Senior Platform Engineer - DevSecOps

• Clear communicator – You articulate ideas clearly, write well, and listen with intent. You create shared understanding.

• Product-minded – You’re curious about customer needs, ask “why?”, and advocate for solutions that deliver real value.

• Leads through influence – You raise the bar by mentoring others, setting standards, and sharing knowledge — not by authority.

• Documentation-first thinker – You value written clarity, and help your team by documenting decisions, code, and processes.

Job responsibilities

• Maintain and evolve our cloud infrastructure and container platform (currently AWS EKS, managed as Click Ops which needs to be converted to IAAC infrastructure-as-code such as Terraform). Equivalent experience on comparable platforms is welcome: strong IaC and container fundamentals matter more to us than exact tool parity

• Triage & Resolve failing tests, security alerts from Vanta, working with the engineering team, delegate where needed.

• Play a key role in maintaining our existing SOC 2 and ISO 27001 posture, Automate control enforcement and evidence collection in Vanta, remediate gaps before they become audit findings, and own the technical evidence during surveillance/recertification audits.

• Make key recommendations, experiment and implement new tooling in conjunction with the Head of Engineering.

• Own platform security as a first-class outcome: secure-by-default infrastructure, least-privilege access, and security guardrails encoded as policy-as-code so squads inherit safe defaults

• Keep systems observable, cost-optimised, and scalable, treating security signals (configuration drift, misconfiguration, anomalous access) as first-order telemetry alongside performance

• Automate build, deployment, and release workflows in our CI/CD (currently BuildKite and GitHub, or comparable pipelines), with security embedded in the pipeline: dependency, secret, container, and IaC scanning, plus signed and traceable builds.

• Collaborate with squads to improve developer productivity and environment consistency

• Implement monitoring, alerting, and logging solutions (e.g., OpenTelemetry, CloudWatch or similar)

• Own the technical side of secrets management, identity and access (RBAC/IAM), audit logging, & automate the control enforcement & evidence (Vanta) behind our compliance programs (SOC 2, ISO 27001), partnering with Engineering proactively.

• Evaluate infrastructure readiness for data workloads (Vertex AI, BigQuery, Looker)

• Participate in incident response & on-call for both reliability and security incidents: detection, triage, containment, root-cause analysis, & post-incident review that feeds back into our controls and compliance evidence.

• Conduct experiments that have been signed off by the Head of Engineering & CTO and advise on AI tooling to help with automation and infrastructure health as we grow and scale.

• Ensure infrastructure readiness for AI/ML workloads including BigQuery, Vertex AI, vector DBs (e.g., Pinecone), and GenAI pipelines

• Play a key role in Engineering Discovery ensuring the appropriate observability, logging, monitoring and support attributes are in place to productionise features.

• Build security into our AI platform from the start: LLM security controls (e.g. OWASP LLM Top 10), prompt-injection and data-leakage protection, tenant isolation and PII handling for RAG and vector stores, and access control on model endpoints

• Maintain visibility and provenance over AI components

• Deploy embedding/vector DBs, RAG pipelines

• Work with ML & GenAI models via Vertex AI, OpenAI, Claude, etc.

Job benefits

• Competitive salary offering

• Paid time off to participate in volunteering activities

• Referral bonuses and recognition programs