DevOps / Platform Engineer (Security-Focused)
hace 17 horas
London
Role Overview We are looking for a DevOps / Platform Engineer to design, build, and operate a secure, scalable cloud platform supporting payment and financial systems. You will work across a multi-runtime environment (Laravel/PHP and Node.js) and be responsible for enforcing bank-grade security, observability, and reliability across infrastructure, pipelines, and runtime environments. This role sits at the intersection of: Platform Engineering + DevOps + Security (DevSecOps) Core Responsibilities • Build and manage AWS infrastructure using Terraform (IaC-first), • Operate and scale Kubernetes (EKS) workloads securely, • Design and maintain secure CI/CD pipelines (Bitbucket Pipelines), • Implement end-to-end observability using Datadog, • Metrics, logs, APM, alerting, • Enforce security controls across all layers, • Ensure high availability and performance of production systems, • Lead incident response and postmortems (infra + security), • Maintain auditability and traceability across systems, • Collaborate with engineers to standardise platform patterns Infrastructure & Platform • Strong AWS experience:, • VPCs, subnets, routing, NAT gateways, • IAM (least privilege, role design), • Experience with Terraform, • Modular infrastructure design, • Remote state (secure + collaborative), • Environment isolation (prod/stage/etc.), • Strong Kubernetes (EKS) experience:, • RBAC and workload isolation, • Network policies, • Secure ingress/egress, • Experience supporting:, • Node.js services in production, • Laravel / PHP applications, • Understanding of:, • Multi-service architectures, • Strong experience with:, • PostgreSQL, • MySQL, • Redis, • Understanding of:, • Replication, backups, failover, • Performance tuning under load, • Data integrity and consistency, • Security:, • Encryption at rest and in transit, • Experience building secure pipelines:, • Build isolation, • Artifact integrity, • Dependency control (Node + PHP ecosystems), • Familiarity with:, • Software supply chain risks, • SAST / DAST concepts, • Ability to enforce:, • Version pinning, • Reproducible builds Observability (Datadog-Centric) • Strong hands-on experience with Datadog, • APM (tracing Node & PHP services), • Infrastructure monitoring, • Log aggregation, • Alerting and SLOs, • Ability to:, • Define meaningful alerts (not noisy ones), • Correlate logs, traces, and metrics This is central to the role, not optional. • Strong understanding of:, • Defence-in-depth, • Zero trust architecture, • Least privilege IAM, • Experience implementing:, • Secrets management (AWS Secrets Manager / Vault), • Key management (KMS), • TLS everywhere, • Familiarity with:, • ISO 27001, • Audit logging and traceability, • Experience working in or understanding:, • Payments / financial systems risk models Desirable • Experience in fintech / payments environments, • Experience with Cloudflare (WAF, DNS, edge security), • Experience with:, • Container/image scanning, • Runtime security tools, • Experience integrating legacy or acquired systems, • Experience with hybrid infra (on-prem + cloud) Soft Skills • Strong ownership of platform + security, • Thinks in systems, failure modes, and risk, • Pragmatic (avoids over-engineering, but doesn’t cut security corners), • Clear communicator during incidents and audits, • Comfortable in a high-autonomy startup environment