Job Description

We are working alongside one of our fast-growing clients, a software startup, revolutionising the facilities management industry with innovative, industry-first solutions.

This is a senior hands-on role suited to someone who is equally comfortable improving CI/CD pipelines, hardening cloud infrastructure, troubleshooting complex production issues, driving security uplift, and partnering closely with developers to improve engineering practices.

The successful candidate will help ensure our environments are secure, scalable, cost-effective and operationally robust, while also contributing to the longer-term modernisation of our platform architecture.

The role also carries accountability for core platform security engineering, including identity and access management, data protection, vulnerability management, and implementation of ISO 27001-aligned technical controls.

What you will be responsible for:

• Own and improve AWS infrastructure
• Work with containerised and serverless workloads
• Own cloud security posture including network segmentation, security group design, WAF implementation, and infrastructure hardening aligned to best practices (e.g. CIS benchmarks).
• Maintain and improve CI/CD pipelines
• Improve deployment safety, consistency, rollback capability and release quality
• Establish best practices for build, test, deployment and environment promotion
• Establish and enforce security gates to prevent deployment of high-risk code or misconfigured infrastructure
• Own and operate a structured vulnerability management program, including scanning, prioritisation, remediation SLAs and reporting
• Define and enforce identity and access management standards, including role-based access control, least privilege, and automated provisioning and deprovisioning
• Support ISO 27001-aligned controls, audit readiness and technical compliance requirements
• Lead or support root cause analysis for incidents, outages and major performance issues
• Drive preventative improvements following production issues FMClarity
• Help engineering move from reactive firefighting to disciplined operational management
• Implement and manage centralised logging and security monitoring, with alerting aligned to security risks and incidents.
• Partner with software engineers on infrastructure, deployment and operational best practices
• Provide clear recommendations to engineering leadership on operational risk, priorities and trade-offs

System Requirements

• MongoDB Atlas
• PostgreSQL / RDS
• GraphQL
• Node.js
• Meteor
• ECS, Kubernetes or Lambda
• OpenSearch, ELK, SIEM or OpenTelemetry
• ISO 27001 environments

Requirements

• Strong experience in a senior DevOps, Platform Engineering, SRE or SecDevOps role
• Hands-on AWS experience
• Experience with CI/CD pipelines
• Knowledge of infrastructure as code such as Terraform, CloudFormation or CDK
• Strong Linux and scripting skills
• Experience with monitoring and logging tools
• Good understanding of security fundamentals
• Confidence working in production and responding to incidents
• Clear communication skills and a collaborative approach

Operational Availability

This role includes responsibility for supporting critical platform operations outside standard business hours, where reasonably required. This may include incident response, disaster recovery testing, urgent security or infrastructure remediation, and planned production changes or maintenance activities.

Benefits

• Full-time permanent role with a flexible, hybrid work arrangement (2 days in office).
• Ongoing professional development and training opportunities.
• Career growth in a fast-evolving tech startup.
• Collaborative and supportive team environment.