Senior Cloud Platform Engineer

Role Overview

Key Responsibilities

• Sovereign Infrastructure as Code (IaC): Design, build, and maintain enterprise-grade GCP environments and Sovereign Landing Zones using Terraform and Ansible.
• Kubernetes Orchestration: Manage, scale, and secure production GKE and GKE Enterprise clusters in air-gapped or low-bandwidth environments.
• High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles, JSP 604, and MoD Secure by Design (SbD) frameworks.
• Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes (GDC air-gapped) and handle offline artifact management (e.g., container image mirroring, local Helm repositories, offline Terraform providers).
• DevSecOps & Policy-as-Code: Build secure CI/CD pipelines incorporating container scanning, cryptographic image signing, secret management (Vault/GCP KMS), and automated policy enforcement (OPA/Gatekeeper).
• Data Sovereignty & Isolation: Configure private interconnects, network firewalls, and outbound-only proxies to guarantee strict data sovereignty and prevent data exfiltration.

• Competitive Pay: Salaries reviewed annually to ensure they reflect your performance and market value.
• Loyalty Pension: We invest in your future. Starting at a 5% employer contribution, we increase this by 0.5% every year after your third anniversary, up to a maximum of 8%.
• Protection: Comprehensive Group Life Assurance for peace of mind.

• Real Impact: Work on mission-critical projects that secure and improve the UK's digital infrastructure.
• Autonomy: A culture that empowers you to make decisions, prototype rapidly, and iterate towards success.
• Service & Community: We support those who serve. 10 paid days for Reservist Military Service.

• Time Off: 25 days annual leave + Bank Holidays, with the flexibility to Buy/Sell additional days to suit your lifestyle.
• Giving back: 2 paid volunteering days per year.

• Master Your Craft: Fully funded professional certifications (AWS, GCP, Agile, etc.) supported by 5 days paid study leave.
• Expand Your Horizons: An additional £500 annual "Personal Choice" fund to learn whatever inspires you—work-related or not.
• Support: Access to 1-2-1 professional coaching and team training to accelerate your career.

• Premium Health: Vitality Private Medical Insurance (includes Apple Watch, gym discounts, and rewards).
• Flexibility: Genuine hybrid working with a WFH equipment allowance to perfect your home setup.

• Wellbeing: Cycle to Work scheme and a commitment to sustainable, healthy working practices.