work and manage time effectively, deciding when it is necessary to refer to their team leader or a manager. Supporting, maintaining and installing ICT Infrastructure across the Trust in accordance with Organisational policies and procedure. Ensuring scheduled work is completed within timescales to agreed quality standards and in line with departmental procedures. The Post holder will work daily with minimum supervision, managing their own workload and any problems autonomously, ensuring that deadlines and targets are met and that new central and local legislative requirements are worked into the existing local implementation. Main duties of the job The main duties and responsibilities of the post holder are as follows: Providing second line ICT support for users of all ICT systems in The Welsh Ambulance Service Trust, escalating problems in a timely and efficient manner over the telephone, face to face and via electronic communication using own initiative. Supporting the senior infrastructure engineering team colleagues with infrastructure project work, assisting in the implementation and testing of the new systems. Providing additional support to the senior infrastructure engineering team in the ongoing maintenance and monitoring of the key infrastructuresystems once implemented in the Trust. Prioritise and respond to calls assigned in the ICT helpdesk software, ensuring the integrity of the call and solution information is kept up to date. Liaise with both internal and external agencies for the installation/configuration of new and current systems. Advises on and configures servers and other infrastructure equipment to ensure that it is configured to meet system/trust requirements. Including the development and use of centralized administration and distribution. The ability to speak Welsh is desirable for this post; English and/or Welsh speakers are equally welcome to apply. Welsh Language level 1 skills are desirable for this role. Working for our organisation Our workforce is made up of over 4,000 remarkable people who contribute to the delivery of world-class patient care across Wales, 24 hours a day, 365 days a year. Whether you work in a patient-facing role or within our range of support services, the work that you do enables us to provide high quality care, wherever and whenever we're needed. The Trust recognises the need for its workforce to represent the diversity of the population it serves across the whole of Wales and seeks to create an environment where diversity is celebrated and inclusivity matters. We are also keen to break down any barriers into the Trust, and would encourage applications from under-represented groups, including those from Black, Asian and Minority Ethnic communities, LGBTQ+ communities and disability groups. Careers within the Welsh Ambulance Services University NHS Trust are diverse and varied, with opportunities arising right across the service. Whatever your skills and background, you're sure to find a career with us which is fulfilling, challenging, and rewarding. In line with the Trust's Starting Salary Procedure, all applicants will start at the bottom of the band for the position applied for, but can apply for a higher salary if they have previous experience relevant to the position. Detailed job description and main responsibilities Operational management of a wide range of infrastructure systems, including system design, configuration and technical support. To assist the ICT Senior Management Team in developing systems or implementing changes to current architecture by specifying, configuring and installing new software or hardware components. Pro-actively design, develop and maintain a range of reports and respond to ad-hoc information requests for information from and for the many Infrastructure systems. Maintaining ICT systems within the Trust to ensure that systems meet the business and clinical needs of the users and organisation, e.g. maintains virus protection software. Maintains agreed back-up procedures. The post holder will be responsible for maintaining ICT equipment and systems used across the trust, including but not limited to ICT accounts, desktop computer equipment, cabling, and servers. The post holder will ensure all procedures for maintenance/change control of systems have been documented. To work in the UK, all candidates who are not UK or Republic of Ireland (RoI) nationals require sponsorship to obtain either a Health and Care visa or Skilled Worker visa , unless you have permission to work via another route. Non UK / RoI candidates wishing to apply should self-assess the likelihood of obtaining a Certificate of Sponsorship by visiting Work in the UK. If you are eligible for the Health and Care visa, application costs are lower and you do not need to pay the annual Immigration Health Surcharge. Employer certification / accreditation badges Name Jacob Williams Job title ICT Technical Engineer Team Leader Infrastructure Email address
National Physical Laboratory
Birmingham, Staffordshire
About the Role Salary for UKTL specialist roles are benchmarked against the external market and may include additional compensation to recognise in-demand technical expertise. Dive Deep. Make an Impact. Build Secure Systems. You're driven by curiosity and a desire to understand how things really work - and how they can be made more secure. Whether dissecting telecoms protocols, exploring enterprise systems, or analysing hardware, you take a hands-on, analytical approach to solving complex challenges. In this role, you'll join a collaborative and inclusive team where your expertise is valued, your ideas are heard, and your work directly contributes to strengthening real-world systems. You'll have the freedom to explore, experiment, and grow - while helping shape the security of next-generation networks. As a senior member of the team, you'll also play an important role in supporting and mentoring others, helping to develop the next generation of security testing specialists. What You'll Be Doing Lead and deliver security assessments across complex hardware, software, and telecoms systems. Conduct hands-on penetration testing within a dedicated in-house lab environment, ensuring safe and controlled testing. Apply advanced testing techniques - including both positive and negative approaches (e.g. fuzzing) - to rigorously assess network functions and protocols. Identify, investigate, and clearly articulate vulnerabilities and security risks to both technical and non-technical audiences. Develop scripts and automate testing processes to improve efficiency, consistency, and scalability. Produce high-quality, insightful technical reports that support remediation and strengthen security posture. Mentor and support junior team members through hands-on guidance and knowledge sharing. Contribute to the development of test strategies and help shape the direction of security assessments. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. About You You'll thrive in this role if you: Have strong experience in penetration testing, with a solid understanding of exploitation techniques and how they apply in real-world environments. Enjoy deep technical problem solving and working across complex, evolving systems. Bring a collaborative mindset - sharing knowledge, supporting others, and contributing fresh ideas. Are passionate about security testing and committed to continuous learning and staying ahead of emerging threats. Have a background in areas such as networking, infrastructure, software development, or telecoms (preferred but not essential). What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry-recognised certifications, helping you continuously develop your expertise. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. About Us UKTL is building leading edge Telecoms testing facilities to keep our telecommunications networks safe, accelerate the roll-out of new technologies, and grow our world leading telecoms sector to maintain resiliency and security. Successful candidates will join a state-of-the-art facility and be supporting the team conducting testing and research on the latest technologies and innovations in the industry. You will work alongside our infrastructure and Cybersecurity professionals to ensure that the UK's world class Telecoms infrastructure grows in a resilient and secure manner underpinning growth in other industry sectors. As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors. The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here - The measure of us - Overview. NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme. At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we're creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page. We offer a wealth of above industry standard benefits, such as enhanced pension scheme, flexible working, and more that can be found here. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we're always willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.
25/07/2026
Full time
About the Role Salary for UKTL specialist roles are benchmarked against the external market and may include additional compensation to recognise in-demand technical expertise. Dive Deep. Make an Impact. Build Secure Systems. You're driven by curiosity and a desire to understand how things really work - and how they can be made more secure. Whether dissecting telecoms protocols, exploring enterprise systems, or analysing hardware, you take a hands-on, analytical approach to solving complex challenges. In this role, you'll join a collaborative and inclusive team where your expertise is valued, your ideas are heard, and your work directly contributes to strengthening real-world systems. You'll have the freedom to explore, experiment, and grow - while helping shape the security of next-generation networks. As a senior member of the team, you'll also play an important role in supporting and mentoring others, helping to develop the next generation of security testing specialists. What You'll Be Doing Lead and deliver security assessments across complex hardware, software, and telecoms systems. Conduct hands-on penetration testing within a dedicated in-house lab environment, ensuring safe and controlled testing. Apply advanced testing techniques - including both positive and negative approaches (e.g. fuzzing) - to rigorously assess network functions and protocols. Identify, investigate, and clearly articulate vulnerabilities and security risks to both technical and non-technical audiences. Develop scripts and automate testing processes to improve efficiency, consistency, and scalability. Produce high-quality, insightful technical reports that support remediation and strengthen security posture. Mentor and support junior team members through hands-on guidance and knowledge sharing. Contribute to the development of test strategies and help shape the direction of security assessments. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. About You You'll thrive in this role if you: Have strong experience in penetration testing, with a solid understanding of exploitation techniques and how they apply in real-world environments. Enjoy deep technical problem solving and working across complex, evolving systems. Bring a collaborative mindset - sharing knowledge, supporting others, and contributing fresh ideas. Are passionate about security testing and committed to continuous learning and staying ahead of emerging threats. Have a background in areas such as networking, infrastructure, software development, or telecoms (preferred but not essential). What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry-recognised certifications, helping you continuously develop your expertise. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. About Us UKTL is building leading edge Telecoms testing facilities to keep our telecommunications networks safe, accelerate the roll-out of new technologies, and grow our world leading telecoms sector to maintain resiliency and security. Successful candidates will join a state-of-the-art facility and be supporting the team conducting testing and research on the latest technologies and innovations in the industry. You will work alongside our infrastructure and Cybersecurity professionals to ensure that the UK's world class Telecoms infrastructure grows in a resilient and secure manner underpinning growth in other industry sectors. As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors. The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here - The measure of us - Overview. NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme. At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we're creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page. We offer a wealth of above industry standard benefits, such as enhanced pension scheme, flexible working, and more that can be found here. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we're always willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.
Viridien ( ) is an advanced technology, digital and Earth data company that pushes the boundaries of science for a more prosperous and sustainable future. With our ingenuity, drive and deep curiosity we discover new insights, innovations, and solutions that efficiently and responsibly resolve complex natural resource, digital, energy transition and infrastructure challenges.Job DetailsViridien is seeking a Senior Cloud Engineer to lead the implementation and operation of secure, scalable cloud platforms across both Viridien and client environments.This role is responsible for translating cloud architectures into production-ready solutions, supporting the deployment of Data Hub's data transformation and analytics platform across multiple cloud environments. You will work closely with software, data, and infrastructure teams to deliver reliable, secure, and repeatable deployments while ensuring operational excellence and adherence to governance requirements.About The TeamYou will join the Data Hub team, a multidisciplinary group of scientists, engineers, and developers focused on solving complex data transformation and analytics challenges across industries including geothermal, environmental, hydrocarbon, and mineral exploration.The team works in a collaborative environment alongside data engineers, machine learning engineers, and software developers. This role is based in either North Wales or Crawley with a hybrid working arrangement.Key ResponsibilitiesCloud Platform EngineeringImplement cloud architectures within Viridien and client environments.Build and automate cloud foundations including networking, identity, governance, and security controls.Deliver and operate Kubernetes-based platforms, primarily using Azure Kubernetes Service (AKS).Infrastructure Automation & DeploymentDevelop and maintain Infrastructure as Code using Terraform, Bicep, or similar tools.Build and manage CI/CD pipelines, deployment processes, and release controls.Create reusable cloud modules and deployment patterns to improve consistency and scalability.Security & GovernanceImplement security controls including IAM/RBAC, network segmentation, encryption, secrets management, and policy enforcement.Ensure cloud platforms meet security, compliance, and governance requirements.Support vulnerability management and security monitoring practices.Operations & ReliabilityImplement monitoring, alerting, backup, and disaster recovery solutions.Troubleshoot and resolve complex issues across cloud, Kubernetes, and database platforms.Develop operational documentation, runbooks, and knowledge transfer materials.Stakeholder CollaborationWork closely with software teams, client stakeholders, and operations teams to deliver cloud solutions.Support technical planning, risk management, and deployment activities.Contribute to engineering standards, best practices, and continuous improvement initiatives.QualificationsRequiredProven experience delivering production cloud environments, particularly within Microsoft Azure.Strong experience implementing and operating Kubernetes platforms.Experience deploying and supporting database platforms using both PaaS and VM-based solutions.Strong experience with Infrastructure as Code tools such as Terraform or Bicep.Experience building and maintaining CI/CD pipelines.Strong understanding of cloud security principles, including IAM, networking, encryption, and secrets management.Experience troubleshooting networking, distributed systems, and cloud platform issues.Ability to work independently and take ownership of technical delivery.PreferredExperience with AWS and/or OpenStack environments.Experience implementing landing zones and cloud governance frameworks.Scripting and automation experience using PowerShell, Python, or Bash.Experience with policy-as-code and cloud security tooling.Experience supporting hybrid or private cloud environments.Experience working within highly regulated or security-sensitive environments.Additional InformationHybrid working available from North Wales or Crawley.Opportunity to work across both Viridien and client cloud environments.Collaboration with software, data, and machine learning teams on large-scale data and analytics platforms.Why work with us?Competitive salary commensurate with experienceHighly attractive bonus schemeHybrid model and flexible working with up to 2 days at homeInitial 22 days annual leave with future increases, complemented by a flexible buying and selling holiday programCompany pension with generous employer contributionWellbeing Unmind app - puts you in control of your mental healthA flexible benefits platform with numerous discount schemes - gym membership, restaurants, cinema tickets, and much more!Regular social club events, spontaneous reward events throughout the yearCycle purchase schemeFlexible Private Medical & Dental care programmesSponsorship of visas/comprehensive relocation packagesBank Holiday Swap - our holiday swap program allows you to change it for another day of your choice!Relaxed dress code policyL earning and DevelopmentAt Viridien, we foster a culture of continuous learning and provide tailored training programs through our Learning Hub, designed to enhance technical, commercial, and personal growth.We Care About The EnvironmentWe encourage and actively support a strong sense of community, through volunteering and various company initiatives, as well as a strong company commitment to protecting our environment through sustainable solutions, energy saving and waste reduction enterprises. Hiring ProcessAt Viridien, we are committed to delivering a respectful, inclusive, and transparent recruitment experience.Due to the high volume of applications we receive, we may not be able to provide individual feedback to every applicant. Only candidates whose qualifications closely match the role criteria will be contacted for an interview. We do, however, aim to share personalized feedback with those who progress to the first round of interviews and beyond.We are also dedicated to ensuring that our hiring process accessible to all. If you require any reasonable adjustments to fully participate in the application or interview stages, please don't hesitate to contact your recruiter directly.We see things differently. Diversity fuels our innovation, we value the unique ways in which we differ, and we are committed to equal employment opportunities for all professionals.
25/07/2026
Full time
Viridien ( ) is an advanced technology, digital and Earth data company that pushes the boundaries of science for a more prosperous and sustainable future. With our ingenuity, drive and deep curiosity we discover new insights, innovations, and solutions that efficiently and responsibly resolve complex natural resource, digital, energy transition and infrastructure challenges.Job DetailsViridien is seeking a Senior Cloud Engineer to lead the implementation and operation of secure, scalable cloud platforms across both Viridien and client environments.This role is responsible for translating cloud architectures into production-ready solutions, supporting the deployment of Data Hub's data transformation and analytics platform across multiple cloud environments. You will work closely with software, data, and infrastructure teams to deliver reliable, secure, and repeatable deployments while ensuring operational excellence and adherence to governance requirements.About The TeamYou will join the Data Hub team, a multidisciplinary group of scientists, engineers, and developers focused on solving complex data transformation and analytics challenges across industries including geothermal, environmental, hydrocarbon, and mineral exploration.The team works in a collaborative environment alongside data engineers, machine learning engineers, and software developers. This role is based in either North Wales or Crawley with a hybrid working arrangement.Key ResponsibilitiesCloud Platform EngineeringImplement cloud architectures within Viridien and client environments.Build and automate cloud foundations including networking, identity, governance, and security controls.Deliver and operate Kubernetes-based platforms, primarily using Azure Kubernetes Service (AKS).Infrastructure Automation & DeploymentDevelop and maintain Infrastructure as Code using Terraform, Bicep, or similar tools.Build and manage CI/CD pipelines, deployment processes, and release controls.Create reusable cloud modules and deployment patterns to improve consistency and scalability.Security & GovernanceImplement security controls including IAM/RBAC, network segmentation, encryption, secrets management, and policy enforcement.Ensure cloud platforms meet security, compliance, and governance requirements.Support vulnerability management and security monitoring practices.Operations & ReliabilityImplement monitoring, alerting, backup, and disaster recovery solutions.Troubleshoot and resolve complex issues across cloud, Kubernetes, and database platforms.Develop operational documentation, runbooks, and knowledge transfer materials.Stakeholder CollaborationWork closely with software teams, client stakeholders, and operations teams to deliver cloud solutions.Support technical planning, risk management, and deployment activities.Contribute to engineering standards, best practices, and continuous improvement initiatives.QualificationsRequiredProven experience delivering production cloud environments, particularly within Microsoft Azure.Strong experience implementing and operating Kubernetes platforms.Experience deploying and supporting database platforms using both PaaS and VM-based solutions.Strong experience with Infrastructure as Code tools such as Terraform or Bicep.Experience building and maintaining CI/CD pipelines.Strong understanding of cloud security principles, including IAM, networking, encryption, and secrets management.Experience troubleshooting networking, distributed systems, and cloud platform issues.Ability to work independently and take ownership of technical delivery.PreferredExperience with AWS and/or OpenStack environments.Experience implementing landing zones and cloud governance frameworks.Scripting and automation experience using PowerShell, Python, or Bash.Experience with policy-as-code and cloud security tooling.Experience supporting hybrid or private cloud environments.Experience working within highly regulated or security-sensitive environments.Additional InformationHybrid working available from North Wales or Crawley.Opportunity to work across both Viridien and client cloud environments.Collaboration with software, data, and machine learning teams on large-scale data and analytics platforms.Why work with us?Competitive salary commensurate with experienceHighly attractive bonus schemeHybrid model and flexible working with up to 2 days at homeInitial 22 days annual leave with future increases, complemented by a flexible buying and selling holiday programCompany pension with generous employer contributionWellbeing Unmind app - puts you in control of your mental healthA flexible benefits platform with numerous discount schemes - gym membership, restaurants, cinema tickets, and much more!Regular social club events, spontaneous reward events throughout the yearCycle purchase schemeFlexible Private Medical & Dental care programmesSponsorship of visas/comprehensive relocation packagesBank Holiday Swap - our holiday swap program allows you to change it for another day of your choice!Relaxed dress code policyL earning and DevelopmentAt Viridien, we foster a culture of continuous learning and provide tailored training programs through our Learning Hub, designed to enhance technical, commercial, and personal growth.We Care About The EnvironmentWe encourage and actively support a strong sense of community, through volunteering and various company initiatives, as well as a strong company commitment to protecting our environment through sustainable solutions, energy saving and waste reduction enterprises. Hiring ProcessAt Viridien, we are committed to delivering a respectful, inclusive, and transparent recruitment experience.Due to the high volume of applications we receive, we may not be able to provide individual feedback to every applicant. Only candidates whose qualifications closely match the role criteria will be contacted for an interview. We do, however, aim to share personalized feedback with those who progress to the first round of interviews and beyond.We are also dedicated to ensuring that our hiring process accessible to all. If you require any reasonable adjustments to fully participate in the application or interview stages, please don't hesitate to contact your recruiter directly.We see things differently. Diversity fuels our innovation, we value the unique ways in which we differ, and we are committed to equal employment opportunities for all professionals.
We're looking for a Senior Platform Engineer to join our team in Leeds on a permanent basis. This hybrid role requires two days in the office and three days working remotely each week. The position sits within the central Cloud Platform team, supporting a portfolio of applications built on Google Cloud and open source technologies. You'll play a key part in designing and delivering GCP solutions while championing best practice across security, automation, and observability. Responsibilities Design and maintain scalable, automated platform capabilities including IaC modules and standardised GitOps pipelines to accelerate developer delivery. Contribute to the architecture, scalability, and ongoing lifecycle management of a growing enterprise GCP estate, ensuring resilience and performance at scale. Build and evolve centralised observability solutions (e.g., Prometheus, Grafana, Cloud Operations Suite) to maximise uptime and reduce mean time to resolution. Partner closely with security teams to embed shift left practices, integrating IAM, network controls, and governance into engineering workflows. Support and mentor engineers across the team, contributing to code reviews, clear documentation, and fostering a high trust, collaborative engineering environment. Essential Qualifications Proven experience designing, deploying, and running enterprise scale solutions on Google Cloud Platform. Hands on experience with Terraform and automated pipelines such as GitHub Actions, Cloud Build, or ArgoCD to deliver and manage infrastructure at scale. Strong background running production workloads in containerised, microservices based environments. Data driven approach to reliability, using modern monitoring and logging tooling to protect performance and availability. Strong communicator with experience working cross functionally and supporting or mentoring other engineers. Desirable Qualifications Professional level certifications such as Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer. Experience with complex GCP networking setups, e.g., Shared VPCs, Private Service Connect, Interconnects. Exposure to tracking, analysing, and optimising cloud spend across engineering teams. Familiarity with API management (e.g., Apigee) and core concepts like secure routing, traffic control, and OAuth/OpenID Connect. Benefits Competitive salary plus bonus 25 days annual leave with the option to purchase 5 additional days Birthday off and an additional 3 days of annual leave after 5 years of service Well being and mental health benefits including the Calm app, personal medical, critical illness cover, and dental insurance Matched pension contribution up to 10% Car benefit scheme Access to an online learning platform for continuous development Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates.
25/07/2026
Full time
We're looking for a Senior Platform Engineer to join our team in Leeds on a permanent basis. This hybrid role requires two days in the office and three days working remotely each week. The position sits within the central Cloud Platform team, supporting a portfolio of applications built on Google Cloud and open source technologies. You'll play a key part in designing and delivering GCP solutions while championing best practice across security, automation, and observability. Responsibilities Design and maintain scalable, automated platform capabilities including IaC modules and standardised GitOps pipelines to accelerate developer delivery. Contribute to the architecture, scalability, and ongoing lifecycle management of a growing enterprise GCP estate, ensuring resilience and performance at scale. Build and evolve centralised observability solutions (e.g., Prometheus, Grafana, Cloud Operations Suite) to maximise uptime and reduce mean time to resolution. Partner closely with security teams to embed shift left practices, integrating IAM, network controls, and governance into engineering workflows. Support and mentor engineers across the team, contributing to code reviews, clear documentation, and fostering a high trust, collaborative engineering environment. Essential Qualifications Proven experience designing, deploying, and running enterprise scale solutions on Google Cloud Platform. Hands on experience with Terraform and automated pipelines such as GitHub Actions, Cloud Build, or ArgoCD to deliver and manage infrastructure at scale. Strong background running production workloads in containerised, microservices based environments. Data driven approach to reliability, using modern monitoring and logging tooling to protect performance and availability. Strong communicator with experience working cross functionally and supporting or mentoring other engineers. Desirable Qualifications Professional level certifications such as Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer. Experience with complex GCP networking setups, e.g., Shared VPCs, Private Service Connect, Interconnects. Exposure to tracking, analysing, and optimising cloud spend across engineering teams. Familiarity with API management (e.g., Apigee) and core concepts like secure routing, traffic control, and OAuth/OpenID Connect. Benefits Competitive salary plus bonus 25 days annual leave with the option to purchase 5 additional days Birthday off and an additional 3 days of annual leave after 5 years of service Well being and mental health benefits including the Calm app, personal medical, critical illness cover, and dental insurance Matched pension contribution up to 10% Car benefit scheme Access to an online learning platform for continuous development Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates.
We're looking for a Senior GCP Cloud & DevOps Engineer to join our team in Bradford on a 12-month FTC. This is a hybrid role, with two days in the office and three days working remotely each week. Responsibilities Own and evolve the end-to-end GCP platform, covering infrastructure design, deployment, lifecycle management, and ongoing optimisation. Design, build, and maintain scalable, secure cloud infrastructure to support AI and data products. Implement and manage CI/CD pipelines to enable fast, reliable, and consistent product delivery. Drive platform reliability and performance through strong observability, monitoring, and AIOps practices. Ensure platform security, governance, and compliance, working closely with central Security and adhering to best practices. Optimise cloud spend and resource usage, balancing cost efficiency with performance and scalability. Collaborate closely with engineering, data, and product teams to enable rapid development and innovation. Create and maintain clear, high-quality documentation across platforms, services, and data products. Define, track, and improve key platform KPIs such as availability, deployment frequency, MTTR, and security posture. Support incident management, troubleshooting, and continuous improvement of platform operations. Essential Qualifications Proven experience working in high-performing Platform / DevOps teams. Strong hands on experience with Google Cloud Platform (GCP). Solid background in DevOps or Platform Engineering, building scalable, automated infrastructure. Expertise in CI/CD design and implementation (e.g., GitHub Actions, Terraform, Cloud Build). Experience supporting AI driven applications, microservices, and API led architectures. Strong troubleshooting and debugging skills using logs, tracing, and observability tools. Good understanding of cloud networking, security principles, IAM, and VPC design. Ability to operate effectively in fast paced, product led environments with multiple stakeholders. Desirable Qualifications GCP Professional level certification. Experience working with offshore teams or third party delivery partners. Exposure to AIOps practices and advanced observability tooling (e.g., OpenTelemetry). Experience implementing cloud governance and security frameworks at scale. Strong awareness of cost optimisation strategies within GCP environments. Benefits Competitive salary + bonus. 25 days annual leave, with the option to purchase 5 more. Enjoy your birthday off, plus an additional 3 days of annual leave after 5 years of service. Wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance. Matched pension contribution up to 10%. Car benefit scheme. Online learning platform for continuous career development. Equal Opportunity Statement Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates.
25/07/2026
Full time
We're looking for a Senior GCP Cloud & DevOps Engineer to join our team in Bradford on a 12-month FTC. This is a hybrid role, with two days in the office and three days working remotely each week. Responsibilities Own and evolve the end-to-end GCP platform, covering infrastructure design, deployment, lifecycle management, and ongoing optimisation. Design, build, and maintain scalable, secure cloud infrastructure to support AI and data products. Implement and manage CI/CD pipelines to enable fast, reliable, and consistent product delivery. Drive platform reliability and performance through strong observability, monitoring, and AIOps practices. Ensure platform security, governance, and compliance, working closely with central Security and adhering to best practices. Optimise cloud spend and resource usage, balancing cost efficiency with performance and scalability. Collaborate closely with engineering, data, and product teams to enable rapid development and innovation. Create and maintain clear, high-quality documentation across platforms, services, and data products. Define, track, and improve key platform KPIs such as availability, deployment frequency, MTTR, and security posture. Support incident management, troubleshooting, and continuous improvement of platform operations. Essential Qualifications Proven experience working in high-performing Platform / DevOps teams. Strong hands on experience with Google Cloud Platform (GCP). Solid background in DevOps or Platform Engineering, building scalable, automated infrastructure. Expertise in CI/CD design and implementation (e.g., GitHub Actions, Terraform, Cloud Build). Experience supporting AI driven applications, microservices, and API led architectures. Strong troubleshooting and debugging skills using logs, tracing, and observability tools. Good understanding of cloud networking, security principles, IAM, and VPC design. Ability to operate effectively in fast paced, product led environments with multiple stakeholders. Desirable Qualifications GCP Professional level certification. Experience working with offshore teams or third party delivery partners. Exposure to AIOps practices and advanced observability tooling (e.g., OpenTelemetry). Experience implementing cloud governance and security frameworks at scale. Strong awareness of cost optimisation strategies within GCP environments. Benefits Competitive salary + bonus. 25 days annual leave, with the option to purchase 5 more. Enjoy your birthday off, plus an additional 3 days of annual leave after 5 years of service. Wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance. Matched pension contribution up to 10%. Car benefit scheme. Online learning platform for continuous career development. Equal Opportunity Statement Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates.
About Lendable Lendable is on a mission to build the world's best technology to help people get credit and save money. We are a growing fintech company, profitable since 2017 and backed by top investors including Balderton Capital and Goldman Sachs. About the Role We are looking for a practical, execution-focused Security Engineer to manage the configuration, integration, and engineering lifecycle of our internal security tools. This role is highly versatile and focuses on solving security problems with code and automation. The engineer will act as the engineering engine room for the InfoSec team, collaborating closely with various security and IT leads to translate security requirements into working configurations, automated pipelines, and custom data integrations. What You'll Be Doing Configuration as Code: Drive security configurations across our stack utilising a Terraform and GitOps workflow. Tooling Optimisation: Get the most out of our InfoSec tooling through proactive setup, tuning and configuration, ensuring we maximise our defensive utility and continuously improve our security posture. Platform Integrations: Build and maintain high leverage integrations between cloud providers, SaaS platforms and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform. Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and scalability for the InfoSec team. Frictionless Control Implementation: Design and deploy practical guardrails, CASB and DLP policies across network boundaries and collaboration tools - for example, Google Workspace, safeguarding data and enabling safe tooling usage without creating engineering bottlenecks. What We're Looking For Practical Engineering Capabilities: Solid experience using Python (or similar) to automate tasks, Terraform to manage infrastructure, connect APIs and manage infra state, with judgement to use UI configurations when code isn't viable. Cloud & Infrastructure Literacy: Proven experience configuring or hardening security controls within cloud (AWS/GCP) environments such as IAM and network/identity boundaries, and handling data formats like JSON to parse logs. AI First Execution: Enthusiastic about actively leveraging advanced AI coding tools (such as Claude Code, Codex) to increase engineering output, script generation and delivery speed. Pragmatic Security Mindset: A builder who views security as a business enabler, focusing on practical defensive posture rather than compliance checklists and identifying systemic risk based on context. Bias for Action: An execution focused operator who writes scripts, opens PRs or modifies controls to get tasks done when a security control drifts or a detection mechanism is needed. Communication & Collaboration: Ability to debate technical IAM architecture details with a Platform Engineer and explain to non technical stakeholders why a control change matters. Interview Process TA Screening Call Hiring Manager Call Technical Interview Culture Interview Life at Lendable Culture & Benefits Flexible working - hybrid or fully remote with regular in person social opportunities. Health coverage - private health cover and support for physical and mental wellbeing. Retirement & savings - long term financial wellbeing through retirement savings plans. Employee referral programme - earn a competitive bonus for successful referrals. Office meals & snacks - fully stocked kitchen and complimentary lunches on in office days at select locations. Sustainable commuting - cycle to work and electric vehicle salary sacrifice schemes available in select locations.
25/07/2026
Full time
About Lendable Lendable is on a mission to build the world's best technology to help people get credit and save money. We are a growing fintech company, profitable since 2017 and backed by top investors including Balderton Capital and Goldman Sachs. About the Role We are looking for a practical, execution-focused Security Engineer to manage the configuration, integration, and engineering lifecycle of our internal security tools. This role is highly versatile and focuses on solving security problems with code and automation. The engineer will act as the engineering engine room for the InfoSec team, collaborating closely with various security and IT leads to translate security requirements into working configurations, automated pipelines, and custom data integrations. What You'll Be Doing Configuration as Code: Drive security configurations across our stack utilising a Terraform and GitOps workflow. Tooling Optimisation: Get the most out of our InfoSec tooling through proactive setup, tuning and configuration, ensuring we maximise our defensive utility and continuously improve our security posture. Platform Integrations: Build and maintain high leverage integrations between cloud providers, SaaS platforms and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform. Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and scalability for the InfoSec team. Frictionless Control Implementation: Design and deploy practical guardrails, CASB and DLP policies across network boundaries and collaboration tools - for example, Google Workspace, safeguarding data and enabling safe tooling usage without creating engineering bottlenecks. What We're Looking For Practical Engineering Capabilities: Solid experience using Python (or similar) to automate tasks, Terraform to manage infrastructure, connect APIs and manage infra state, with judgement to use UI configurations when code isn't viable. Cloud & Infrastructure Literacy: Proven experience configuring or hardening security controls within cloud (AWS/GCP) environments such as IAM and network/identity boundaries, and handling data formats like JSON to parse logs. AI First Execution: Enthusiastic about actively leveraging advanced AI coding tools (such as Claude Code, Codex) to increase engineering output, script generation and delivery speed. Pragmatic Security Mindset: A builder who views security as a business enabler, focusing on practical defensive posture rather than compliance checklists and identifying systemic risk based on context. Bias for Action: An execution focused operator who writes scripts, opens PRs or modifies controls to get tasks done when a security control drifts or a detection mechanism is needed. Communication & Collaboration: Ability to debate technical IAM architecture details with a Platform Engineer and explain to non technical stakeholders why a control change matters. Interview Process TA Screening Call Hiring Manager Call Technical Interview Culture Interview Life at Lendable Culture & Benefits Flexible working - hybrid or fully remote with regular in person social opportunities. Health coverage - private health cover and support for physical and mental wellbeing. Retirement & savings - long term financial wellbeing through retirement savings plans. Employee referral programme - earn a competitive bonus for successful referrals. Office meals & snacks - fully stocked kitchen and complimentary lunches on in office days at select locations. Sustainable commuting - cycle to work and electric vehicle salary sacrifice schemes available in select locations.
Senior Platform Engineer Location: Holborn, London Office Policy: Hybrid: 3 days a week in office Who We Are At Omaze, we give our community in the UK and Germany the chance to win luxury homes and other life-changing prizes - all while raising money for the causes they love. Thanks to our Omaze Community, we've raised over £100 million for UK charities in just five years. That's millions helping organisations like Age UK, the RSPCA, British Heart Foundation and Great Ormond Street Hospital Charity deliver life saving work. And the best part? We're only just getting started. Omaze is building a business and culture committed to growth and creating significant social impact on a global scale. Why You'll Love Working at Omaze Growth: Omaze is one of the fastest growing companies in the world. Impact: Join a team of world changers dedicated to creating a ripple effect of good. Pioneering: Be part of something no one has done before. Culture: We work hard, grow together, and spread joy along the way. About The Job As a Senior Platform Engineer at Omaze, you take genuine ownership of the infrastructure and reliability foundations that everything else depends on. You're experienced across AWS, particularly Lambda, API Gateway, DynamoDB and the serverless patterns that underpin our platform. You know how to build and maintain infrastructure that's secure, observable, cost efficient at scale and globally distributed. You work in code - IaC isn't an afterthought for you, it's how you think. You bring the kind of judgement that comes from having run production systems under real pressure, and you apply that same rigour to the developer experience because a platform team that makes engineers faster is a force multiplier for the whole organisation. What You'll Be Doing Own the design, implementation, and evolution of Omaze's cloud infrastructure on AWS, Lambda, API Gateway, and surrounding services, written and maintained as code using CDK and / or Terraform. Build and maintain CI/CD pipelines in GitHub Actions that are fast, reliable, and give engineers confidence to ship frequently and safely. Drive observability across the platform via instrumentation, alerting, dashboards, and on call tooling so the team can detect, diagnose, and resolve incidents quickly. Own security and compliance posture across the infrastructure: IAM, secrets management, network boundaries, and regulatory requirements, identifying risk early and remediating it properly. Identify and act on cost optimisation opportunities, tracking resource utilisation, rightsizing infrastructure, and making spend visible and understandable across engineering. Raise the baseline for developer experience by reducing toil, improving deployment workflows, and making the right way to do things the easy way. Hold a high bar in infrastructure code review by giving feedback that's direct, constructive, and focused on long term maintainability and security. Use AI assisted tooling as a natural part of your workflow and apply the same rigour and judgement to AI generated infrastructure code as you would to anything hand written. About You Significant experience as a Platform, Infrastructure, or DevOps engineer, with a strong AWS background and hands on serverless experience (Lambda, DynamoDB, API Gateway, event driven architectures). Production grade IaC experience with Terraform and/or AWS CDK. You write infrastructure the same way you write application code: tested, reviewed, and version controlled. Strong experience with CI/CD pipelines, particularly GitHub Actions, and a track record of improving deployment reliability and developer velocity. Deep familiarity with observability tooling and incident response practices. You've been on call and know what good looks like. Solid understanding of cloud security principles: IAM, least privilege, secrets management, network security, and compliance requirements in regulated environments. Experience tracking and optimising cloud costs. You understand the levers and know how to make trade offs without compromising reliability. Comfortable working closely with other engineering teams translating infrastructure complexity into clear patterns and guardrails teams can follow confidently. A clear communicator who can make the case for the platform as a product investment to both technical and non-technical audiences. What's In It For You Generous stock options scheme Private medical and dental insurance 9% employer pension contributions, when you contribute at least 2% A personal learning and development budget each year to use on training courses, conferences and professional memberships Personal equipment budget to work from home Enhanced family leave policies Life assurance of 4x your salary Diversity statement We actively seek out diversity of thought and experience to drive innovation. We welcome all backgrounds, identities, and perspectives and work hard to ensure that every Omaze employee can bring their authentic self to work at all times.
25/07/2026
Full time
Senior Platform Engineer Location: Holborn, London Office Policy: Hybrid: 3 days a week in office Who We Are At Omaze, we give our community in the UK and Germany the chance to win luxury homes and other life-changing prizes - all while raising money for the causes they love. Thanks to our Omaze Community, we've raised over £100 million for UK charities in just five years. That's millions helping organisations like Age UK, the RSPCA, British Heart Foundation and Great Ormond Street Hospital Charity deliver life saving work. And the best part? We're only just getting started. Omaze is building a business and culture committed to growth and creating significant social impact on a global scale. Why You'll Love Working at Omaze Growth: Omaze is one of the fastest growing companies in the world. Impact: Join a team of world changers dedicated to creating a ripple effect of good. Pioneering: Be part of something no one has done before. Culture: We work hard, grow together, and spread joy along the way. About The Job As a Senior Platform Engineer at Omaze, you take genuine ownership of the infrastructure and reliability foundations that everything else depends on. You're experienced across AWS, particularly Lambda, API Gateway, DynamoDB and the serverless patterns that underpin our platform. You know how to build and maintain infrastructure that's secure, observable, cost efficient at scale and globally distributed. You work in code - IaC isn't an afterthought for you, it's how you think. You bring the kind of judgement that comes from having run production systems under real pressure, and you apply that same rigour to the developer experience because a platform team that makes engineers faster is a force multiplier for the whole organisation. What You'll Be Doing Own the design, implementation, and evolution of Omaze's cloud infrastructure on AWS, Lambda, API Gateway, and surrounding services, written and maintained as code using CDK and / or Terraform. Build and maintain CI/CD pipelines in GitHub Actions that are fast, reliable, and give engineers confidence to ship frequently and safely. Drive observability across the platform via instrumentation, alerting, dashboards, and on call tooling so the team can detect, diagnose, and resolve incidents quickly. Own security and compliance posture across the infrastructure: IAM, secrets management, network boundaries, and regulatory requirements, identifying risk early and remediating it properly. Identify and act on cost optimisation opportunities, tracking resource utilisation, rightsizing infrastructure, and making spend visible and understandable across engineering. Raise the baseline for developer experience by reducing toil, improving deployment workflows, and making the right way to do things the easy way. Hold a high bar in infrastructure code review by giving feedback that's direct, constructive, and focused on long term maintainability and security. Use AI assisted tooling as a natural part of your workflow and apply the same rigour and judgement to AI generated infrastructure code as you would to anything hand written. About You Significant experience as a Platform, Infrastructure, or DevOps engineer, with a strong AWS background and hands on serverless experience (Lambda, DynamoDB, API Gateway, event driven architectures). Production grade IaC experience with Terraform and/or AWS CDK. You write infrastructure the same way you write application code: tested, reviewed, and version controlled. Strong experience with CI/CD pipelines, particularly GitHub Actions, and a track record of improving deployment reliability and developer velocity. Deep familiarity with observability tooling and incident response practices. You've been on call and know what good looks like. Solid understanding of cloud security principles: IAM, least privilege, secrets management, network security, and compliance requirements in regulated environments. Experience tracking and optimising cloud costs. You understand the levers and know how to make trade offs without compromising reliability. Comfortable working closely with other engineering teams translating infrastructure complexity into clear patterns and guardrails teams can follow confidently. A clear communicator who can make the case for the platform as a product investment to both technical and non-technical audiences. What's In It For You Generous stock options scheme Private medical and dental insurance 9% employer pension contributions, when you contribute at least 2% A personal learning and development budget each year to use on training courses, conferences and professional memberships Personal equipment budget to work from home Enhanced family leave policies Life assurance of 4x your salary Diversity statement We actively seek out diversity of thought and experience to drive innovation. We welcome all backgrounds, identities, and perspectives and work hard to ensure that every Omaze employee can bring their authentic self to work at all times.
Role Profile The successful candidate for the Engineer, Post Trade role will work with the Director Technical Delivery Solution and Delivery. You will be part of a team building a complex, ground up cloud based critical market infrastructure service in a bold new venture for LSEG. This opening requires a candidate who takes great pride in delivering excellence with strong logical and technical skills, a can do attitude, and a willingness to play a critical role in forming and growing a new business. Key Responsibilities Focus on engineering excellence and coding, adopting an open and hands on approach to problem solving and delivery. Engage deeply in technical design and implementation to ensure solutions are robust, scalable, and aligned with industry standards. Actively contribute to all stages of the product engineering life cycle-solutioning, design, coding, and testing-promoting collaboration and transparency within the team to drive high quality outcomes. Demonstrate ownership and pride in work, proactively taking on new responsibilities aligned with product engineering needs. Embrace and apply LSEG engineering principles, diving deep technically to build with purpose and foster excellence within the team through open collaboration. Create an environment of engagement, challenge, and constructive questioning, ensuring trust and respect are maintained and a strong one team mentality is upheld. Key Skills and Experience Event driven microservice architecture: strong understanding of microservices design, pitfalls, best practices, Domain Driven Design (DDD), event driven principles, Docker, Kubernetes, and event driven patterns. DevOps and testing: building and maintaining pipelines (GitLab preferred), shift left testing using JUnit, Cucumber, Gherkin, PACT, Test Containers, and knowledge of Kafka, MQ. Java expertise: advanced experience with Java 17+, OOP, Spring Boot, RESTful services, Swagger/OpenAPI, Spring MVC, enterprise grade Java applications, data structures, algorithms, concurrency, and multi threading. Database management: strong SQL skills with Postgres, familiarity with object storage (AWS S3), database version control (Flyway, Liquibase). Cloud architecture: experience with AWS (Aurora, MSK, S3, IAM) and basic cloud networking concepts. Blockchain integration: understanding of blockchain fundamentals, consensus mechanisms, smart contracts, interoperability protocols, cross chain communication, and security considerations. Agile working: commitment to agile principles, experience with Scrum and Kanban, sprint ceremonies, product backlog refinement, and collaboration in scaled agile environments. Key Behaviours Delivery focused: committed to meeting deadlines and managing stakeholder expectations. Accountable: takes ownership and responsibility for outcomes. Collaborative: works effectively within cross functional teams, fostering teamwork. Communicative: champions clear, respectful, and constructive communication. Quality driven: maintains high standards in code quality, testing, and CI/CD practices. Adaptable & Innovative: eager to learn, improve, and embrace new technologies. Critical yet Respectful: challenges ideas constructively while maintaining professionalism. Engineering Mindset: passionate about solving problems and minimizing complexity. Career Stage Senior Associate Benefits Healthcare Retirement planning Paid volunteering days Wellbeing initiatives Equal Opportunity We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.
25/07/2026
Full time
Role Profile The successful candidate for the Engineer, Post Trade role will work with the Director Technical Delivery Solution and Delivery. You will be part of a team building a complex, ground up cloud based critical market infrastructure service in a bold new venture for LSEG. This opening requires a candidate who takes great pride in delivering excellence with strong logical and technical skills, a can do attitude, and a willingness to play a critical role in forming and growing a new business. Key Responsibilities Focus on engineering excellence and coding, adopting an open and hands on approach to problem solving and delivery. Engage deeply in technical design and implementation to ensure solutions are robust, scalable, and aligned with industry standards. Actively contribute to all stages of the product engineering life cycle-solutioning, design, coding, and testing-promoting collaboration and transparency within the team to drive high quality outcomes. Demonstrate ownership and pride in work, proactively taking on new responsibilities aligned with product engineering needs. Embrace and apply LSEG engineering principles, diving deep technically to build with purpose and foster excellence within the team through open collaboration. Create an environment of engagement, challenge, and constructive questioning, ensuring trust and respect are maintained and a strong one team mentality is upheld. Key Skills and Experience Event driven microservice architecture: strong understanding of microservices design, pitfalls, best practices, Domain Driven Design (DDD), event driven principles, Docker, Kubernetes, and event driven patterns. DevOps and testing: building and maintaining pipelines (GitLab preferred), shift left testing using JUnit, Cucumber, Gherkin, PACT, Test Containers, and knowledge of Kafka, MQ. Java expertise: advanced experience with Java 17+, OOP, Spring Boot, RESTful services, Swagger/OpenAPI, Spring MVC, enterprise grade Java applications, data structures, algorithms, concurrency, and multi threading. Database management: strong SQL skills with Postgres, familiarity with object storage (AWS S3), database version control (Flyway, Liquibase). Cloud architecture: experience with AWS (Aurora, MSK, S3, IAM) and basic cloud networking concepts. Blockchain integration: understanding of blockchain fundamentals, consensus mechanisms, smart contracts, interoperability protocols, cross chain communication, and security considerations. Agile working: commitment to agile principles, experience with Scrum and Kanban, sprint ceremonies, product backlog refinement, and collaboration in scaled agile environments. Key Behaviours Delivery focused: committed to meeting deadlines and managing stakeholder expectations. Accountable: takes ownership and responsibility for outcomes. Collaborative: works effectively within cross functional teams, fostering teamwork. Communicative: champions clear, respectful, and constructive communication. Quality driven: maintains high standards in code quality, testing, and CI/CD practices. Adaptable & Innovative: eager to learn, improve, and embrace new technologies. Critical yet Respectful: challenges ideas constructively while maintaining professionalism. Engineering Mindset: passionate about solving problems and minimizing complexity. Career Stage Senior Associate Benefits Healthcare Retirement planning Paid volunteering days Wellbeing initiatives Equal Opportunity We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.
Cloud Platform Engineer (Senior / Lead) Department: Technology Employment Type: Permanent - Full Time Location: London Reporting To: Description About the role We are looking for a hands on Senior / Lead Cloud Platform Engineer to shape and run the multi cloud foundation that our engineering, data and product teams build on everyday. This is a senior individual contributor / tech lead role at the heart of a modern hybrid cloud strategy. Our goal is to make cloud infrastructure effectively invisible and commoditised for internal teams: engineers should ship through self service golden paths and a well designed internal developer platform, without needing to understand the underlying cloud plumbing. You will treat platform capabilities as products, with clear APIs, paved roads, strong defaults and great developer experience. A defining part of this role is preparing our infrastructure for a future (or present) where some "engineers" are AI agents. You will design platforms, guardrails and interfaces that let both human engineers and autonomous AI agents provision, operate and optimise infrastructure safely - and you will use AI agents heavily yourself to automate and optimise day to day platform work. Security is central, not an afterthought. You will help drive a zero trust approach across identity, network, workloads and data, ensuring the platform is secure by default for humans and machine/agent identities alike. You will also work closely with our data function, helping design and optimise the data pipelines, data stores and large scale analytics infrastructure (for example BigQuery and similar warehouses) that the business depends on. What you'll do Design, build and operate our multi cloud and hybrid cloud platform across at least two of the top three providers (AWS, Azure and/or Google Cloud), plus on prem/hybrid connectivity where needed. Build and own an internal developer platform and self service "golden paths" that make cloud infrastructure feel invisible and commoditised for engineering, data and product teams; and their AI agents. Deliver everything as code: infrastructure as code, GitOps, reusable modules, CI/CD pipelines and policy as code guardrails. Leverage AI agents extensively to automate and optimise platform work-provisioning, cost and performance optimisation, incident response, remediation and documentation. Prepare the infrastructure for AI agents as first class "engineers": safe machine identities, scoped permissions, sandboxes, approval workflows and audit trails so agents can provision and operate infrastructure within tight guardrails. Embed a zero trust security model across identity, network, workloads and data for both human and machine/agent identities; secure by default, least privilege, secrets management and continuous compliance. Apply SRE practices-SLOs/SLIs, observability, capacity planning, resilience and blameless incident management-to keep the platform reliable and cost efficient. Partner with data engineering to design and optimise data pipelines, data stores and large scale analytics infrastructure such as BigQuery, including query, cost and performance tuning. Mentor engineers, set technical direction and champion strong platform and security engineering standards across the organisation. What you'll need to succeed Essential requirements: Extensive hands on experience designing, building and operating production cloud infrastructure at senior or lead level. Multi cloud experience across at least two of the top three providers (AWS, Microsoft Azure and Google Cloud), including a recognised professional level cloud certification for each of those two providers (for example AWS Solutions Architect / DevOps Engineer Professional, Azure Solutions Architect / DevOps Engineer Expert, or Google Cloud Professional Cloud Architect / DevOps Engineer). Strong background in modern hybrid cloud architecture and connecting cloud with on prem/edge environments. Deep infrastructure as code and automation skills (e.g. Terraform/OpenTofu, Pulumi, Ansible), GitOps and CI/CD, plus containers and orchestration (Docker, Kubernetes). Proven experience building internal developer platforms, self service golden paths and platform as a product to abstract away cloud complexity for engineering teams. Practical experience using AI agents / LLM based tooling to automate and optimise infrastructure work, and interest in designing infrastructure that AI agents can operate safely. Strong security engineering mindset with hands on zero trust experience across identity, network, workloads and data-including secrets management, least privilege IAM and machine/workload identity. Solid programming/scripting ability (e.g. Python, Go) and strong observability, reliability and cost optimisation practices. Desirable requirements: Experience working as a Site Reliability Engineer (SRE) with SLOs/SLIs, error budgets and incident management. A third top tier cloud certification, or specialist security/Kubernetes certifications (e.g. CKA/CKS). Significant data engineering experience: designing and operating data pipelines and data stores, and optimising databases and large scale data infrastructure such as BigQuery (including query, cost and performance tuning). Experience preparing environments for autonomous or agentic workloads-sandboxes, scoped machine identities, approval workflows and audit trails. Experience in a regulated or fintech environment. Your approach to work: Pragmatic and hands on, with a strong bias for automation and eliminating toil. Product mindset- you treat internal engineers (human and AI) as your customers and obsess over their experience. Security and reliability first, collaborative, and comfortable leading and mentoring. Important to know Location: We have multiple offices across the UK. We have a new office in London which is becoming more central to where we collaborate in person. We have a flexible working policy with a few days per week in the office. Right to Work: Applicants must already hold a legal right to work in the UK without time restrictions and without the need for future sponsorship. We are unable to provide Skilled Worker visa sponsorship.
25/07/2026
Full time
Cloud Platform Engineer (Senior / Lead) Department: Technology Employment Type: Permanent - Full Time Location: London Reporting To: Description About the role We are looking for a hands on Senior / Lead Cloud Platform Engineer to shape and run the multi cloud foundation that our engineering, data and product teams build on everyday. This is a senior individual contributor / tech lead role at the heart of a modern hybrid cloud strategy. Our goal is to make cloud infrastructure effectively invisible and commoditised for internal teams: engineers should ship through self service golden paths and a well designed internal developer platform, without needing to understand the underlying cloud plumbing. You will treat platform capabilities as products, with clear APIs, paved roads, strong defaults and great developer experience. A defining part of this role is preparing our infrastructure for a future (or present) where some "engineers" are AI agents. You will design platforms, guardrails and interfaces that let both human engineers and autonomous AI agents provision, operate and optimise infrastructure safely - and you will use AI agents heavily yourself to automate and optimise day to day platform work. Security is central, not an afterthought. You will help drive a zero trust approach across identity, network, workloads and data, ensuring the platform is secure by default for humans and machine/agent identities alike. You will also work closely with our data function, helping design and optimise the data pipelines, data stores and large scale analytics infrastructure (for example BigQuery and similar warehouses) that the business depends on. What you'll do Design, build and operate our multi cloud and hybrid cloud platform across at least two of the top three providers (AWS, Azure and/or Google Cloud), plus on prem/hybrid connectivity where needed. Build and own an internal developer platform and self service "golden paths" that make cloud infrastructure feel invisible and commoditised for engineering, data and product teams; and their AI agents. Deliver everything as code: infrastructure as code, GitOps, reusable modules, CI/CD pipelines and policy as code guardrails. Leverage AI agents extensively to automate and optimise platform work-provisioning, cost and performance optimisation, incident response, remediation and documentation. Prepare the infrastructure for AI agents as first class "engineers": safe machine identities, scoped permissions, sandboxes, approval workflows and audit trails so agents can provision and operate infrastructure within tight guardrails. Embed a zero trust security model across identity, network, workloads and data for both human and machine/agent identities; secure by default, least privilege, secrets management and continuous compliance. Apply SRE practices-SLOs/SLIs, observability, capacity planning, resilience and blameless incident management-to keep the platform reliable and cost efficient. Partner with data engineering to design and optimise data pipelines, data stores and large scale analytics infrastructure such as BigQuery, including query, cost and performance tuning. Mentor engineers, set technical direction and champion strong platform and security engineering standards across the organisation. What you'll need to succeed Essential requirements: Extensive hands on experience designing, building and operating production cloud infrastructure at senior or lead level. Multi cloud experience across at least two of the top three providers (AWS, Microsoft Azure and Google Cloud), including a recognised professional level cloud certification for each of those two providers (for example AWS Solutions Architect / DevOps Engineer Professional, Azure Solutions Architect / DevOps Engineer Expert, or Google Cloud Professional Cloud Architect / DevOps Engineer). Strong background in modern hybrid cloud architecture and connecting cloud with on prem/edge environments. Deep infrastructure as code and automation skills (e.g. Terraform/OpenTofu, Pulumi, Ansible), GitOps and CI/CD, plus containers and orchestration (Docker, Kubernetes). Proven experience building internal developer platforms, self service golden paths and platform as a product to abstract away cloud complexity for engineering teams. Practical experience using AI agents / LLM based tooling to automate and optimise infrastructure work, and interest in designing infrastructure that AI agents can operate safely. Strong security engineering mindset with hands on zero trust experience across identity, network, workloads and data-including secrets management, least privilege IAM and machine/workload identity. Solid programming/scripting ability (e.g. Python, Go) and strong observability, reliability and cost optimisation practices. Desirable requirements: Experience working as a Site Reliability Engineer (SRE) with SLOs/SLIs, error budgets and incident management. A third top tier cloud certification, or specialist security/Kubernetes certifications (e.g. CKA/CKS). Significant data engineering experience: designing and operating data pipelines and data stores, and optimising databases and large scale data infrastructure such as BigQuery (including query, cost and performance tuning). Experience preparing environments for autonomous or agentic workloads-sandboxes, scoped machine identities, approval workflows and audit trails. Experience in a regulated or fintech environment. Your approach to work: Pragmatic and hands on, with a strong bias for automation and eliminating toil. Product mindset- you treat internal engineers (human and AI) as your customers and obsess over their experience. Security and reliability first, collaborative, and comfortable leading and mentoring. Important to know Location: We have multiple offices across the UK. We have a new office in London which is becoming more central to where we collaborate in person. We have a flexible working policy with a few days per week in the office. Right to Work: Applicants must already hold a legal right to work in the UK without time restrictions and without the need for future sponsorship. We are unable to provide Skilled Worker visa sponsorship.
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Engineer, Infrastructure based in United Kingdom. Join an innovative engineering team building the infrastructure that powers advanced AI-driven products and agent-based workflows. In this role, you will design, operate, and improve highly scalable cloud platforms that enable reliable software delivery and efficient production systems. You will work across Kubernetes, cloud architecture, security, networking, data infrastructure, and developer tooling while solving complex technical challenges in a rapidly evolving environment. This position combines hands on software engineering with infrastructure ownership, giving you the opportunity to shape platform foundations, improve operational excellence, and directly influence how engineering teams build and deploy products. It is an ideal opportunity for an experienced infrastructure engineer who enjoys automation, solving ambiguous problems, and creating systems that scale. Accountabilities Design, build, and operate reliable infrastructure platforms supporting AI-powered products and large-scale production workloads. Own and improve Kubernetes environments, including cluster architecture, networking, ingress, service communication, workload isolation, autoscaling, and deployment practices. Develop and maintain cloud infrastructure across areas such as networking, security, identity management, secrets, firewalls, content delivery, and access controls. Improve system reliability through enhanced observability, monitoring, alerting, incident response processes, disaster recovery planning, and resilience improvements. Build and optimize infrastructure automation using infrastructure-as-code, CI/CD pipelines, GitOps workflows, and reusable platform tooling. Investigate and resolve complex production issues across application, infrastructure, networking, and data system layers. Improve infrastructure efficiency through cost optimization, capacity planning, resource management, and operational improvements. Support scalable data systems and distributed technologies, ensuring strong performance and reliability. Identify architectural bottlenecks and proactively develop solutions that prepare the platform for future growth and increasing AI workloads. Reduce operational complexity by replacing manual processes with automated, scalable engineering solutions. Requirements Strong software engineering background with experience writing and maintaining production-quality code. Proven experience designing, building, and operating infrastructure on major cloud platforms such as GCP, AWS, or similar environments. Hands on production experience with Kubernetes and containerized infrastructure. Strong understanding of cloud networking and security concepts, including VPCs, IAM, load balancing, DNS, firewalls, WAFs, CDNs, and service identity. Experience with infrastructure-as-code tools and automated deployment systems. Ability to debug and solve complex issues across software applications, infrastructure components, networking layers, and distributed systems. Experience operating large-scale distributed technologies such as OpenSearch, Elasticsearch, PostgreSQL, or similar systems. Strong focus on reliability, security, developer experience, and infrastructure cost efficiency. Proactive mindset with the ability to identify improvements, eliminate operational complexity, and take ownership of critical systems. Strong engineering fundamentals, problem-solving skills, and the ability to quickly learn unfamiliar technologies. Experience deploying or operating large language models with serving frameworks such as vLLM or SGLang is considered an advantage. Benefits Fully remote position with the flexibility to work from Europe. Opportunity to shape infrastructure foundations for next-generation AI-powered products. High level of ownership and direct impact on technical strategy and product development. Competitive equity package aligned with company growth and individual contribution. Opportunity to work alongside highly experienced AI and software engineering professionals. Flexible work environment focused on autonomy, trust, and results. Ability to contribute to meaningful projects with visible impact on users and the broader product direction. Culture that values engineering excellence, individual contributors, innovation, and continuous learning. Inclusive workplace committed to diversity and equal opportunities.
25/07/2026
Full time
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Engineer, Infrastructure based in United Kingdom. Join an innovative engineering team building the infrastructure that powers advanced AI-driven products and agent-based workflows. In this role, you will design, operate, and improve highly scalable cloud platforms that enable reliable software delivery and efficient production systems. You will work across Kubernetes, cloud architecture, security, networking, data infrastructure, and developer tooling while solving complex technical challenges in a rapidly evolving environment. This position combines hands on software engineering with infrastructure ownership, giving you the opportunity to shape platform foundations, improve operational excellence, and directly influence how engineering teams build and deploy products. It is an ideal opportunity for an experienced infrastructure engineer who enjoys automation, solving ambiguous problems, and creating systems that scale. Accountabilities Design, build, and operate reliable infrastructure platforms supporting AI-powered products and large-scale production workloads. Own and improve Kubernetes environments, including cluster architecture, networking, ingress, service communication, workload isolation, autoscaling, and deployment practices. Develop and maintain cloud infrastructure across areas such as networking, security, identity management, secrets, firewalls, content delivery, and access controls. Improve system reliability through enhanced observability, monitoring, alerting, incident response processes, disaster recovery planning, and resilience improvements. Build and optimize infrastructure automation using infrastructure-as-code, CI/CD pipelines, GitOps workflows, and reusable platform tooling. Investigate and resolve complex production issues across application, infrastructure, networking, and data system layers. Improve infrastructure efficiency through cost optimization, capacity planning, resource management, and operational improvements. Support scalable data systems and distributed technologies, ensuring strong performance and reliability. Identify architectural bottlenecks and proactively develop solutions that prepare the platform for future growth and increasing AI workloads. Reduce operational complexity by replacing manual processes with automated, scalable engineering solutions. Requirements Strong software engineering background with experience writing and maintaining production-quality code. Proven experience designing, building, and operating infrastructure on major cloud platforms such as GCP, AWS, or similar environments. Hands on production experience with Kubernetes and containerized infrastructure. Strong understanding of cloud networking and security concepts, including VPCs, IAM, load balancing, DNS, firewalls, WAFs, CDNs, and service identity. Experience with infrastructure-as-code tools and automated deployment systems. Ability to debug and solve complex issues across software applications, infrastructure components, networking layers, and distributed systems. Experience operating large-scale distributed technologies such as OpenSearch, Elasticsearch, PostgreSQL, or similar systems. Strong focus on reliability, security, developer experience, and infrastructure cost efficiency. Proactive mindset with the ability to identify improvements, eliminate operational complexity, and take ownership of critical systems. Strong engineering fundamentals, problem-solving skills, and the ability to quickly learn unfamiliar technologies. Experience deploying or operating large language models with serving frameworks such as vLLM or SGLang is considered an advantage. Benefits Fully remote position with the flexibility to work from Europe. Opportunity to shape infrastructure foundations for next-generation AI-powered products. High level of ownership and direct impact on technical strategy and product development. Competitive equity package aligned with company growth and individual contribution. Opportunity to work alongside highly experienced AI and software engineering professionals. Flexible work environment focused on autonomy, trust, and results. Ability to contribute to meaningful projects with visible impact on users and the broader product direction. Culture that values engineering excellence, individual contributors, innovation, and continuous learning. Inclusive workplace committed to diversity and equal opportunities.
Role Profile The Senior lead Scala Engineer will play a key role in the engineering and delivery of a critical market infrastructure service within the Equities platform, with a strong focus on AWS cloud native development. Reporting directly to the Senior Technical Delivery Engineer, Post Trade, the successful candidate will be responsible for designing, implementing, and maintaining performant, resilient, and scalable backend services built predominantly in Scala. As a senior member of the engineering team, this individual will help shape technical direction, contribute to best in class engineering standards, and actively support the continued growth and evolution of the business. Key Responsibilities Adopt an open and hands on approach to problem solving and delivery, focusing on engineering excellence and coding. Engage deeply in technical design and implementation to ensure solutions are robust, scalable, and aligned with industry best practices. Actively contribute to all stages of the product engineering life cycle-solutioning, design, coding, and testing-while promoting collaboration and transparency within the team. Demonstrate ownership and pride in work, proactively taking on new responsibilities aligned with product engineering needs. Apply LSEG engineering principles, building with purpose and fostering excellence through open collaboration. Create an environment of engagement, challenge, and constructive questioning, ensuring trust, respect, and a strong one team mentality. Key Skills & Experience Event driven microservices architecture - Strong understanding of microservices design, DDD, event driven principles, containerization with Docker and Kubernetes, and expert use of event driven patterns for communication. Advanced Scala programming - Deep practical expertise in Scala, functional and object oriented paradigms, familiarity with Akka, Play Framework, Cats/Scalaz, and enterprise grade application delivery. Database Management - Strong SQL knowledge, experience with Postgres, object storage solutions (AWS S3), and database version control tools (Flyway, Liquibase). Cloud Architecture - Experience with AWS services such as Aurora, MSK, S3, IAM, and basic understanding of cloud networking concepts. Agile Ways of Working - Proven commitment to Agile, Scrum and Kanban frameworks, active participation in sprint ceremonies, and collaboration with cross functional teams. Other Technical Skills - Experience writing applications using Java, developing web applications with ReactJS, building and maintaining DevOps pipelines (GitLab), shift left testing (JUnit, Cucumber, Gherkin, PACT, Test Containers), and working with message brokers (Kafka, MQ). Career Stage Manager Equal Opportunity Statement LSEG is a proud equal opportunities employer and makes no discrimination on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, pregnancy or disability.
25/07/2026
Full time
Role Profile The Senior lead Scala Engineer will play a key role in the engineering and delivery of a critical market infrastructure service within the Equities platform, with a strong focus on AWS cloud native development. Reporting directly to the Senior Technical Delivery Engineer, Post Trade, the successful candidate will be responsible for designing, implementing, and maintaining performant, resilient, and scalable backend services built predominantly in Scala. As a senior member of the engineering team, this individual will help shape technical direction, contribute to best in class engineering standards, and actively support the continued growth and evolution of the business. Key Responsibilities Adopt an open and hands on approach to problem solving and delivery, focusing on engineering excellence and coding. Engage deeply in technical design and implementation to ensure solutions are robust, scalable, and aligned with industry best practices. Actively contribute to all stages of the product engineering life cycle-solutioning, design, coding, and testing-while promoting collaboration and transparency within the team. Demonstrate ownership and pride in work, proactively taking on new responsibilities aligned with product engineering needs. Apply LSEG engineering principles, building with purpose and fostering excellence through open collaboration. Create an environment of engagement, challenge, and constructive questioning, ensuring trust, respect, and a strong one team mentality. Key Skills & Experience Event driven microservices architecture - Strong understanding of microservices design, DDD, event driven principles, containerization with Docker and Kubernetes, and expert use of event driven patterns for communication. Advanced Scala programming - Deep practical expertise in Scala, functional and object oriented paradigms, familiarity with Akka, Play Framework, Cats/Scalaz, and enterprise grade application delivery. Database Management - Strong SQL knowledge, experience with Postgres, object storage solutions (AWS S3), and database version control tools (Flyway, Liquibase). Cloud Architecture - Experience with AWS services such as Aurora, MSK, S3, IAM, and basic understanding of cloud networking concepts. Agile Ways of Working - Proven commitment to Agile, Scrum and Kanban frameworks, active participation in sprint ceremonies, and collaboration with cross functional teams. Other Technical Skills - Experience writing applications using Java, developing web applications with ReactJS, building and maintaining DevOps pipelines (GitLab), shift left testing (JUnit, Cucumber, Gherkin, PACT, Test Containers), and working with message brokers (Kafka, MQ). Career Stage Manager Equal Opportunity Statement LSEG is a proud equal opportunities employer and makes no discrimination on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, pregnancy or disability.
We're hiring a Senior Security Engineer to lead and raise the bar for enterprise security at Spotify. In this role, you'll be hands on across core security domains, IAM, endpoint management, networking, and shaping how we secure an increasingly AI enabled enterprise. You'll build tooling and automation, define policies and guardrails, and partner closely with teams across IT, infrastructure, legal, and beyond to keep Spotify moving fast without compromising on security. The ideal candidate brings solid professional experience in enterprise security, strong technical foundations, and a genuine comfort with AI, both as a tool to augment their own work and as a surface area to secure. Just as importantly, you're an excellent communicator who can translate security priorities into language that resonates across a global, cross functional organization. What You'll Do Drive the evolution of Spotify's enterprise security program by identifying gaps, proposing improvements, and implementing changes that balance strong security with a frictionless employee experience Design and build security automation, integrations, and internal tooling to scale enterprise security and reduce manual toil. Collect and analyze high quality security data to improve detection capabilities and generate data driven insights that shape the direction of the enterprise security program Define and implement security hardening, guardrails and policies for enterprise applications and SaaS platforms. Partner with Site Reliability, IT, and other Security teams to provide expert guidance on enterprise security best practices and drive meaningful improvements to systems and processes. Investigate, propose and implement changes to Spotify's Enterprise Security posture across domains including: IAM, Single Sign on, Endpoint Management, and Networking. Lead governance and oversight of enterprise security tooling, including password managers and enterprise browsers. Champion and enforce enterprise security best practices across endpoints, enterprise products, and network infrastructure, advising bandmates and teams along the way. Collaborate closely with IT, infrastructure, legal and communications to ensure a coordinated approach to enterprise security. Mentor and support the growth of engineers around you, raising the security bar across the organization. Who You Are You have several years of experience in enterprise security at fast moving technology companies. Alternatively, you have deep expertise in enterprise systems engineering and are ready to transition into a security-focused career. You have demonstrated experience applying enterprise security principles across IAM, SSO, networking, and device management, and you understand how these domains interrelate to form a cohesive security foundation. You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries. You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are eager to get hands on identifying and mitigating these risks in our environment. You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges. You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk. You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in a SaaS driven enterprise environment. You communicate complex security topics clearly to both technical and non technical audiences, and you're skilled at building alignment across a global, cross functional organization. You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking. Where You'll Be We offer you the flexibility to work where you work best! For this role, you can be within the EMEA region as long as we have a work location (excluding France due to on call restrictions). This team operates within the Central European and GMT time zone for collaboration. Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what's playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward thinking! So bring us your personal experience, your perspectives, and your background. It's in our differences that we will find the power to keep revolutionizing the way the world listens. At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we're here to support you in any way we can. Spotify transformed music listening forever when we launched in 2008. Our mission is to unlock the potential of human creativity by giving a million creative artists the opportunity to live off their art and billions of fans the chance to enjoy and be passionate about these creators. Everything we do is driven by our love for music and podcasting. Today, we are the world's most popular audio streaming subscription service.
25/07/2026
Full time
We're hiring a Senior Security Engineer to lead and raise the bar for enterprise security at Spotify. In this role, you'll be hands on across core security domains, IAM, endpoint management, networking, and shaping how we secure an increasingly AI enabled enterprise. You'll build tooling and automation, define policies and guardrails, and partner closely with teams across IT, infrastructure, legal, and beyond to keep Spotify moving fast without compromising on security. The ideal candidate brings solid professional experience in enterprise security, strong technical foundations, and a genuine comfort with AI, both as a tool to augment their own work and as a surface area to secure. Just as importantly, you're an excellent communicator who can translate security priorities into language that resonates across a global, cross functional organization. What You'll Do Drive the evolution of Spotify's enterprise security program by identifying gaps, proposing improvements, and implementing changes that balance strong security with a frictionless employee experience Design and build security automation, integrations, and internal tooling to scale enterprise security and reduce manual toil. Collect and analyze high quality security data to improve detection capabilities and generate data driven insights that shape the direction of the enterprise security program Define and implement security hardening, guardrails and policies for enterprise applications and SaaS platforms. Partner with Site Reliability, IT, and other Security teams to provide expert guidance on enterprise security best practices and drive meaningful improvements to systems and processes. Investigate, propose and implement changes to Spotify's Enterprise Security posture across domains including: IAM, Single Sign on, Endpoint Management, and Networking. Lead governance and oversight of enterprise security tooling, including password managers and enterprise browsers. Champion and enforce enterprise security best practices across endpoints, enterprise products, and network infrastructure, advising bandmates and teams along the way. Collaborate closely with IT, infrastructure, legal and communications to ensure a coordinated approach to enterprise security. Mentor and support the growth of engineers around you, raising the security bar across the organization. Who You Are You have several years of experience in enterprise security at fast moving technology companies. Alternatively, you have deep expertise in enterprise systems engineering and are ready to transition into a security-focused career. You have demonstrated experience applying enterprise security principles across IAM, SSO, networking, and device management, and you understand how these domains interrelate to form a cohesive security foundation. You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries. You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are eager to get hands on identifying and mitigating these risks in our environment. You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges. You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk. You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in a SaaS driven enterprise environment. You communicate complex security topics clearly to both technical and non technical audiences, and you're skilled at building alignment across a global, cross functional organization. You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking. Where You'll Be We offer you the flexibility to work where you work best! For this role, you can be within the EMEA region as long as we have a work location (excluding France due to on call restrictions). This team operates within the Central European and GMT time zone for collaboration. Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what's playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward thinking! So bring us your personal experience, your perspectives, and your background. It's in our differences that we will find the power to keep revolutionizing the way the world listens. At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we're here to support you in any way we can. Spotify transformed music listening forever when we launched in 2008. Our mission is to unlock the potential of human creativity by giving a million creative artists the opportunity to live off their art and billions of fans the chance to enjoy and be passionate about these creators. Everything we do is driven by our love for music and podcasting. Today, we are the world's most popular audio streaming subscription service.
Founding Security Engineer (Application & Infrastructure) Build the shield that makes Enterprise Superintelligence trustworthy London / Remote • Full-time • Pavo Labs About Pavo Pavo is building Enterprise Superintelligence: compounding systems that take ownership of business outcomes and work with humans to deliver them. We believe that while foundation models are necessary, they are not sufficient. The hard problem is systems intelligence: end-to-end architectures that understand a company's code, data, and decisions, and improve themselves through experience. We are assembling a small, senior team of researchers and engineers obsessed with systems-first intelligence. Our current team consists of PhDs and ML engineers from top applied ML and coding agent companies, with a heritage of shipping systems at Spotify, ShareChat, and Sourcegraph scale. Our team has built impressive momentum with a small group of highly capable engineers and researchers. The Opportunity As a Founding Security Engineer, you will help establish the security foundations for Pavo's agentic and knowledge systems. You help secure autonomous systems that write code, execute tools, and interact with sensitive enterprise data. This role sits at the bleeding edge of AI Security, wherein you harden the infrastructure that allows our knowledge and agentic systems to work safely inside Fortune 500 environments. You will build the shield that makes Enterprise Superintelligence trustworthy. What You'll Build You will own the holistic security posture of the Pavo platform, spanning Application, AI, and Infrastructure security: AI & Application Security: Lead the defense against LLM-specific vulnerabilities (Prompt Injection, Insecure Output Handling) and standard web threats (OWASP Top 10). Implement "Guardrails" that sanitize agent inputs/outputs and conduct continuous red-teaming of our agent behaviors. Secure SDLC & DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters and compute environments. Design strict IAM policies (least privilege for agents) and ensure network isolation so that agent execution environments are impenetrable. Vulnerability Management: Own the lifecycle of vulnerability detection and remediation. Manage bug bounty programs, coordinate third-party pentests, and ensure our open-source dependencies (and the code our agents generate) are secure. Enterprise Trust: Help design features that give our customers confidence, such as audit logging, data residency controls, and rigorous access governance. What We Are Looking For We are looking for a security practitioner who is a builder at heart-someone who would rather ship a secure fix than write a policy document. Core Qualifications Experience: 5+ years of experience in Security Engineering, with a strong focus on Application Security and Cloud Security. AppSec Proficiency: Deep understanding of modern web vulnerabilities (CSRF, SSRF, XSS) and experience utilizing tools like Burp Suite, Semgrep, or CodeQL. Review code in Python or Go and spot logic flaws that scanners miss. AI Security Curiosity: Understand the unique risks of LLMs. Familiar with the OWASP Top 10 for LLMs and have explored defenses against prompt injection and data exfiltration in agentic systems. Cloud Native Security: Hands-on experience securing AWS/GCP environments and Kubernetes clusters. Knowledge of container security (capabilities, seccomp, namespaces) and how to secure microservices architectures. Offensive Mindset: Experience with Red Teaming or CTFs. Think like an attacker to uncover weaknesses in business logic and agent reasoning. Nice to Have Experience securing execution sandboxes (gVisor, Firecracker, or similar). Background in "Purple Teaming"-collaborating with developers to fix what you break. Contributions to the open-source security community or research on AI safety. Knowledge of compliance frameworks (SOC 2, ISO 27001) in an early-stage startup context. Why Join Us Founding Equity: Significant ownership in a company tackling the next layer of the AI stack. Frontier Security: Define the security standards for a new category of software-autonomous enterprise agents. World-Class Team: Collaborate with a dense talent cluster of researchers and engineers who have shipped products serving hundreds of millions of users. Pavo is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
25/07/2026
Full time
Founding Security Engineer (Application & Infrastructure) Build the shield that makes Enterprise Superintelligence trustworthy London / Remote • Full-time • Pavo Labs About Pavo Pavo is building Enterprise Superintelligence: compounding systems that take ownership of business outcomes and work with humans to deliver them. We believe that while foundation models are necessary, they are not sufficient. The hard problem is systems intelligence: end-to-end architectures that understand a company's code, data, and decisions, and improve themselves through experience. We are assembling a small, senior team of researchers and engineers obsessed with systems-first intelligence. Our current team consists of PhDs and ML engineers from top applied ML and coding agent companies, with a heritage of shipping systems at Spotify, ShareChat, and Sourcegraph scale. Our team has built impressive momentum with a small group of highly capable engineers and researchers. The Opportunity As a Founding Security Engineer, you will help establish the security foundations for Pavo's agentic and knowledge systems. You help secure autonomous systems that write code, execute tools, and interact with sensitive enterprise data. This role sits at the bleeding edge of AI Security, wherein you harden the infrastructure that allows our knowledge and agentic systems to work safely inside Fortune 500 environments. You will build the shield that makes Enterprise Superintelligence trustworthy. What You'll Build You will own the holistic security posture of the Pavo platform, spanning Application, AI, and Infrastructure security: AI & Application Security: Lead the defense against LLM-specific vulnerabilities (Prompt Injection, Insecure Output Handling) and standard web threats (OWASP Top 10). Implement "Guardrails" that sanitize agent inputs/outputs and conduct continuous red-teaming of our agent behaviors. Secure SDLC & DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters and compute environments. Design strict IAM policies (least privilege for agents) and ensure network isolation so that agent execution environments are impenetrable. Vulnerability Management: Own the lifecycle of vulnerability detection and remediation. Manage bug bounty programs, coordinate third-party pentests, and ensure our open-source dependencies (and the code our agents generate) are secure. Enterprise Trust: Help design features that give our customers confidence, such as audit logging, data residency controls, and rigorous access governance. What We Are Looking For We are looking for a security practitioner who is a builder at heart-someone who would rather ship a secure fix than write a policy document. Core Qualifications Experience: 5+ years of experience in Security Engineering, with a strong focus on Application Security and Cloud Security. AppSec Proficiency: Deep understanding of modern web vulnerabilities (CSRF, SSRF, XSS) and experience utilizing tools like Burp Suite, Semgrep, or CodeQL. Review code in Python or Go and spot logic flaws that scanners miss. AI Security Curiosity: Understand the unique risks of LLMs. Familiar with the OWASP Top 10 for LLMs and have explored defenses against prompt injection and data exfiltration in agentic systems. Cloud Native Security: Hands-on experience securing AWS/GCP environments and Kubernetes clusters. Knowledge of container security (capabilities, seccomp, namespaces) and how to secure microservices architectures. Offensive Mindset: Experience with Red Teaming or CTFs. Think like an attacker to uncover weaknesses in business logic and agent reasoning. Nice to Have Experience securing execution sandboxes (gVisor, Firecracker, or similar). Background in "Purple Teaming"-collaborating with developers to fix what you break. Contributions to the open-source security community or research on AI safety. Knowledge of compliance frameworks (SOC 2, ISO 27001) in an early-stage startup context. Why Join Us Founding Equity: Significant ownership in a company tackling the next layer of the AI stack. Frontier Security: Define the security standards for a new category of software-autonomous enterprise agents. World-Class Team: Collaborate with a dense talent cluster of researchers and engineers who have shipped products serving hundreds of millions of users. Pavo is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Novatus is a Series B scale-up RegTech SaaS provider and boutique advisory practice, enabling financial services firms to solve complex challenges and redefine what's possible through expert-led technology and consulting. Across both our technology and consulting services, Novatus delivers practical solutions to some of the most complex regulatory, data and operational challenges in financial services. Our SaaS platform, En>ACT ( short for Ensuring Accurate, Complete and Timely reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation, providing real-time, independent oversight of transaction reporting across all global regulatory regimes. En>ACT is the only real-time assurance solution that tests 100% of transactions and 100% of fields, replacing sample-based reviews and static PDF reports delivered months after the event with live, actionable insights. This helps firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 45 firms worldwide, the platform is scalable, proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services to solve complex challenges, combining deep expertise, ownership and delivery to create lasting change. Our expertise spans Strategy & Operations, Data & AI, Risk & Resilience, Compliance, Transaction Reporting, and ESG. We embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in 2019, we have scaled rapidly, creating space for our people to grow the business. Backed by North American private equity investment, and partnerships with the London Stock Exchange Group and Snowflake's global data platform, we are shaping the future of financial services through innovation in both consulting and technology. Now a team of 120 globally, our growth plans do not stop here: we are looking for top-tier talent to join us on our journey and enable our next phase of success. Senior DevOps Engineer Novatus HQ - 2 London Wall Place, EC2Y 5AU Job Overview: As a Senior DevOps Engineer , you will scope and deliver complex infrastructure projects end-to-end, building and maintaining scalable, secure, and performant systems. You'll contribute to our technology direction and drive initiatives that align with our business objectives, with an emphasis on automation, delivery pace, reliability, and cost efficiency. This role requires a strong technical background and a proven track record of building and scaling systems in complex environments. You'll be joining as we have begun actively modernizing our infrastructure from traditional deployments to automation and cloud-native systems with AWS, Terraform, GitHub Actions, Databricks, Snowflake and Grafana. Key Responsibilities: Design and implement AWS cloud infrastructure, writing clean and maintainable Infrastructure as Code for repeatable, auditable deployments across environments. Drive reliability, scalability, security, observability and cost efficiency of AWS infrastructure. Provide mentorship to other DevOps engineers, sharing expertise and raising engineering quality across the team. Develop and maintain robust and effective CI/CD pipelines. Troubleshoot and resolve complex infrastructure issues, ensuring minimal impact on business operations. Explore and evaluate new technologies, tools, and patterns that improve platform reliability and delivery pace. Partner with Data Engineering to support platform infrastructure (AWS, Databricks, Snowflake). About You: Requirements: Strong hands-on AWS infrastructure experience, including IAM, VPCs, compute, containers, load balancing, storage, security, resilience, and cost optimization. Hands-on experience deploying and operating applications on Kubernetes in production, including Helm/manifests, ingress, configuration/secrets, observability, and troubleshooting live workloads. Proficient with Infrastructure as Code, especially Terraform, with experience building maintainable, reusable modules and environment patterns. Solid production networking knowledge: TCP/IP, DNS, TLS, BGP, routing, subnets, NAT, firewalls/security groups, VPN/private connectivity, load balancers, and practical troubleshooting. Experience operating cloud infrastructure in regulated environments (e.g. GDPR, ISO 27001, SOC 2). Experience designing observability, monitoring, logging, and alerting solutions for distributed systems. Strong software engineering ability beyond basic scripting. Ideally someone who has contributed to larger software projects or built maintainable platform/backend tooling in a language such as Python, Go, Java, TypeScript, or similar. Comfortable using modern AI-assisted engineering workflows, including agentic coding tools and LLM-based automation. Familiarity with concepts such as MCP servers, tool-calling, RAG/vector search, embeddings, and AI-assisted platform operations. Working knowledge of databases and data platforms, including SQL databases such as PostgreSQL/MySQL and exposure to NoSQL or distributed data stores. Track record of independently scoping and delivering complex infrastructure projects end-to-end. Experience mentoring engineers and sharing technical expertise across a team. Excellent communication and stakeholder management skills. Nice-to-haves: Relevant certifications (e.g., AWS Certified Solutions Architect, AWS Certified Security, or AWS Certified DevOps Engineer). Databricks and/or Snowflake infrastructure experience. Kafka operations or other event streaming platforms. Experience on infrastructure modernization or migration programs. FinTech, RegTech, or financial services background. Why Join Us? Work Across Disciplines: You won't be confined to a single track- you will develop a broader skillset across our capabilities and offerings. Solve Problems that Matter: Work on complex challenges, where your thinking, analysis, and execution have real impact. Flat, Visible, Collaborative: We keep the structure flat, so you can collaborate directly with senior leaders and experienced specialists. Your work is visible, your perspectives are valued, and you will see the impact of your contributions every day. A Place for Builders: This is a great place for people who enjoy driving results and taking ownership. If you are driven to add value and help grow our business, you will enjoy a rewarding experience that recognises your contributions. Perks & Benefits: Private Medical Insurance (via AXA): includes mental health, dental, vision, and private GP access Life Insurance - 4 salary (via Unum) Unum's : includes GP access, medical second opinions, physiotherapy, lifestyle coaching, savings and discounts, mental health support, bereavement counselling, and cancer support services for you, your partner, and your child(ren) Salary sacrifice childcare and nursery scheme (via YellowNest) Employee Assistance Programme Enhanced parental leave (maternity & paternity) Professional qualification sponsorship Accelerated career progression based on readiness and performance, not tenure or time spent in role Holiday entitlement increases with tenure Flexible hours with core collaboration time Paid volunteering leave Gym & fitness discounts Bi-annual socials Office snacks and drinks Interest-based working groups to collaborate and innovate Novatus' Equal Opportunities Statement: Novatus is an Equal Opportunity Employer. All employment decisions are made based on business needs, role requirements, and individual qualifications, without regard to race, age, religion or belief, sex, sexual orientation, gender identity or expression, marital or civil partnership status, pregnancy or maternity, socioeconomic background, disability, or any other characteristic protected under the Equality Act 2010. We maintain a workplace culture that is inclusive, respectful, and supportive. Our recruitment and selection processes are designed to ensure fairness and consistency for all candidates. Reasonable adjustments are available throughout the application and interview process, and candidates are encouraged to contact Human Resources to discuss any specific requirements. This commitment is embedded in all aspects of our employment practices, including recruitment, compensation, professional development, promotion, and workplace conduct.
25/07/2026
Full time
Novatus is a Series B scale-up RegTech SaaS provider and boutique advisory practice, enabling financial services firms to solve complex challenges and redefine what's possible through expert-led technology and consulting. Across both our technology and consulting services, Novatus delivers practical solutions to some of the most complex regulatory, data and operational challenges in financial services. Our SaaS platform, En>ACT ( short for Ensuring Accurate, Complete and Timely reporting ), is a market-leading solution for regulatory transaction reporting and reconciliation, providing real-time, independent oversight of transaction reporting across all global regulatory regimes. En>ACT is the only real-time assurance solution that tests 100% of transactions and 100% of fields, replacing sample-based reviews and static PDF reports delivered months after the event with live, actionable insights. This helps firms remediate quickly, reduce risk, and meet regulatory obligations with confidence. Already trusted by more than 45 firms worldwide, the platform is scalable, proven, and designed for both business and technical users. Alongside our SaaS offering, our unique model delivers consulting services to solve complex challenges, combining deep expertise, ownership and delivery to create lasting change. Our expertise spans Strategy & Operations, Data & AI, Risk & Resilience, Compliance, Transaction Reporting, and ESG. We embed ourselves within client teams to deliver both insight and execution, taking ownership of outcomes and driving measurable impact. Since our launch in 2019, we have scaled rapidly, creating space for our people to grow the business. Backed by North American private equity investment, and partnerships with the London Stock Exchange Group and Snowflake's global data platform, we are shaping the future of financial services through innovation in both consulting and technology. Now a team of 120 globally, our growth plans do not stop here: we are looking for top-tier talent to join us on our journey and enable our next phase of success. Senior DevOps Engineer Novatus HQ - 2 London Wall Place, EC2Y 5AU Job Overview: As a Senior DevOps Engineer , you will scope and deliver complex infrastructure projects end-to-end, building and maintaining scalable, secure, and performant systems. You'll contribute to our technology direction and drive initiatives that align with our business objectives, with an emphasis on automation, delivery pace, reliability, and cost efficiency. This role requires a strong technical background and a proven track record of building and scaling systems in complex environments. You'll be joining as we have begun actively modernizing our infrastructure from traditional deployments to automation and cloud-native systems with AWS, Terraform, GitHub Actions, Databricks, Snowflake and Grafana. Key Responsibilities: Design and implement AWS cloud infrastructure, writing clean and maintainable Infrastructure as Code for repeatable, auditable deployments across environments. Drive reliability, scalability, security, observability and cost efficiency of AWS infrastructure. Provide mentorship to other DevOps engineers, sharing expertise and raising engineering quality across the team. Develop and maintain robust and effective CI/CD pipelines. Troubleshoot and resolve complex infrastructure issues, ensuring minimal impact on business operations. Explore and evaluate new technologies, tools, and patterns that improve platform reliability and delivery pace. Partner with Data Engineering to support platform infrastructure (AWS, Databricks, Snowflake). About You: Requirements: Strong hands-on AWS infrastructure experience, including IAM, VPCs, compute, containers, load balancing, storage, security, resilience, and cost optimization. Hands-on experience deploying and operating applications on Kubernetes in production, including Helm/manifests, ingress, configuration/secrets, observability, and troubleshooting live workloads. Proficient with Infrastructure as Code, especially Terraform, with experience building maintainable, reusable modules and environment patterns. Solid production networking knowledge: TCP/IP, DNS, TLS, BGP, routing, subnets, NAT, firewalls/security groups, VPN/private connectivity, load balancers, and practical troubleshooting. Experience operating cloud infrastructure in regulated environments (e.g. GDPR, ISO 27001, SOC 2). Experience designing observability, monitoring, logging, and alerting solutions for distributed systems. Strong software engineering ability beyond basic scripting. Ideally someone who has contributed to larger software projects or built maintainable platform/backend tooling in a language such as Python, Go, Java, TypeScript, or similar. Comfortable using modern AI-assisted engineering workflows, including agentic coding tools and LLM-based automation. Familiarity with concepts such as MCP servers, tool-calling, RAG/vector search, embeddings, and AI-assisted platform operations. Working knowledge of databases and data platforms, including SQL databases such as PostgreSQL/MySQL and exposure to NoSQL or distributed data stores. Track record of independently scoping and delivering complex infrastructure projects end-to-end. Experience mentoring engineers and sharing technical expertise across a team. Excellent communication and stakeholder management skills. Nice-to-haves: Relevant certifications (e.g., AWS Certified Solutions Architect, AWS Certified Security, or AWS Certified DevOps Engineer). Databricks and/or Snowflake infrastructure experience. Kafka operations or other event streaming platforms. Experience on infrastructure modernization or migration programs. FinTech, RegTech, or financial services background. Why Join Us? Work Across Disciplines: You won't be confined to a single track- you will develop a broader skillset across our capabilities and offerings. Solve Problems that Matter: Work on complex challenges, where your thinking, analysis, and execution have real impact. Flat, Visible, Collaborative: We keep the structure flat, so you can collaborate directly with senior leaders and experienced specialists. Your work is visible, your perspectives are valued, and you will see the impact of your contributions every day. A Place for Builders: This is a great place for people who enjoy driving results and taking ownership. If you are driven to add value and help grow our business, you will enjoy a rewarding experience that recognises your contributions. Perks & Benefits: Private Medical Insurance (via AXA): includes mental health, dental, vision, and private GP access Life Insurance - 4 salary (via Unum) Unum's : includes GP access, medical second opinions, physiotherapy, lifestyle coaching, savings and discounts, mental health support, bereavement counselling, and cancer support services for you, your partner, and your child(ren) Salary sacrifice childcare and nursery scheme (via YellowNest) Employee Assistance Programme Enhanced parental leave (maternity & paternity) Professional qualification sponsorship Accelerated career progression based on readiness and performance, not tenure or time spent in role Holiday entitlement increases with tenure Flexible hours with core collaboration time Paid volunteering leave Gym & fitness discounts Bi-annual socials Office snacks and drinks Interest-based working groups to collaborate and innovate Novatus' Equal Opportunities Statement: Novatus is an Equal Opportunity Employer. All employment decisions are made based on business needs, role requirements, and individual qualifications, without regard to race, age, religion or belief, sex, sexual orientation, gender identity or expression, marital or civil partnership status, pregnancy or maternity, socioeconomic background, disability, or any other characteristic protected under the Equality Act 2010. We maintain a workplace culture that is inclusive, respectful, and supportive. Our recruitment and selection processes are designed to ensure fairness and consistency for all candidates. Reasonable adjustments are available throughout the application and interview process, and candidates are encouraged to contact Human Resources to discuss any specific requirements. This commitment is embedded in all aspects of our employment practices, including recruitment, compensation, professional development, promotion, and workplace conduct.
The position works closely with IAM architects, business stakeholders and technology partners. In this role, you will: Build and maintain cloud-native platform services supporting the IDAM 2.0 programme. Design, deploy and manage Kubernetes clusters and supporting platform components. Develop Infrastructure as Code (IaC) for repeatable, automated deployments. Implement and maintain CI/CD pipelines and GitOps deployment workflows. Manage cloud networking, connectivity and platform security. Implement platform observability including logging, monitoring, metrics and distributed tracing. Automate platform provisioning, configuration management and operational tasks. Support deployment and operation of identity platform components and supporting services. Implement secure secrets management and certificate lifecycle automation. Configure service mesh technologies and secure service-to-service communication. Manage ingress, API gateways and network routing components. Implement platform resilience, backup, disaster recovery and high availability capabilities. Support workload identity and platform authentication mechanisms. Ensure platform compliance with enterprise security, governance and regulatory requirements. Optimise platform performance, scalability and cost efficiency. Develop operational tooling, scripts and self-service capabilities. Support incident management, troubleshooting and root cause analysis. Collaborate with Security, Architecture and Engineering teams to deliver secure platform services. Contribute to platform standards, operational documentation and runbooks. Support environment management across development, test, pilot and production environments. Drive continuous improvement through automation and platform engineering best practices. To be successful in this role, you should meet the following requirements: Key Skills & Experience Essential Skills Cloud Platform Engineering (GCP) Kubernetes Administration Infrastructure as Code (Terraform or equivalent) CI/CD Pipelines GitOps Linux Administration Networking and Load Balancing Service Mesh Technologies (Istio/Envoy) Container Platforms Secrets Management PKI and Certificate Management Workload Identity Observability (Logging, Monitoring and Tracing) Scripting and Automation DevSecOps Site Reliability Engineering (SRE) Performance and Capacity Management Operational Support Global Deployment Strategies Positive can-do attitude adept at solutionising in large, complex organisations GCS is acting as an Employment Business in relation to this vacancy.
25/07/2026
Contractor
The position works closely with IAM architects, business stakeholders and technology partners. In this role, you will: Build and maintain cloud-native platform services supporting the IDAM 2.0 programme. Design, deploy and manage Kubernetes clusters and supporting platform components. Develop Infrastructure as Code (IaC) for repeatable, automated deployments. Implement and maintain CI/CD pipelines and GitOps deployment workflows. Manage cloud networking, connectivity and platform security. Implement platform observability including logging, monitoring, metrics and distributed tracing. Automate platform provisioning, configuration management and operational tasks. Support deployment and operation of identity platform components and supporting services. Implement secure secrets management and certificate lifecycle automation. Configure service mesh technologies and secure service-to-service communication. Manage ingress, API gateways and network routing components. Implement platform resilience, backup, disaster recovery and high availability capabilities. Support workload identity and platform authentication mechanisms. Ensure platform compliance with enterprise security, governance and regulatory requirements. Optimise platform performance, scalability and cost efficiency. Develop operational tooling, scripts and self-service capabilities. Support incident management, troubleshooting and root cause analysis. Collaborate with Security, Architecture and Engineering teams to deliver secure platform services. Contribute to platform standards, operational documentation and runbooks. Support environment management across development, test, pilot and production environments. Drive continuous improvement through automation and platform engineering best practices. To be successful in this role, you should meet the following requirements: Key Skills & Experience Essential Skills Cloud Platform Engineering (GCP) Kubernetes Administration Infrastructure as Code (Terraform or equivalent) CI/CD Pipelines GitOps Linux Administration Networking and Load Balancing Service Mesh Technologies (Istio/Envoy) Container Platforms Secrets Management PKI and Certificate Management Workload Identity Observability (Logging, Monitoring and Tracing) Scripting and Automation DevSecOps Site Reliability Engineering (SRE) Performance and Capacity Management Operational Support Global Deployment Strategies Positive can-do attitude adept at solutionising in large, complex organisations GCS is acting as an Employment Business in relation to this vacancy.
