.net full stack engineer - consultant/senior consultant - digital excellence

analytics engineer

ai solution architect – erp / eam Jobs in London

ai solution architect – erp / eam

ai solution engineer

ai specialist

.net full stack engineer - consultant/senior consultant - digital excellence Jobs in London

academy cloud security consultant

<div><h2 class="jobSectionHeader"><b>Description</b></h2>
<div>
<p>The Principal Microsoft Defender XDR, IRM &amp; Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot.</p>
<p>
The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations.</p>
<p>
The Role:</p>
<ul>
<li>Deception Engineering Leadership<ul>
<li>Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement.</li>
<li>Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs.</li>
<li>Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise.</li>
</ul></li><li>Honeypots, Honeytokens, Decoys &amp; Breadcrumbs<ul>
<li>Design and operate the full deception asset lifecycle, ensuring high-fidelity, low-noise detections that are realistic, attacker-grade, and resilient to evasion.</li>
<li>Deploy and manage Microsoft Defender for Identity deceptive accounts, deceptive devices, and honeytoken accounts across Active Directory and Microsoft Entra ID.</li>
<li>Build and maintain a portfolio of deception assets, including:<ul>
<li>Honeypot systems (low-, medium-, and high-interaction) across on-prem, Azure, AWS, GCP, and OCI</li>
<li>Honeytoken credentials, API keys, OAuth tokens, secrets, and SaaS accounts</li>
</ul></li><li>Decoy users, decoy devices, decoy shares, decoy files, and decoy databases<ul>
<li>Plant attacker-grade breadcrumbs across endpoints, identities, and cloud workloads, including:</li>
<li>Saved credentials, browser cookies, RDP and SSH artefacts</li>
<li>LSASS-resident credentials and cached tokens on selected lures</li>
<li>Fake Kerberos service accounts and SPNs to bait Kerberoasting and AS-REP roasting</li>
</ul></li><li>Continuously evolve deception techniques, lure design, and trap placement aligned to current attacker TTPs, red-team findings, and breach intelligence.</li>
<li>Govern the deception programme with clear standards for asset realism, segmentation, monitoring, and safe operation (no production impact).</li>
<li>Validate deception coverage through red-team, purple-team, and breach-and-attack simulation (BAS) exercises.</li>
</ul></li><li>Microsoft Defender XDR Leadership<ul>
<li>Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads.</li>
<li>Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections.</li>
<li>Define and enforce a unified detection and response strategy across the Microsoft security stack.</li>
</ul></li><li>Defender for Identity &amp; Identity Deception<ul>
<li>Lead operation and optimisation of Microsoft Defender for Identity (MDI) to detect identity-based attacks, including:<ul>
<li>Credential theft, Kerberoasting, AS-REP roasting, Pass-the-Hash, and Pass-the-Ticket</li>
<li>Lateral movement, reconnaissance, and privilege escalation</li>
<li>Misuse of deceptive / honeytoken accounts as early-warning tripwires</li>
</ul></li><li>Integrate MDI, deception, and Microsoft Entra ID signals into Defender XDR, Microsoft Sentinel, and SOAR workflows for unified investigation and response.</li>
</ul>
</li><li><p>Data Protection, DLP &amp; Insider Risk Management</p>
<ul>
<li>Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms</li>
<li>Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse</li>
<li>Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats</li>
<li>Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context</li>
<li>Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements</li>
<li>Continuously optimise detection use cases combining identity, data, and behavioural analytics</li>
</ul></li><li>Endpoint, Email &amp; Cloud App Detection<ul>
<li>Lead detection engineering across the Defender XDR stack, ensuring deception assets are continuously monitored alongside production telemetry:</li>
<li>Microsoft Defender for Endpoint (MDE) - EDR policies, ASR rules, and decoy-device monitoring</li>
<li>Microsoft Defender for Office 365 (MDO) - anti-phishing, Safe Links, Safe Attachments, and honeytoken inboxes</li>
<li>Optimise automatic attack disruption, automated investigation and response (AIR), and self-healing capabilities to:<ul>
<li>Disrupt in-progress attacks at machine speed, including deception-triggered intrusions</li>
<li>Reduce analyst workload through high-confidence automation</li>
<li>Improve coverage for ransomware, BEC, and identity-based attacks</li>
<li>Ensure consistent telemetry ingestion and detection parity across Windows, macOS, Linux, mobile, and deception assets.</li>
</ul></li></ul></li><li>Multi-Cloud Deception &amp; Detection (AWS, GCP, OCI)<ul>
<li>Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including:</li>
<li>Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys</li>
<li>Control-plane, workload, container, and Kubernetes threat detection</li>
<li>Cross-cloud identity and access misuse detection</li>
<li>Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments.</li>
</ul></li><li>Automation, Agentic AI &amp; Continuous Improvement<ul>
<li>Drive automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot.</li>
<li>Define KPIs and metrics covering deception engagement, detection coverage, and response maturity.</li>
<li>Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft.</li>
</ul></li><li>Stakeholder Engagement &amp; Technical Leadership<ul>
<li>Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities.</li>
<li>Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms.</li>
<li>Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts.</li>
<li>Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders.</li></ul></li></ul><br>
<p></p>
<p>
</p></div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
<div>
<p><b>What you'll bring:</b></p>
<p><b>
Required Skills &amp; Experience:</b></p>
<ul>
<li>Proven experience designing and operating enterprise cyber deception programmes (honeypots, honeytokens, decoy users, decoy devices, breadcrumbs) at scale.</li>
<li>Extensive hands-on experience operating and engineering Microsoft Defender XDR (MDE, MDI, MDO, MDA) in large enterprises.</li>
<li>Deep expertise across the Microsoft security stack, including:<ul>
<li>Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens</li>
<li>Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR)</li>
<li>Microsoft Security Copilot, automated investigation &amp; response, and attack disruption</li>
<li>Microsoft Defender for Cloud Apps and Defender for Cloud</li>
</ul></li><li>Hands-on experience with:<ul>
<li>Open-source and commercial deception / honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception)</li>
<li>Advanced KQL for detection engineering and threat hunting at scale</li>
<li>Detection-as-code, CI/CD of detection content, and security content management</li>
</ul></li><li>Strong knowledge of adversary tradecraft and frameworks:<ul>
<li>MITRE ATT&amp;CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain</li>
<li>Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ML in security operations (detection, hunting, IR, automation).</li>
</ul></li><li>Proven experience leading incident response across identity, endpoint, email, and cloud domains.</li>
<li>Strong scripting / automation experience (PowerShell, Python, or equivalent).</li>
<li>Deep understanding of Zero Trust architecture and identity-centric defence.</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications:</b></p>
<ul>
<li>Experience contributing to red-team / purple-team exercises and breach-and-attack simulation (BAS) programmes.</li>
<li>Microsoft certifications:<ul>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Industry certifications (CISSP, GCIA, GCFA, GCIH, OSCP, or equivalent)</li>
<li>Cloud certifications across AWS, GCP, or OCI</li></ul></li><br>
</ul>
<p></p><p><b>What we offer:</b></p>
<p>
Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.</p>
<p>
We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.</p>
<p><b>
Equal Opportunity Employer</b></p>
<p>
We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com</p></div></div>

Principal Microsoft Defender XDR & Deception Engineer

JPMorganChase

<div><b>JOB DESCRIPTION</b><br>
<br>
<br>
<p>Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.</p>
<p><b>Job Summary:</b></p>
<p>As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.</p>
<p><b>Job Responsibilities:</b></p>
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul><p></p><p><b>Required Qualifications, Capabilities, and Skills:</b></p>
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li><p>Proven ability to design and deploy automated preventive and detective guardrails at scale.</p>
</li><p></p><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul><p></p><p><b>Preferred Qualifications, Capabilities, and Skills:</b></p>
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul><p></p><p>#ICBCareers</p>
<b>ABOUT US</b>
<br>
<br>
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.<br>
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.<br>
</div></div><br>
<br>
<b>ABOUT THE TEAM</b>
<br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

Driftrock Limited

<div><p>Driftrock is hiring a Senior Platform Engineer to take ownership of the infrastructure and security that let our engineering teams ship fast, safely and at scale as more of the world's biggest car brands come on board.</p>
Quick facts<ul><li><b>
Team:</b> Engineering</li><li><b>
Reports to:</b> Head of Engineering</li><li><b>
Location:</b> Remote, UK or abroad, with a few hours of daily UK overlap</li><li><b>
Contract:</b> Full time, permanent</li><li><b>
Salary:</b> &pound;65,000 to &pound;85,000, plus share options</li><li><b>
Start date:</b> As soon as we find the right person</li></ul>
Why this role exists<p>
Driftrock runs entirely on Google Cloud, and our product is growing quickly as more clients trust us with their marketing. As we scale, we're investing in a dedicated owner for our platform and security, so our engineering squads can keep shipping fast with strong foundations under them.</p><p>
You'll define how we run, secure and evolve our platform, and build the tooling and secure defaults that let our product squads ship confidently without reinventing infrastructure every time. As Driftrock and our engineering org grow, this function is expected to grow too, and there's real room for the right person to shape it and eventually lead a small platform team.</p><p>
Our platform is made of multiple Elixir services that talk to each other over APIs and RabbitMQ, store data in PostgreSQL and Redis, and run on Kubernetes (GKE) on Google Cloud. We manage our infrastructure in Terraform, run our own self-hosted Buildkite CI/CD, and use Oban for background jobs. We're a high-discipline engineering team that leans on Extreme Programming, test-driven development and pair programming to ship to production several times a day, with a strong data-driven and observability-first mindset.</p>
What you'll own<p>
You'll be accountable for the health, security and reliability of our cloud platform, and for the developer experience that sits on top of it, so that every engineer can build and ship with speed and confidence.</p>
Your first 90 days<ul><li><b>
By day 30:</b> you've mapped our current infrastructure, security posture and developer workflows, and you understand where the biggest opportunities and risks are.</li><li><b>
By day 60:</b> you've shipped your first improvements and shared a prioritised roadmap for the platform, agreed with the engineering team.</li><li><b>
By day 90:</b> you're delivering steadily against that roadmap, with early wins in place across security, reliability or developer experience, and clear ownership of the platform established.</li></ul>
What you'll be doing<ul><li><b>
Own and evolve our cloud infrastructure</b> on Google Cloud, shaping how it's structured, secured and scaled so product teams can ship with confidence.</li><li><b>
Extend our infrastructure-as-code coverage</b> so changes are repeatable, reviewable and safe, and our environments are cleanly separated.</li><li><b>
Build on our identity, access and secrets management</b>, maturing our existing least-privilege access and secret rotation as the platform scales.</li><li><b>
Keep our security posture strong and audit-ready</b>, maintaining our ISO 27001 certification and leading both certification and client security audits.</li><li><b>
Own our Kubernetes platform end to end</b>, keeping clusters and workloads current, reliable and easy for teams to use.</li><li><b>
Own and improve our build and deployment pipelines</b> on self-hosted Buildkite, along with the local tooling, containerisation and paved-road workflows that make our engineers faster.</li><li><b>
Run a steady cadence of upgrades and patching</b> across the platform, along with DNS and certificate management, keeping everything current with minimal disruption.</li><li><b>
Improve infrastructure observability and visibility</b>, so we understand cost, health and performance across our environments.</li></ul>
What you'll bring<ul><li>
Deep, hands-on experience running production workloads on a major cloud platform, ideally Google Cloud.</li><li>
A track record of operating Kubernetes in production, from cluster operations to sensible workload patterns.</li><li>
Fluency with infrastructure-as-code, ideally Terraform, and the instinct to codify everything.</li><li>
Strong cloud security fundamentals across identity and access, secrets, and network security.</li><li>
Experience owning CI/CD pipelines and improving how teams build and deploy.</li><li>
Comfortable being hands-on in our codebase: you're happy to write some Elixir, for example standing up an Oban LiveView dashboard or building internal tooling, or you have a background in a functional language or Ruby and are genuinely keen to learn Elixir.</li><li>
The seniority to own and shape a function: you set standards, make sound architecture decisions independently, and bring others with you.</li><li>
An enablement-first mindset, building guard rails and paved roads rather than gates and bottlenecks.</li></ul><p><b>
Bonus points</b></p><ul><li>
Production experience with Elixir, Erlang/OTP, Phoenix or LiveView, or a background in Ruby.</li><li>
Experience maintaining ISO 27001, SOC 2 or similar, and handling security audits with customers.</li><li>
Reliability practices such as service-level objectives and incident management.</li><li>
Awareness of cloud cost management.</li><li>
Experience mentoring engineers or growing a small team.</li></ul><p><i>
Not sure you tick every box? Please apply anyway.</i></p>
Why Driftrock<p>
Driftrock's mission is to become the world-leading automotive and e-mobility marketing software platform, and help accelerate the transition to clean transport.</p><p>
We work with some of the world's biggest brands, including BMW, BYD, Mercedes-Benz and Volvo, and partner with the world's leading platforms, including Meta, Google, mobile.de and Auto Trader.</p><p>
We've been building since 2013, and our work enables billions of euros in vehicle sales every year.</p><p>
We're a close, fully remote team of 35 people across engineering, design, customer success, performance and commercial, spread across the world.</p><p>
That means your work has a real, visible impact on our product, our culture and how we operate.</p><p>
We're at the cutting edge of marketing technology, with plenty of room to unlock value from data and to help speed up the shift to electric vehicles.</p><p>
How we work is shaped by four values:</p><ul><li><b>
We care:</b> about our team, our customers, and the people who see the marketing messages that we power. Work isn't done until we can prove it's useful to both the consumer and the customer.</li><li><b>
Be that person:</b> if something needs fixing, fix it. It's never someone else's problem.</li><li><b>
People-first:</b> we put people at the core of everything, and never compromise security or privacy for results.</li><li><b>
Be better today than you were yesterday:</b> we bake learning and continuous improvement into everything we do, for ourselves and our customers.</li></ul><p>
In practice, this looks like weekly Monday Showcases where we share what we're learning, regular retros, a budget to attend the courses and conferences that grow you, Donut coffee pairings to stay connected, and an annual company Summit that brings the whole global team together in person.</p>
What's in it for you<p>
We're remote-first and flexible about how and where you work, with co-working space available if you want it. Alongside your salary:</p><ul><li><b>
Share options</b> in Driftrock, on founder-friendly, tax-efficient EMI terms, including the option to retain vested options after leaving (at board discretion).</li><li><b>
Comprehensive Vitality health cover:</b> medical, dental, vision, hearing, mental-health support and therapy, cancer cover, a free Headspace subscription and Vitality rewards.</li><li><b>
24 to 28 days' holiday</b> (24 + 1 extra each year, capped at 28), plus bank holidays.</li><li><b>
Pension contributions, life assurance (3x salary) and income protection.</b></li><li><b>
Electric car salary-sacrifice scheme</b> (Octopus): save up to ~40%, with insurance, servicing and a charging perk included.</li><li><b>
Enhanced maternity and paternity leave.</b></li><li><b>
A learning budget</b> for books, courses and conferences, plus time for personal goals.</li><li><b>
Perks and discounts</b> via CharlieHR, and a BMW Group employee discount programme.</li></ul><p><b>
International team members:</b></p><p>
We're remote-first and hire globally.While some UK-specific benefits are delivered differently abroad, we strive for genuine parity. Wherever you are, the standard package includes a comprehensive health plan, pension contributions, paid time off including local bank holidays, share options, enhanced maternity and paternity leave, a learning budget, and our flexible working culture. International team members are employed compliantly via an Employer of Record (Remote.com).</p>
Our hiring process<ul><li>
A short intro call.</li><li>
A conversation with the hiring manager.</li><li>
A practical task based on real challenges, never unpaid spec work.</li><li>
A final conversation with the team.</li></ul>
Inclusion at Driftrock<p>
Driftrock is an equal-opportunity employer. We welcome applicants of every background, identity and life experience, and we're building a team that reflects the people our marketing reaches. We don't make decisions based on age, disability, gender, gender identity, marital status, race or ethnicity, religion or belief, or sexual orientation. If you need any adjustments to the application or interview process to do your best, just let us know, and we're glad to help.</p><p></p><p><b>
We will not be considering recruitment agencies for this role.</b></p><p>
By applying for this job you give us permission to store your data on our secure applicant tracking system and to contact you about Driftrock job opportunities. We process your data for recruitment purposes only and keep it until this role is filled, after which we will delete it or, with your agreement, keep it for similar future roles for up to 12 months. See our privacy policy at driftrock.com/privacy-policy for how we comply with GDPR, including how to access, correct, delete or restrict the data we hold. You can lodge a complaint with the UK supervisory authority (the Information Commissioner's Office), or contact our DPO for any concerns.</p></div>

Senior Platform Engineer

Atos

<div><p><b>About Atos Group</b></p><br>
<p></p>
<p>
Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. &euro;7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE listed on Euronext Paris.</p><p><br>
The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.</p><p><b>
Overview</b></p>
<p>
The role requires a DevOps Cloud engineer with solid Wintel experience to implement cloud platform infrastructure for the MOD/Army geographic data intelligence service known as MCBRIDE.</p><br>
<p></p>
<p><b>
Professional Development:</b><br>
We prioritise career advancement within a collaborative team environment. Whether you are looking to move into leadership or deepen your technical expertise, we provide the support to help you achieve your career goals.</p><br>
<p></p>
<p><b>
Role Objective</b></p>
<p>
The Wintel DevOps Engineer is responsible for implementing the Windows infrastructure components of the MCBRIDE service as well as additional AWS cloud native services (this may extend to Google Cloud Platform in the future). This includes traditional Wintel roles such as Active Directory configuration and DevOps processes and tools including Terraform and Git.</p><br>
<p></p>
<p><b>
Expected Outputs</b></p>
<ul>
<li><b>Terraform IaaC:</b> Create Terraform code to deploy and maintain infrastructure on the MOD&rsquo;s AWS Cloud platform. Experience on Ansible is desirable but not required as training can be provided.</li>
<li><b>Wintel:</b> Configure Windows Server, Active Directory, Group Policy, DNS, Certificate Services and other windows configurations, including PowerShell scripting.</li>
<li><b>GitOps:</b> Work within the git-based framework for managing the infrastructure code base.</li>
<li><b>Close Collaboration:</b> Work closely with a small team of DevOps engineers and architects, creating a culture of inclusive collaboration, resulting in the best solutions for MCBRIDE.</li>
<li><b>Creativity:</b> Able to find solutions when working on a platform with significant security restrictions in place.</li>
<li><b>Curiosity:</b> As the platform evolves to include more services and technologies, the willingness to learn and apply new technologies.</li></ul><br>
<p></p>
<p><b>
Skills we can&rsquo;t do without:</b></p>
<ul>
<li>DevOps - good familiarity with core DevOps processes and tools including CI/CD pipelines, git version control, Terraform.</li>
<li>Wintel &ndash; strong core Wintel skills covering all aspects of Active Directory and Windows Server</li>
<li>Cloud &ndash; given that the OS component of the service is built on AWS, knowledge and experience of AWS is preferrable but any experience on one of the key hyperscalers (AWS, Azure, GCP, Oracle) is suitable</li>
</ul><ul><li>A good understanding of cloud security principles and regulatory standards.</li>
<li>Strong analytical and troubleshooting skills to resolve implementation and operational challenges.</li>
<li>Keeping up to date on best practices in cloud computing.</li></ul><br>
<p></p>
<p><b>
Previous Experience Required</b></p>
<ul>
<li>Few years in IT infrastructure roles.</li>
<li>Proven experience in Wintel tasks.</li>
<li>Proven experience in a DevOps role.</li>
<li>Previous experience of MOD platforms/processes/ways of working would be beneficial but is not required.</li></ul><br>
<p></p>
<p><b>
Nice to have (not mandatory):</b></p>
<ul>
<li>Hands on experience on Ansible</li>
<li>Optional experience with any of containerisation: Kubernetes, Hashicorp vault, Prometheus, Grafana, ELK stack is an advantage.</li></ul><br>
<p></p>
<p><b>
Certifications</b></p>
<p>
It would be beneficial to have any of the following certifications:</p>
<ul>
<li>Hashicorp Terraform Associate.</li>
<li>AWS/Azure/GCP/Oracle Associate.</li>
<li>Microsoft AZ-800/AZ-801, MCSA, MCSE</li></ul><br>
<p></p>
<p>
 <b>Additional Requirements:</b></p>
<ul>
<li>Security clearance, or eligibility and willingness to obtain higher clearance.</li>
<li>Working model: Hybrid/ should be open to work onsite as well</li></ul><br>
<p></p>
<p><b>
Benefits:</b></p>
<ul>
<li>Pension Scheme - contributions matched up to 10%</li>
</ul><ul><li>Private medical cover</li>
</ul><ul><li>Income Protection</li>
</ul><ul><li>Life Assurance</li>
</ul><ul><li>25 days paid leave + National Holidays</li>
</ul><ul><li>Flex benefits program</li></ul><br>
<p></p>
<p>
As a Disability Confident employer, we encourage applications from all applicants, especially, differently abled applicants. We aim to ensure that those who meet the minimum criteria for this position will be offered an interview. We are committed and willing to making reasonable adjustments to the application and assessment process to accommodate your needs. We are a care leaver friendly employer.</p>
<p><i>
If you require additional support with your application, please contact our Recruiter </i><i>Mihaela Perelighin on LinkedIn</i> <i>or send an email to our dedicated mailbox</i> -<i> </i><i>UK-Recruitment-Support@atos.net</i></p><br>
<p></p>
<p>
Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.</p><br>
<p></p>
<p>
Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.</p><p></p><p><br>
<b>
Choose your future. Choose Atos.</b></p></div><p></p>

DevOps Wintel Engineer

Cognism

<div><div><h2 class="jobSectionHeader"><b>WHO ARE WE</b></h2>
<p>
Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</p></div><p><b>
The Role</b></p>
<p>
At Cognism, the security of our data, our systems and our clients' systems is a business priority. Information security is embedded in the way we work, and we are driving a culture where the fastest path is the securest path. As the function continues to mature, we are now hiring for a Director of Security Engineering &amp; Operations to report directly to our CISO. In this role you will own and drive the technical security strategy for Cognism's web and data products, as well as our corporate environment. You will be responsible for designing a security programme that protects our most sensitive assets: our data, our data fusion engine and the logic that powers it. As a trusted partner to our R&amp;D leadership team you will help to define and drive the long-term security engineering maturity roadmap, driving alignment across engineering leaders, product leadership and IT. If you're energised by the idea of shaping measurable security processes and controls, from the ground up, aligning engineering around secure-by-design principles, and elevating operational excellence, then this is the role for you. This is a rare opportunity to define the technical security vision for a dataintensive product at a moment where AI, scale, and engineering velocity are creating new and exciting challenges. You will shape how Cognism builds securely for the next decade.</p><br>
<p></p>
<p><b>
What success looks like</b></p>
<p>
Within 12 months, you will have:</p>
<ul>
<li>Delivered a unified security engineering roadmap aligned with engineering leadership.</li>
<li>Matured secure SDLC adoption across Web and Data engineering.</li>
<li>Improved MTTD/MTTR through stronger SOC operations.</li>
<li>Invested in and mentored a team with clear ownership, KPIs, and engineering trust.</li>
<li>Reduced engineering friction by creating pragmatic, developerfriendly guardrails</li></ul><br>
<p></p>
<p><b>
What You'll Own</b></p>
<p><b>
Security Strategy &amp; Engineering Integration</b></p>
<ul>
<li>Define and own Cognism's technical security strategy that seeks to embed security-by-design within our web and data products, our data fusion engine and pipelines, and our corporate landscape. You will drive a strategy that is pragmatic, risk-ranked, and aligned to engineering velocity.</li>
<li>Work directly with product and technology leadership as a strategic partner. You will drive ownership and accountability, clearly agreeing ways of working between your team and product and technology teams.</li>
<li>Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes.</li>
<li>Partner with engineering leadership to ensure risk-driven supply chain management across our product, ensuring what we bring in doesn't undermine what we protect.</li>
<li>Work directly with our Director of IT operations to ensure our corporate security posture is mitigating risk and empowering our employees to be as secure as possible, through guardrails that protect unacceptable risk but don't stifle innovation.</li></ul><br>
<p></p>
<p><b>
Data &amp; AI Security</b></p>
<ul>
<li>Partner with our VP of Data Engineering to strengthen the security of our enrichment engine, data pipelines, and warehouse ecosystems.</li>
<li>Direct a strategy that considers security across the full data stack - from ingestion through to the warehouse - with a focus on access governance, data classification, and secrets management as non-negotiables.</li>
<li>Define how Cognism embeds AI securely as LLMs and agentic workflows move deeper into the product and our technology teams' operations.</li>
<li>Partner with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it.</li></ul><br>
<p></p>
<p><b>
Detection, Response &amp; SOC Partnership</b></p>
<ul>
<li>Own the strategic relationship with our 24/7 outsourced SOC holding them to a high standard on threat hunting, threat intelligence utilisation, and automated response, not just SLA compliance.</li>
<li>Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves.</li>
<li>Build the internal team into a trusted escalation layer, with clear incident response playbooks, rehearsed escalation paths, and a feedback loop that sharpens detection over time.</li></ul><br>
<p></p>
<p><b>
Team &amp; Culture</b></p><br>
<p></p>
<ul>
<li>Lead a team of application and infrastructure security engineers, setting the standard for technical excellence and deep partnership with their engineering counterparts.</li>
<li>Build a security culture where developers raise security questions early, understand threat models, and own remediations, not because policy requires it, but because the culture makes it natural.</li>
<li>Be the security leader Cognism's engineers want in the room: credible enough to be trusted, collaborative enough to be included, and strategic enough to make it count.</li></ul><br>
<p></p>
<p><b>
What We Need</b></p>
<p><b>
Leadership &amp; influence</b></p>
<ul>
<li>Demonstrated experience building security programmes from scratch or transforming them significantly in a product-led, engineering-first company.</li>
<li>A track record of influencing engineering culture and earning trust, not enforcing it.</li>
<li>Experience managing external security partners, (e.g 24/7 Security Operations Centre, penetration testing 3rd parties) and raising their performance through clear accountability, not just contract reviews.</li>
<li>Able to communicate risk in business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction.</li></ul><br>
<p></p>
<p><b>
Technical foundation</b></p>
<ul>
<li>Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience &ndash; enough to challenge and coach our most senior application security engineers.</li>
<li>Handson understanding of data security, cloud data warehouses, and pipeline integrity &ndash; enough to ensure we are driving the right programme of work across our technology department.</li>
<li>Cloud security fluency with working knowledge of container and Kubernetes security, IAM design, and cloud-native security tooling &ndash; enough to clearly identify, prioritise and challenge solutions for implementing security in our cloud environment.</li>
<li>Working knowledge of AI/LLM security risks: enough depth to assess integrations, define guardrails, and evolve the programme as the technology does.</li></ul><br>
<p></p>
<p><b>
Mindset</b></p>
<ul>
<li>Risk-based by instinct: prioritises based on both technical and business impact</li>
<li>Builder mentality: energised by creating structure where there isn't any, pragmatic about sequencing, and focused on outcomes over coverage.</li>
<li>Genuinely curious about AI, not just its security risks, but its potential to improve how security is done.</li>
</ul><div>
<h2 class="jobSectionHeader"><b>WHY COGNISM</b></h2>
<p>
At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who <b>support, challenge, and inspire each other every day</b>. If you're looking for a place where your work truly <b>makes an impact</b>, you're in the right spot!</p>
<p>
Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.</p>
<p>
Here's what we stand for:</p>
<p>
 <b>We Own the Outcome Together.</b><br>
 <b>We Deeply Understand our Customers.</b><br>
 <b>We Celebrate Impact Wherever It Comes From.</b></p>
<p>
At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</p></div></div><p></p>

Director, Security Engineering & Operations

NewDay

<p></p><div><p>As a Platform Engineer at NewDay , you'll create the tooling, automation, and cloud platforms that make software delivery seamless across Azure and AWS. Rather than building customer-facing applications, you'll be building the developer experience creating scalable platforms, simplifying deployments, and enabling hundreds of engineers to deliver software faster, safer, and more efficiently. If you're a software engineer who enjoys solving engineering challenges through automation, cloud technologies, and modern platform engineering, we'd love to hear from you.
</p><p></p><p><b>How you'll contribute
</b></p><ul><li><p>Build and evolve the internal developer platform, creating tools and services that enable engineering teams to develop, test, deploy, and operate applications with ease.
</p></li><li><p>Develop deployment tooling and automation using modern software engineering practices, helping simplify and accelerate software delivery across Azure and AWS.
</p></li><li><p>Identify opportunities to remove friction, improve self-service capabilities, and enable developers to move faster.
</p></li><li><p>Design and implement cloud-native solutions using containers, Infrastructure as Code, and CI/CD pipelines to improve platform scalability, resilience, and security.
</p></li><li><p>Collaborate closely with Platform Engineering, SRE, and development teams to introduce new technologies, establish engineering standards, and continuously improve our platform capabilities.
</p></li></ul><p></p><p><b>We're looking for these essential skills
</b></p><ul><li><p>Hands-on experience with Microsoft Azure and/or AWS, including core cloud services such as compute, storage, networking, databases, identity, and PaaS offerings (e.g. Azure App Services, Azure Functions, AWS Lambda, and equivalents).
</p></li><li><p>software engineering background with TypeScript/Node.js (or .NET/C#), with experience building internal platforms, deployment tooling, and automation that improves the developer experience.
</p></li><li><p>Proven experience implementing Infrastructure as Code and automated CI/CD pipelines using tools such as Terraform or ARM templates, GitHub Actions, TeamCity, Octopus Deploy, or equivalent technologies.
</p></li><li><p>Experience with containerisation and cloud-native technologies, including Docker and Kubernetes, with an understanding of scalable, resilient, and highly available platform architectures across Azure and/or AWS.
</p></li><li><p>Strong knowledge of DevOps and platform engineering practices, including Agile delivery, GitHub and Jira, networking, authentication and authorisation, digital certificates, cloud security, and supporting engineering teams through effective platform tooling.
</p></li></ul><p></p><p><b>It's a plus if you also have these skills
</b></p><ul><li><p>Experience building and operating Kubernetes platforms in production environments.
</p></li><li><p>Knowledge of Infrastructure as Code using Terraform, ARM, or Bicep to provision and manage cloud infrastructure.
</p></li><li><p>Experience creating and maintaining CI/CD pipelines using tools such as GitHub Actions, Octopus Deploy, or similar technologies.
</p></li><li><p>Familiarity with monitoring and observability tools such as Azure Application Insights, Log Analytics, or Grafana.
</p></li><li><p>Experience promoting DevOps best practices, contributing to open-source tooling, or helping engineering teams adopt modern platform engineering approaches.
</p></li></ul><p></p><p>At NewDay, we value all types of diversity. We&rsquo;re an equal opportunity employer and believe that our differences create a vibrant, authentic working culture. We want all our colleagues to feel able to bring their whole selves to work. We don&rsquo;t discriminate on the basis of protected characteristics or identities. We make sure that every job is crafted to be inclusive and that people with disabilities or caring responsibilities can take part in the application and interview process.
</p><p></p><p>Tell us if you need accommodations: We&rsquo;ll put reasonable adjustments in place to support you.
</p><p></p><p>We work with Textio to make our job design and hiring inclusive.
</p><p></p>Permanent</div>

Platform Engineer

UK Government - Department for Science, Innovation & Technology

<div><div><h2 class="jobSectionHeader"><b>Details</b></h2>
<div><h3 class="jobSectionHeader"><b>Reference number</b></h3>
<div>468917
</div></div><div><h3 class="jobSectionHeader"><b>Salary</b></h3><div>
&pound;69,675 - &pound;90,756</div></div><div><div>
Salary is paid within the grade range shown below.
<br>
As this is a GDAD role, the maximum salary includes a non-pensionable technical allowance, and successful candidates will be appointed somewhere within that range depending on assessment.
<br>
<br>
Grade 6
<br>
National: &pound;69,675 to &pound;82,318 (maximum includes &pound;12,643 non-pensionable allowance)
<br>
London: &pound;74,605 to &pound;90,756 (maximum includes &pound;16,151 non-pensionable allowance)</div></div><div><div>
A Civil Service Pension with an employer contribution of 28.97%</div></div>
<div>GBP</div>
<div><h3 class="jobSectionHeader"><b>Job grade</b></h3><div><div>
Grade 6</div></div></div><div><h3 class="jobSectionHeader"><b>
Contract type</b></h3><div>
Permanent</div></div><div><h3 class="jobSectionHeader"><b>
Business area</b></h3><div>
DSIT - Digital, Technologies and Telecoms</div></div><div><h3 class="jobSectionHeader"><b>
Type of role</b></h3><div>
Other</div></div><div><h3 class="jobSectionHeader"><b>
Working pattern</b></h3><div>
Flexible working, Full-time, Job share, Part-time</div></div><div><h3 class="jobSectionHeader"><b>
Number of jobs available</b></h3><div>
2</div></div></div>
<div><div><h2 class="jobSectionHeader"><b>Contents</b></h2></div><div><ul><li>
Location</li><li>
About the job</li><li>
Benefits</li><li>
Things you need to know</li><li>
Apply and further information</li></ul></div><div><h2 class="jobSectionHeader"><b>
Location</b></h2></div><div><div>
Bristol, London, Manchester</div></div><div><h2 class="jobSectionHeader"><b>
About the job</b></h2></div><div><h3 class="jobSectionHeader"><b>
Job summary</b></h3><div><h2 class="jobSectionHeader"><b>
Incubator for AI, i.AI</b></h2><h3 class="jobSectionHeader"><b>
Help build the platform behind some of the most ambitious AI products in government</b></h3><p>
This is not a conventional platform engineering role.</p><p>
At i.AI, you will help build the cloud platform that enables teams to deliver frontier AI products into real world public services. Your work will shape the foundations that allow AI systems to move from idea to production securely, reliably and at pace.</p><p>
You will join a highly capable engineering team with a flat structure, strong technical standards and a high degree of autonomy. This is an environment for engineers who want to solve hard problems, influence architecture, improve how teams build, and work on technology that has visible impact beyond the organisation itself.</p><p>
If you are excited by platform engineering, modern cloud infrastructure, AI enabled systems and the challenge of making advanced technology work in the real world, this is a rare opportunity to do all of that in one role.</p></div></div><div><h3 class="jobSectionHeader"><b>
Job description</b></h3><div><h2 class="jobSectionHeader"><b>
About the role</b></h2><p>
We are looking for a Lead Cloud Platform Engineer to help design, build and operate the platform that powers AI product delivery.</p><p>
This is a hands-on technical leadership role for an engineer who combines deep cloud platform expertise with broad strength across architecture, security, software engineering and AI platform concerns. You will operate as a T shaped engineer, bringing both technical depth and the judgement to work across disciplines when needed.</p><p>
You will play a central role in defining how platform capabilities are built, adopted and evolved. You will lead through technical credibility, not hierarchy, helping teams solve complex problems while raising the bar for engineering quality across the platform.</p><h2 class="jobSectionHeader"><b>
What you will work on</b></h2><ul><li><b>
End to end platform engineering: </b>You will own the technical delivery of platform initiatives from concept through to production. That means taking ambiguous problems, making clear architectural decisions, and building secure, scalable cloud components that teams can depend on.</li><li><b>
Platform as a product: </b>You will work backwards from user needs to build technical capabilities that improve the developer experience. You will create reusable patterns for local development, pipelines, environments, observability and operational ergonomics, helping teams ship faster with less friction.</li><li><b>
AI workload enablement: </b>You will support the delivery of production AI systems and agentic workloads. You will build and maintain platform capabilities for model access, routing, tracing, evaluation, reliability and cost control.</li><li><b>
Intelligent automation and security: </b>You will treat security as a first class engineering concern, building automated controls for software supply chain security, secrets management and policy as code. You will also actively use GenAI capabilities to reduce operational toil, introduce intelligent guardrails and streamline developer workflows.</li><li><b>
Technical leadership: </b>You will help shape platform direction through strong engineering judgement and hands on delivery. You will mentor other engineers, introduce better patterns and balance the needs of individual teams with platform wide coherence.<br>
</li></ul><h2 class="jobSectionHeader"><b>
Why join i.AI</b></h2><p>
This is a chance to work on platform engineering at a point where cloud, software delivery and AI are converging fast.</p><p>
You will have the opportunity to:</p><ul><li>
Build for real production AI use cases rather than isolated experiments</li><li>
Work with frontier models and modern AI tooling as part of day to day engineering</li><li>
Solve platform problems that span reliability, developer experience, security and AI enablement</li><li>
Influence architecture and technical standards in a high trust, high agency team</li><li>
Contribute to products with meaningful real world impact</li></ul><p>
For the right engineer, this role offers a combination that is hard to find elsewhere: complex platform work, genuine technical ownership, access to advanced AI tooling, and the chance to help shape how ambitious AI products are delivered in practice.</p><h2 class="jobSectionHeader"><b>
Our stack</b></h2><p>
You do not need to be an expert in every tool from day one, but our technical ecosystem includes:</p><ul><li><b>
Cloud infrastructure: </b>AWS including ECS, Lambda, CloudFront, RDS and S3, alongside multi cloud integration patterns across Azure and GCP.</li><li><b>
Containerisation and delivery: Docker and podman, container orchestration, GitHub Actions for CI and CD, infrastructure automation, and robust deployment patterns including rolling, canary and blue green.</b></li><li><b>
Development: </b>Terraform, Python with FastAPI, and JavaScript or TypeScript with Next.js, Astro and Node.js.AI platform layer: Tooling for model routing, tracing and evaluation, such as LiteLLM and Langfuse, integrated with modern AI frameworks including LangGraph, DSPy and Inspect.</li><li><b>
AI harness: </b>OpenCode and Claude Code, with full access to frontier models from OpenAI, Anthropic and Google for both developer augmentation and platform integration.</li><li><b>
Observability: </b>AWS CloudWatch for logs, metrics and alarms, alongside Grafana, Sentry and X Ray for monitoring and tracing.</li><li><b>
Security: </b>Supply chain tooling including SAST, SCA and SBOMs, policy as code, runtime assurance including CSPM and DAST, and automated IAM and secrets management.</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Person specification</b></h3><div><h2 class="jobSectionHeader"><b>
Who we think will thrive in this role</b></h2><p>
We are looking for an experienced lead level engineer who is energised by building platforms that matter.</p><p>
You may be a strong fit if you bring some of the following:</p><ul><li>
Strong hands on experience building and operating cloud platforms in production, with AWS strongly preferred</li><li>
Deep understanding of platform architecture, distributed systems design, networking fundamentals and reliability concepts such as SLOs, tracing and alerting</li><li>
A mindset for applying AI internally, with experience or strong interest in using GenAI and LLM assisted tooling to reduce repetitive operational work and improve platform resilience</li><li>
Practical experience embedding security into delivery workflows, including software supply chain security, IAM, threat modelling and policy as code</li><li>
Experience supporting AI or ML systems in production, including model serving, MLOps, agentic orchestration, or prompt and inference cost trade offs</li><li>
Practical proficiency in software development and strong capability in infrastructure automation</li><li>
A track record of defining reusable patterns and evolving engineering standards, rather than simply delivering one off solutions</li><li>
Strong ownership, sound judgement and comfort working through ambiguity</li><li>
A product mindset, with a clear understanding that developer experience is critical to platform adoption</li><li>
The ability to coach others, raise technical standards through practice, and operate effectively in a flat, high agency team</li></ul><p>
Bonus experience includes multi cloud patterns, GPU or HPC workloads, or building platform telemetry and internal tools.</p></div></div><div><h3 class="jobSectionHeader"><b>
Technical skills</b></h3>
<div><p>We'll assess you against these technical skills during the selection process:</p>
<ul><li>Candidates will assessed technically via interview and potentially take home assessment. Details of this will be communicated to the candidate directly.</li>
</ul></div></div><div><h2 class="jobSectionHeader"><b>Benefits</b></h2></div><div><div>
Alongside your salary of &pound;69,675, Department for Science, Innovation &amp; Technology contributes &pound;20,184 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .</div></div><div><div><p>
The Department for Science, Innovation and Technology offers a competitive mix of benefits including:</p><ul><li>
A culture of flexible working, such as job sharing, homeworking and compressed hours.</li><li>
Automatic enrolment into the Civil Service Pension Scheme, with an employer contribution of 28.97%.</li><li>
A minimum of 25 days of paid annual leave, increasing by 1 day per year up to a maximum of 30.</li><li>
An extensive range of learning &amp; professional development opportunities, which all staff are actively encouraged to pursue.</li><li>
Access to a range of retail, travel and lifestyle employee discounts.</li></ul><p><b>
Office attendance</b></p><p>
The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non-home based location for 40-60% of the time over the accounting period.</p></div></div><div><h2 class="jobSectionHeader"><b>
Things you need to know</b></h2></div><div><h3 class="jobSectionHeader"><b>
Artificial intelligence</b></h3><div>
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.</div></div><div><h3 class="jobSectionHeader"><b>
Selection process details</b></h3><div><div>
This vacancy is using Success Profiles , and will assess your Experience and Technical skills.</div></div><div><div><p><b>
Appointment is conditional on successfully completing UK Government SC clearance. Prior clearance is not requiredwe will sponsor and support you.</b> You should normally have been resident in the UK for 2 of the past 5 years. Employment is conditional on obtaining and maintaining the required clearance(s). More detail on clearance eligibility can be found on the UK Government website: National security vetting: clearance levels - GOV.UK</p><p>
In accordance with the Civil Service Commission rules, the following list contains all elements of the selection process.</p><p>
Candidates should expect to go through some or all of the following stages once an application has been submitted:</p><ul><li>
A short initial conversation</li><li>
Technical take home test</li><li>
Second interview in which well review the technical test</li><li>
Third interview with wider representation from the team</li><li>
Final interview with members of the senior team</li></ul><p>
To apply please follow the instructions on Greenhouse where you will be asked to complete personal statement questions and upload your CV. Should the team receive an abundance of CVs we reserve the right to sift on CV alone.</p><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy . As part of the application process, we monitor statistics on D&amp;I. You can see how we process this data here: Recruitment privacy notice - GOV.UK.</div><br>
Feedback will only be provided if you attend an interview or assessment.</div></div></div><div><h3 class="jobSectionHeader"><b>
Security</b></h3><div><div>
Successful candidates must undergo a criminal record check.</div></div><div><div>
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .<br>
<br>
See our vetting charter .</div></div><div><div>
People working with government assets must complete baseline personnel security standard (opens in new window) checks.</div></div></div><div><h3 class="jobSectionHeader"><b>
Nationality requirements</b></h3><div><div>
<p>This job is broadly open to the following groups:</p>
<ul><li>UK nationals</li>
<li>nationals of the Republic of Ireland</li>
<li>nationals of Commonwealth countries who have the right to work in the UK</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020</li>
<li>Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service</li>
</ul>Further information on nationality requirements
</div></div></div><div><h3 class="jobSectionHeader"><b>Working for the Civil Service</b></h3><div><div>
The Civil Service Code sets out the standards of behaviour expected of civil servants.<br>
<br>
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles .</div></div><div><div>
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.</div></div><div><div>
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.</div></div></div><div><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .</div></div><div><h2 class="jobSectionHeader"><b>
Apply and further information</b></h2></div><div><div>
This vacancy is part of the Great Place to Work for Veterans initiative.</div></div><div><div>
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.</div></div><div><h3 class="jobSectionHeader"><b>
Contact point for applicants</b></h3><div><h4 class="jobSectionHeader"><b>
Job contact :
</b></h4><ul><li>Name : Ben Sams</li><li>
Email : ben.sams@dsit.gov.uk</li></ul><h4 class="jobSectionHeader"><b>
Recruitment team</b></h4><ul><li>
Email : ben.sams@dsit.gov.uk</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Further information</b></h3><div><div>
Appointment to the Civil Service is governed by the Civil Service Commissions Recruitment Principles. If you feel that your application has not been treated in accordance with the recruitment principles, and wish to make a complaint, then you should contact in the first instance dsitresourcing.GRS@cabinetoffice.gov.uk. If you are not satisfied with the response that you receive, then you can contact the Civil Service Commission. For further information on bringing a complaint to the Civil Service Commission please visit their web pages at: https://civilservicecommission.independent.gov.uk/contact-us/</div></div></div></div></div><div></div>

Lead Cloud Platform Engineer- i.AI

Explore 62+ Academy cloud security consultant in London this July. Find roles across top companies and apply now to boost your career.