Senior DevOps Engineer

DevOps / Platform Engineer - City of London / Hybrid

My client, a leading provider of payments, fx and financial services is looking to a hands-on DevOps / Platform Engineer to own the cloud infrastructure, delivery pipelines, and internal IT.

Their platform runs on Google Cloud Platform with containerised workloads on GKE. You will be responsible for the reliability, security, and governance of this environment (access management, deployment controls, disaster recovery, release quality, and endpoint management) working alongside our development teams.

This is a broad, high-trust role at the centre of an engineering operation. You will be the infrastructure owner: the person who defines how they build, deploy, secure, test, and recover. It suits a versatile engineer who enjoys owning the full operational picture rather than one narrow slice of it.

Key Responsibilities

• Own and operate our GCP estate, including GKE, databases, networking, and IAM, across live and development environments
• Maintain and improve the reliability, security, and cost-efficiency of a live production environment
• Manage our edge and DNS configuration and security posture
• Introduce infrastructure-as-code and repeatable provisioning where beneficial

Access Governance and Security

• Design and enforce RBAC and least-privilege access models across our cloud and tooling estate
• Maintain an auditable access model appropriate to a regulated financial services environment, including joiner/mover/leaver processes and periodic access reviews
• Keep the environment documented end-to‑t end

CI/CD, Release Engineering and Quality

• Design, document, and run disaster recovery and backup restoration exercises, with evidenced outcomes
• Establish monitoring, logging, and alerting for clear visibility of platform health and security events
• Support audit, regulatory, and banking partner requests with infrastructure evidence and control documentation

Internal IT and Endpoint Management

• Manage MDM for a small distributed team using Microsoft Intune and Autopilot
• Define device compliance, encryption, and onboarding standards
• Act as the first port of call for internal IT matters, coordinating with external support providers where needed
• Demonstrable experience owning production cloud infrastructure on Google Cloud Platform, including GKE
• Strong grounding in identity and access management: RBAC design, least-privilege models, and access review processes
• Hands‑on experience building and maintaining CI/CD pipelines in a production setting, including automated testing and quality gates
• Practical experience operating containerised microservice workloads
• Experience designing and executing disaster recovery and backup restoration exercises, not just documenting them
• Experience with Microsoft Intune and Autopilot for endpoint management, or clear capability to stand this up
• Infrastructure-as-code experience (Terraform or equivalent)
• Experience operating in a regulated environment (EMI, PSP, banking, or similarly controlled) is strongly advantageous
• Versatile and self‑directed: comfortable owning a broad remit spanning infrastructure, delivery, and internal IT, with the discipline to document and share knowledge