ai engineer

analytics engineer

platform engineer

infrastructure engineer

ai solution architect – erp / eam Jobs in London

ai solution architect – erp / eam

cloud security architect

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

<div><h2 class="jobSectionHeader">Description</h2>
<div>
The Principal Microsoft Defender XDR, IRM &amp; Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot.

The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations.

The Role:
<ul>
<li>Deception Engineering Leadership<ul>
<li>Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement.</li>
<li>Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs.</li>
<li>Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise.</li>
</ul></li><li>Honeypots, Honeytokens, Decoys &amp; Breadcrumbs<ul>
<li>Design and operate the full deception asset lifecycle, ensuring high-fidelity, low-noise detections that are realistic, attacker-grade, and resilient to evasion.</li>
<li>Deploy and manage Microsoft Defender for Identity deceptive accounts, deceptive devices, and honeytoken accounts across Active Directory and Microsoft Entra ID.</li>
<li>Build and maintain a portfolio of deception assets, including:<ul>
<li>Honeypot systems (low-, medium-, and high-interaction) across on-prem, Azure, AWS, GCP, and OCI</li>
<li>Honeytoken credentials, API keys, OAuth tokens, secrets, and SaaS accounts</li>
</ul></li><li>Decoy users, decoy devices, decoy shares, decoy files, and decoy databases<ul>
<li>Plant attacker-grade breadcrumbs across endpoints, identities, and cloud workloads, including:</li>
<li>Saved credentials, browser cookies, RDP and SSH artefacts</li>
<li>LSASS-resident credentials and cached tokens on selected lures</li>
<li>Fake Kerberos service accounts and SPNs to bait Kerberoasting and AS-REP roasting</li>
</ul></li><li>Continuously evolve deception techniques, lure design, and trap placement aligned to current attacker TTPs, red-team findings, and breach intelligence.</li>
<li>Govern the deception programme with clear standards for asset realism, segmentation, monitoring, and safe operation (no production impact).</li>
<li>Validate deception coverage through red-team, purple-team, and breach-and-attack simulation (BAS) exercises.</li>
</ul></li><li>Microsoft Defender XDR Leadership<ul>
<li>Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads.</li>
<li>Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections.</li>
<li>Define and enforce a unified detection and response strategy across the Microsoft security stack.</li>
</ul></li><li>Defender for Identity &amp; Identity Deception<ul>
<li>Lead operation and optimisation of Microsoft Defender for Identity (MDI) to detect identity-based attacks, including:<ul>
<li>Credential theft, Kerberoasting, AS-REP roasting, Pass-the-Hash, and Pass-the-Ticket</li>
<li>Lateral movement, reconnaissance, and privilege escalation</li>
<li>Misuse of deceptive / honeytoken accounts as early-warning tripwires</li>
</ul></li><li>Integrate MDI, deception, and Microsoft Entra ID signals into Defender XDR, Microsoft Sentinel, and SOAR workflows for unified investigation and response.</li>
</ul>
</li><li>Data Protection, DLP &amp; Insider Risk Management
<ul>
<li>Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms</li>
<li>Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse</li>
<li>Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats</li>
<li>Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context</li>
<li>Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements</li>
<li>Continuously optimise detection use cases combining identity, data, and behavioural analytics</li>
</ul></li><li>Endpoint, Email &amp; Cloud App Detection<ul>
<li>Lead detection engineering across the Defender XDR stack, ensuring deception assets are continuously monitored alongside production telemetry:</li>
<li>Microsoft Defender for Endpoint (MDE) - EDR policies, ASR rules, and decoy-device monitoring</li>
<li>Microsoft Defender for Office 365 (MDO) - anti-phishing, Safe Links, Safe Attachments, and honeytoken inboxes</li>
<li>Optimise automatic attack disruption, automated investigation and response (AIR), and self-healing capabilities to:<ul>
<li>Disrupt in-progress attacks at machine speed, including deception-triggered intrusions</li>
<li>Reduce analyst workload through high-confidence automation</li>
<li>Improve coverage for ransomware, BEC, and identity-based attacks</li>
<li>Ensure consistent telemetry ingestion and detection parity across Windows, macOS, Linux, mobile, and deception assets.</li>
</ul></li></ul></li><li>Multi-Cloud Deception &amp; Detection (AWS, GCP, OCI)<ul>
<li>Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including:</li>
<li>Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys</li>
<li>Control-plane, workload, container, and Kubernetes threat detection</li>
<li>Cross-cloud identity and access misuse detection</li>
<li>Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments.</li>
</ul></li><li>Automation, Agentic AI &amp; Continuous Improvement<ul>
<li>Drive automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot.</li>
<li>Define KPIs and metrics covering deception engagement, detection coverage, and response maturity.</li>
<li>Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft.</li>
</ul></li><li>Stakeholder Engagement &amp; Technical Leadership<ul>
<li>Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities.</li>
<li>Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms.</li>
<li>Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts.</li>
<li>Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders.</li></ul></li></ul> 


</div><h2 class="jobSectionHeader">Qualifications</h2>
<div>
What you'll bring:

Required Skills &amp; Experience:
<ul>
<li>Proven experience designing and operating enterprise cyber deception programmes (honeypots, honeytokens, decoy users, decoy devices, breadcrumbs) at scale.</li>
<li>Extensive hands-on experience operating and engineering Microsoft Defender XDR (MDE, MDI, MDO, MDA) in large enterprises.</li>
<li>Deep expertise across the Microsoft security stack, including:<ul>
<li>Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens</li>
<li>Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR)</li>
<li>Microsoft Security Copilot, automated investigation &amp; response, and attack disruption</li>
<li>Microsoft Defender for Cloud Apps and Defender for Cloud</li>
</ul></li><li>Hands-on experience with:<ul>
<li>Open-source and commercial deception / honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception)</li>
<li>Advanced KQL for detection engineering and threat hunting at scale</li>
<li>Detection-as-code, CI/CD of detection content, and security content management</li>
</ul></li><li>Strong knowledge of adversary tradecraft and frameworks:<ul>
<li>MITRE ATT&amp;CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain</li>
<li>Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ML in security operations (detection, hunting, IR, automation).</li>
</ul></li><li>Proven experience leading incident response across identity, endpoint, email, and cloud domains.</li>
<li>Strong scripting / automation experience (PowerShell, Python, or equivalent).</li>
<li>Deep understanding of Zero Trust architecture and identity-centric defence.</li></ul> 


Preferred Qualifications:
<ul>
<li>Experience contributing to red-team / purple-team exercises and breach-and-attack simulation (BAS) programmes.</li>
<li>Microsoft certifications:<ul>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Industry certifications (CISSP, GCIA, GCFA, GCIH, OSCP, or equivalent)</li>
<li>Cloud certifications across AWS, GCP, or OCI</li></ul></li> 
</ul>
What we offer:

Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.

We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.

Equal Opportunity Employer

We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com</div></div>

Principal Microsoft Defender XDR & Deception Engineer

NTT DATA

<div>We&rsquo;re a business with a global reach that empowers local teams, and we undertake hugely exciting work that is genuinely changing the world. Our advanced portfolio of consulting, applications, business process, cloud, and infrastructure services will allow you to achieve great things by working with brilliant colleagues, and clients, on exciting projects.
Our inclusive work environment prioritises mutual respect, accountability, and continuous learning for all our people. This approach fosters collaboration, well-being, growth, and agility, leading to a more diverse, innovative, and competitive organisation. We are also proud to share that we have a range of Inclusion Networks such as: the Women&rsquo;s Business Network, Cultural and Ethnicity Network, LGBTQ+ &amp; Allies Network, Neurodiversity Network and the Parent Network.
For more information on Diversity, Equity and Inclusion please click here: Creating Inclusion Together at NTT DATA UK | NTT DATA
Primary Responsibilities:
<ul><li>Client Engagement &amp; Delivery
</li><li>Data Pipeline Development (Batch and Streaming)
</li><li>Snowflake &amp; Cloud Data Platforms
</li><li>Data Architecture &amp; Modelling
</li><li>Collaboration &amp; Best Practices
</li><li>Quality, Governance &amp; Security 
</li></ul>Business Relationships:
<ul><li>Solution Architects
</li><li>Data Engineers, Developers, ML Engineers and Analysts
</li><li>Client stakeholders up to Head of Data Engineering, Chief Data Architect, and Analytics leadership
</li></ul>Competencies / Critical Skills: 

<ul><li>Proven experience in data engineering and pipeline development on Snowflake and cloud-native platforms.
</li><li>Strong consulting values with ability to collaborate effectively in client-facing environments.
</li><li>Hands-on expertise across the data lifecycle: ingestion, transformation, modelling, governance, and consumption.
</li><li>Strong problem-solving, analytical, and communication skills.
</li><li>Experience leading or mentoring teams of engineers to deliver high-quality scalable data solutions. 
</li></ul>Technical Expertise:
<ul><li>Deep expertise with Snowflake features (warehouses, Snowpark, data sharing, performance tuning).
</li><li>Proficiency in ETL/ELT tools such as DBT, Matillion, Talend, or equivalent.
</li><li>Strong SQL and Python (or equivalent language) skills for data manipulation and automation.
</li><li>Hands-on experience with cloud platforms (AWS, Azure, GCP).
</li><li>Knowledge of data modelling methodologies (star schemas, Data Vault, Kimball, Inmon).
</li><li>Familiarity with data lake architectures and distributed processing frameworks (e.g., Spark, Hadoop).
</li><li>Experience with version control tools (GitHub, Bitbucket) and CI/CD pipelines.
</li><li>Understanding of data governance, security, and compliance frameworks.
</li><li>Exposure to AI/ML workloads desirable. 
</li></ul>Experience, Qualifications, and Education:
<ul><li>Experience: Minimum 5&ndash;8 years in data engineering, data warehousing, or data architecture roles, with at least 3+ years working with Snowflake.
</li><li>Education: University degree required.
</li><li>Preferred: BSc/MSc in Computer Science, Data Engineering, or related field
</li><li>Snowflake certifications (SnowPro Core, Advanced) highly desirable. 
</li></ul>Measures of Success:
<ul><li>Delivery of high-performing, scalable, and secure data pipelines aligned to client requirements.
</li><li>High client satisfaction and successful adoption of Snowflake-based solutions.
</li><li>Demonstrated ability to innovate and improve data engineering practices.
</li><li>Contribution to the growth of the practice through reusable assets, accelerators, and technical leadership.
</li></ul>We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.
You can find more information about NTT DATA UK &amp; Ireland here: https://uk.nttdata.com/
We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.
We are seeking an accomplished and detail-oriented Snowflake Data Engineer to join our Data &amp; AI practice. The successful candidate will bring deep expertise in data engineering, ETL/ELT pipelines, and cloud-native data platforms, with a strong focus on Snowflake. This role is critical in building and optimising modern data ecosystems that enable data-driven decision making, advanced analytics, and AI capabilities for our clients. 
 
As a trusted practitioner, you will collaborate with architects, developers, and analysts to design, implement, and maintain secure and high-performing data pipelines. You will thrive in a collaborative, client-facing environment, with a passion for solving complex data challenges, driving innovation, and ensuring the seamless delivery of data solutions.</div>

Snowflake Data Engineer

<div><div><div>Entity:
Technology 
Job Family Group:
IT&amp;S Group 
Job Description:
The Principal Platform Engineer is a senior individual contributor role responsible for defining the strategy and architecture for how bp's portfolio of engineering and data platforms connect, converge, and serve the organisation. This role sits at the intersection of platform engineering and enterprise architecture, providing technical leadership and strategic direction without direct line management.
The role exists to bring coherence to a distributed platform landscape, ensuring that internal engineering platforms, cloud-native infrastructure, and enterprise software-as-a-service (SaaS) solutions are integrated in a consistent, scalable, and well-governed manner. The Principal Platform Engineer is the technical authority on platform integration and convergence, influencing design decisions across teams and functions.
Key Accountabilities<ul><li>
Define and maintain a platform convergence strategy that articulates the current-state landscape, the target architecture, and a credible transition path &mdash; enabling bp's engineering platforms and SaaS solutions to operate as an integrated whole.</li><li>
Lead architectural design and decision-making at the intersection of internal platforms and enterprise SaaS, establishing integration patterns, data contracts, and governance standards that apply consistently across the platform estate.</li><li>
Act as the principal technical authority for platform engineering across the digital delivery organisation, providing expert guidance on platform design, cloud-native patterns, and systems integration to engineering teams and senior stakeholders.</li><li>
Drive resolution of complex cross-platform integration challenges, including identity, data flow, event-driven architecture, and API design &mdash; ensuring that integration decisions are durable, secure, and aligned with enterprise standards.</li><li>
Produce and maintain high-quality architecture strategy documents, reference architectures, and decision records that are accessible to both engineering and executive audiences, building shared understanding of the platform direction.</li><li>
Collaborate with AI engineering, software engineering, and external vendor and partner teams to ensure that platform architecture decisions enable and do not constrain the delivery of business and AI-powered capabilities.</li></ul>
This is a role with organisation-wide technical influence. The successful candidate will work closely with engineering managers, delivery teams, and external partners across a complex, multi-platform environment. The role requires a balance of critical thinking and hands-on technical credibility &mdash; candidates should be comfortable both authoring architecture strategy documents and engaging deeply in technical design discussions.<h1 class="jobSectionHeader">
What you will bring...</h1><ul><li>
Extensive experience in platform engineering (including Kubernetes) and the design, delivery, and operation of large-scale, multi-component platform estates in a cloud-native environment.</li><li>
Proven enterprise architecture capability, including experience producing target-state architecture strategies and navigating complex system landscapes spanning internal platforms and third-party SaaS.</li><li>
Deep knowledge of cloud-native architecture patterns: containerisation and orchestration, service mesh, API gateway design, event streaming, and infrastructure-as-code.</li><li>
Demonstrable experience integrating enterprise SaaS solutions &mdash; including ERP or business application platforms &mdash; with internally developed systems, covering API, identity, and data integration patterns.</li><li>
Track record of operating as a senior technical authority in a large organisation, influencing architecture and engineering decisions at scale without direct management responsibility.</li><li>
Strong communication and documentation skills, with the ability to convey complex architectural concepts clearly to technical peers, delivery teams, and senior business stakeholders.</li><li>
Bachelor's degree or higher in Computer Science, Software Engineering, Systems Engineering, or a related technical subject area or equivalent experience.</li><li>
Familiarity with regulatory and compliance considerations (e.g., data residency, audit logging, access control) as they apply to enterprise platform design.</li></ul>
Desirable Criteria<ul><li>
Familiarity with enterprise data platform architectures, including data mesh, data fabric, or data lakehouse patterns, and how these intersect with application and integration platforms.</li><li>
Prior experience working at the boundary of AI/ML infrastructure and broader platform engineering, including understanding of how MLOps capabilities are hosted and operated within an enterprise platform.</li><li>
Experience engaging with external software vendors and system integrators on integration architecture and platform alignment.</li><li>
Relevant professional certifications in cloud architecture or enterprise architecture (e.g., AWS Solutions Architect Professional, Azure Solutions Architect) are advantageous.</li></ul><h1 class="jobSectionHeader">
Why join us?</h1>
We&rsquo;re committed to supporting leaders who want to make an impact. At bp, you&rsquo;ll have the chance to shape and influence outcomes across businesses. You&rsquo;ll be part of an inclusive environment where diverse perspectives are valued, and where your contribution to performance and integration matters. We invest in the growth and wellbeing of our people, providing the resources, networks, and development opportunities needed to thrive.
Our total rewards package includes competitive pay, bonuses, share options, and a range of flexible benefits designed to meet your needs &mdash; from healthcare and retirement plans to paid time off and agile working. We recognise that people have multifaceted lives, and we strive to offer a career experience that reflects that.
Apply now!
Location
Please note that while this position can be based in our Sunbury office, this will move to Southwark, London by end 2027. 
Travel Requirement
Negligible travel should be expected with this role 
Relocation Assistance:
This role is not eligible for relocation 
Remote Type:
This position is a hybrid of office/remote working 
Skills:
Agility core practices, Agility core practices, API and platform design, Cloud Platforms, Collaboration, Communication, Configuration management and release, Continuous deployment and release, Creating a high performing team, Database Design, Digital Project Management, Documentation and knowledge sharing, Emerging technology monitoring, Facilitation, Information Security, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Problem Solving, Relational Data Modelling, Risk Management, Scripting, Secure development, Service operations and resiliency, Software Design and Development {+ 7 more} 
Legal Disclaimer:
We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us. 
 
If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</div>
<div>Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</div>
</div><div>Expand job description</div></div>
 <div><div>Disclaimer 


This is a high-level summary only of terms and current discretionary benefits applicable to certain roles. Some rewards, benefits and policies are at managers&rsquo; discretion and vary depending on where you work within the business. All terms subject to contract and all discretionary benefits subject to policy and eligibility.</div></div>

Principal Platform Engineer

Google

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor&rsquo;s degree or equivalent practical experience.</li>
<li>2 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree.</li>
<li>1 year of experience with ML infrastructure (e.g., model deployment, model evaluation, optimization, data processing, debugging).</li>
<li>Experience with GenAI techniques (e.g., LLMs, Multi-Modal, Large Vision Models) or with GenAI-related concepts (language modeling, computer vision).</li>
<li>Ability to communicate in French and German fluently to support client relationship management in this region.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Master&rsquo;s degree or PhD in AI, Computer Science, or a related technical field.</li>
<li>Experience implementing multi-agent systems using frameworks (e.g., LangGraph, CrewAI, or Google&rsquo;s Agent Development Kit (ADK)) and complex patterns like ReAct, self-reflection, and hierarchical delegation.</li>
<li>Knowledge of &quot;LLM-native&quot; metrics (tokens/sec, cost-per-request) and techniques for optimizing state management and granular tracing.</li>
<li>Ability to implement secure agentic workflows incorporating MCP, tool-calling, and OAuth-based authentication.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
Google Cloud&rsquo;s mission is to make every business successful through AI by combining cutting-edge technology, infrastructure, and talent. AI/ML software engineers in Cloud bridge the gap between pioneering models and a massive product vehicle reaching billions. Our talent density and AI-powered tools drive rapid development, rooted in a culture of empowerment and a bias to action. In this role, you aren&rsquo;t just building technology; you&rsquo;re shaping the frontier of enterprise and driving the evolution of advanced models. It's an exciting time to join Google Cloud&rsquo;s Go-To-Market team, leading the AI revolution for businesses worldwide. You&rsquo;ll excel by leveraging Google's brand credibility&mdash;a legacy built on inventing foundational technologies and proven at scale. We&rsquo;ll provide you with the world's most advanced AI portfolio, including frontier Gemini models, and the complete Vertex AI platform, helping you to solve business problems. We&rsquo;re a collaborative culture providing direct access to DeepMind's engineering and research minds, empowering you to solve customer challenges. Join us to be the catalyst for our mission, drive customer success, and define the new cloud era&mdash;the market is yours.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Serve as the lead developer for complex AI applications, transitioning from rapid prototypes to production-grade agentic workflows (e.g., multi-agent systems, model context protocol (MCP) servers) that drive measurable return on investment.</li>
<li>Architect and code the &quot;connective tissue&quot; between Google&rsquo;s AI products and customer's live infrastructure, including APIs, legacy data silos, and security perimeters.</li>
<li>Build high-performance evaluation (Eval) pipelines and observability frameworks to ensure agentic systems meet rigorous requirements for accuracy, safety, and latency.</li>
<li>Identify repeatable field patterns and technical &quot;friction points&quot; in Google&rsquo;s AI stack, converting them into reusable modules or formal product feature requests for the Engineering teams.</li>
<li>Co-build with customer engineering teams to instill Google-grade development best practices, ensuring long-term project success and high end-user adoption.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Partner Forward Deployed Engineer III, Generative AI (French, German)

Talan

<div>Company Description 
Talan Data x AI is a leading Data Management and Analytics consultancy, working closely with leading software vendors and top industry experts across a range of sectors, unlocking value and insight from their data. At Talan Data x AI, innovation is at the heart of our client offerings, and we help companies to further improve their efficiency with modern processes and technologies, such as Machine Learning (ML) and Artificial Intelligence (AI). 
Job Description 
As our AI practice scales, we are seeking an experienced AI Architect / Engineer to act as the senior technical authority shaping how we design and deliver next-generation AI solutions. This is a role for someone who has moved beyond building individual models to architecting entire systems: agentic platforms, LLM-powered applications, and the production infrastructure that makes them dependable at enterprise scale.
You will sit at the intersection of strategy and delivery, operating across multiple client engagements simultaneously. In the early phases you will shape solutions, validate technical approaches, and translate ambiguous business problems into robust, deployable architectures. As engagements mature, you will provide the technical oversight that keeps delivery teams aligned to the original design intent. Your influence will be felt in pre-sales conversations, solution blueprints, and the technical standards that define how our practice builds.
This is a hands on architectural role, not a purely advisory one. We expect you to remain close to the code, to prototype where it accelerates a decision, and to set a credible technical example for the engineers and data scientists you guide.
Required skills &amp; experience:<ul><li>
Lead end-to-end solution architecture for AI and LLM-based systems, spanning data, integration, infrastructure, and deployment.</li><li>
Design agentic architectures and multi-agent orchestration patterns, defining how LLMs, tools, APIs, and retrieval layers interact reliably.</li><li>
Shape early-stage engagements (scoping, solutioning, estimation, and pre-sales) turning client ambition into deliverable technical plans.</li><li>
Provide technical validation and quality oversight across several concurrent projects, mitigating risk before it reaches delivery.</li><li>
Define LLM integration and prompting strategies, including RAG, fine-tuning, evaluation, and guardrailing approaches.</li><li>
Establish MLOps and LLMOps practices that ensure solutions are observable, testable, and production ready.</li><li>
Set architectural standards, reusable patterns, and reference implementations that raise the quality bar across the practice.</li><li>
Partner with Responsible AI colleagues to embed safety, security, and governance into solution designs from the outset.</li></ul> 

Qualifications 
To qualify for this role, you must have:
<ul><li>Minimum 5 years in AI architecture or AI engineering, ideally 10+, with a track record of production deployments.</li><li>
Deep expertise in LLMs, agent frameworks (e.g. LangGraph, AutoGen, Semantic Kernel), API design, and orchestration.</li><li>
Strong cloud engineering experience.</li><li>
Proven MLOps / LLMOps capability &mdash; CI/CD for models, monitoring, evaluation, and cost optimisation.</li><li>
Hands-on software engineering background (Python and modern tooling) underpinning your architectural decisions.</li><li>
Comfort managing multiple engagements at once, with pragmatic judgement on trade-offs and delivery risk.</li></ul>
Ideally, you&rsquo;ll also have, but not essential:<ul><li>
Experience in consulting, professional services, or pre-sales environments.</li><li>
Exposure to enterprise-scale, regulated AI deployments (financial services, public sector, healthcare).</li><li>
Familiarity with vector databases, knowledge graphs, and advanced retrieval techniques.</li><li>
Relevant cloud or AI certifications.</li></ul>
You must be:<ul><li>
Willing to work on client sites, potentially for extended periods.</li><li>
Willing to travel for work purposes and be happy to stay away from home for extended periods.</li><li>
Eligible to work in the UK without restriction.</li></ul> 
#TalanUK #LI-HB1 
Additional Information 
Compensation &amp; Benefits Package:<ul><li>
BDP Plus &ndash; A reward programme whereby you accrue points to trade against a 3-month paid sabbatical or cash equivalent.</li><li>
25 days holiday + bank holidays.</li><li>
5 days holiday buy/sell option.</li><li>
Private medical insurance.</li><li>
Life cover.</li><li>
Cycle to work scheme.</li><li>
Eligibility for company pension scheme (5% employer contribution, salary sacrifice option).</li><li>
Employee assistance programme.</li><li>
Bespoke online learning via Udemy for Business.</li></ul>
Why join:
You will be a founding technical voice in a practice that is investing decisively in AI. The work is varied, intellectually demanding, and commercially significant, you will shape solutions that reach production, not slideware. You will have the autonomy to define how we build, the support of a collaborative multidisciplinary team, and a clear platform to grow into a practice-leading technical figure.</div>

AI Architect / Engineer (Agentic AI & LLM Architecture)

Driftrock Limited

<div>Driftrock is hiring a Senior Platform Engineer to take ownership of the infrastructure and security that let our engineering teams ship fast, safely and at scale as more of the world's biggest car brands come on board.
Quick facts<ul><li>
Team: Engineering</li><li>
Reports to: Head of Engineering</li><li>
Location: Remote, UK or abroad, with a few hours of daily UK overlap</li><li>
Contract: Full time, permanent</li><li>
Salary: &pound;65,000 to &pound;85,000, plus share options</li><li>
Start date: As soon as we find the right person</li></ul>
Why this role exists
Driftrock runs entirely on Google Cloud, and our product is growing quickly as more clients trust us with their marketing. As we scale, we're investing in a dedicated owner for our platform and security, so our engineering squads can keep shipping fast with strong foundations under them.
You'll define how we run, secure and evolve our platform, and build the tooling and secure defaults that let our product squads ship confidently without reinventing infrastructure every time. As Driftrock and our engineering org grow, this function is expected to grow too, and there's real room for the right person to shape it and eventually lead a small platform team.
Our platform is made of multiple Elixir services that talk to each other over APIs and RabbitMQ, store data in PostgreSQL and Redis, and run on Kubernetes (GKE) on Google Cloud. We manage our infrastructure in Terraform, run our own self-hosted Buildkite CI/CD, and use Oban for background jobs. We're a high-discipline engineering team that leans on Extreme Programming, test-driven development and pair programming to ship to production several times a day, with a strong data-driven and observability-first mindset.
What you'll own
You'll be accountable for the health, security and reliability of our cloud platform, and for the developer experience that sits on top of it, so that every engineer can build and ship with speed and confidence.
Your first 90 days<ul><li>
By day 30: you've mapped our current infrastructure, security posture and developer workflows, and you understand where the biggest opportunities and risks are.</li><li>
By day 60: you've shipped your first improvements and shared a prioritised roadmap for the platform, agreed with the engineering team.</li><li>
By day 90: you're delivering steadily against that roadmap, with early wins in place across security, reliability or developer experience, and clear ownership of the platform established.</li></ul>
What you'll be doing<ul><li>
Own and evolve our cloud infrastructure on Google Cloud, shaping how it's structured, secured and scaled so product teams can ship with confidence.</li><li>
Extend our infrastructure-as-code coverage so changes are repeatable, reviewable and safe, and our environments are cleanly separated.</li><li>
Build on our identity, access and secrets management, maturing our existing least-privilege access and secret rotation as the platform scales.</li><li>
Keep our security posture strong and audit-ready, maintaining our ISO 27001 certification and leading both certification and client security audits.</li><li>
Own our Kubernetes platform end to end, keeping clusters and workloads current, reliable and easy for teams to use.</li><li>
Own and improve our build and deployment pipelines on self-hosted Buildkite, along with the local tooling, containerisation and paved-road workflows that make our engineers faster.</li><li>
Run a steady cadence of upgrades and patching across the platform, along with DNS and certificate management, keeping everything current with minimal disruption.</li><li>
Improve infrastructure observability and visibility, so we understand cost, health and performance across our environments.</li></ul>
What you'll bring<ul><li>
Deep, hands-on experience running production workloads on a major cloud platform, ideally Google Cloud.</li><li>
A track record of operating Kubernetes in production, from cluster operations to sensible workload patterns.</li><li>
Fluency with infrastructure-as-code, ideally Terraform, and the instinct to codify everything.</li><li>
Strong cloud security fundamentals across identity and access, secrets, and network security.</li><li>
Experience owning CI/CD pipelines and improving how teams build and deploy.</li><li>
Comfortable being hands-on in our codebase: you're happy to write some Elixir, for example standing up an Oban LiveView dashboard or building internal tooling, or you have a background in a functional language or Ruby and are genuinely keen to learn Elixir.</li><li>
The seniority to own and shape a function: you set standards, make sound architecture decisions independently, and bring others with you.</li><li>
An enablement-first mindset, building guard rails and paved roads rather than gates and bottlenecks.</li></ul>
Bonus points<ul><li>
Production experience with Elixir, Erlang/OTP, Phoenix or LiveView, or a background in Ruby.</li><li>
Experience maintaining ISO 27001, SOC 2 or similar, and handling security audits with customers.</li><li>
Reliability practices such as service-level objectives and incident management.</li><li>
Awareness of cloud cost management.</li><li>
Experience mentoring engineers or growing a small team.</li></ul>
Not sure you tick every box? Please apply anyway.
Why Driftrock
Driftrock's mission is to become the world-leading automotive and e-mobility marketing software platform, and help accelerate the transition to clean transport.
We work with some of the world's biggest brands, including BMW, BYD, Mercedes-Benz and Volvo, and partner with the world's leading platforms, including Meta, Google, mobile.de and Auto Trader.
We've been building since 2013, and our work enables billions of euros in vehicle sales every year.
We're a close, fully remote team of 35 people across engineering, design, customer success, performance and commercial, spread across the world.
That means your work has a real, visible impact on our product, our culture and how we operate.
We're at the cutting edge of marketing technology, with plenty of room to unlock value from data and to help speed up the shift to electric vehicles.
How we work is shaped by four values:<ul><li>
We care: about our team, our customers, and the people who see the marketing messages that we power. Work isn't done until we can prove it's useful to both the consumer and the customer.</li><li>
Be that person: if something needs fixing, fix it. It's never someone else's problem.</li><li>
People-first: we put people at the core of everything, and never compromise security or privacy for results.</li><li>
Be better today than you were yesterday: we bake learning and continuous improvement into everything we do, for ourselves and our customers.</li></ul>
In practice, this looks like weekly Monday Showcases where we share what we're learning, regular retros, a budget to attend the courses and conferences that grow you, Donut coffee pairings to stay connected, and an annual company Summit that brings the whole global team together in person.
What's in it for you
We're remote-first and flexible about how and where you work, with co-working space available if you want it. Alongside your salary:<ul><li>
Share options in Driftrock, on founder-friendly, tax-efficient EMI terms, including the option to retain vested options after leaving (at board discretion).</li><li>
Comprehensive Vitality health cover: medical, dental, vision, hearing, mental-health support and therapy, cancer cover, a free Headspace subscription and Vitality rewards.</li><li>
24 to 28 days' holiday (24 + 1 extra each year, capped at 28), plus bank holidays.</li><li>
Pension contributions, life assurance (3x salary) and income protection.</li><li>
Electric car salary-sacrifice scheme (Octopus): save up to ~40%, with insurance, servicing and a charging perk included.</li><li>
Enhanced maternity and paternity leave.</li><li>
A learning budget for books, courses and conferences, plus time for personal goals.</li><li>
Perks and discounts via CharlieHR, and a BMW Group employee discount programme.</li></ul>
International team members:
We're remote-first and hire globally.While some UK-specific benefits are delivered differently abroad, we strive for genuine parity. Wherever you are, the standard package includes a comprehensive health plan, pension contributions, paid time off including local bank holidays, share options, enhanced maternity and paternity leave, a learning budget, and our flexible working culture. International team members are employed compliantly via an Employer of Record (Remote.com).
Our hiring process<ul><li>
A short intro call.</li><li>
A conversation with the hiring manager.</li><li>
A practical task based on real challenges, never unpaid spec work.</li><li>
A final conversation with the team.</li></ul>
Inclusion at Driftrock
Driftrock is an equal-opportunity employer. We welcome applicants of every background, identity and life experience, and we're building a team that reflects the people our marketing reaches. We don't make decisions based on age, disability, gender, gender identity, marital status, race or ethnicity, religion or belief, or sexual orientation. If you need any adjustments to the application or interview process to do your best, just let us know, and we're glad to help.
We will not be considering recruitment agencies for this role.
By applying for this job you give us permission to store your data on our secure applicant tracking system and to contact you about Driftrock job opportunities. We process your data for recruitment purposes only and keep it until this role is filled, after which we will delete it or, with your agreement, keep it for similar future roles for up to 12 months. See our privacy policy at driftrock.com/privacy-policy for how we comply with GDPR, including how to access, correct, delete or restrict the data we hold. You can lodge a complaint with the UK supervisory authority (the Information Commissioner's Office), or contact our DPO for any concerns.</div>

Senior Platform Engineer

Explore 62+ Cloud security architect in London this July. Find roles across top companies and apply now to boost your career.