Platform Engineer

 

A day in the life

As a Platform Engineer, you will initially join our platform squad. We build and maintain the AWS infrastructure, deployment pipelines, tooling and engineering standards that every other squad at ManyPets depends on.

This role has a strong security focus, and it will become more security focused over time. Much of the work is compliance and assurance: building and running the tooling that checks our cloud estate against our security standards, writing the scripts that turn a manual check into a scheduled one, gathering the evidence we need for ISO 27001 and our other obligations, and supporting the audits that depend on it. Alongside that you will help us tighten access controls across our cloud estate, and take on ownership of the edge and network security tooling that protects our services.

Over time this role moves across to work directly with our Head of Security as we build out a dedicated security function at ManyPets. You will help shape what that function does and how it works, rather than inheriting something already built.

Our environment is fast-paced and highly collaborative. You will work closely with your teammates using pair or mob programming, participating in regular workshops and planning sessions, primarily over Zoom, with occasional in-person collaboration.

We embrace modern development practices:

· All our services are cloud-hosted on AWS, using serverless and event-driven architectures for scalability and resilience.

· We use a fully automated deployment pipeline, allowing you to release to production within minutes, multiple times per day.

· We define our infrastructure as code, and we emphasise observability, testing and secure-by-design principles from the start.

As a squad we own our work end-to-end, including development, maintenance and support. You will play a key role in ensuring the reliability and quality of what we provide to the rest of engineering, and contribute to a culture of rapid learning and continuous improvement.

Your responsibilities

ü Build and maintain secure platform foundations

o Design, build and maintain the shared cloud infrastructure, tooling and deployment pipelines that other squads rely on.

o Define infrastructure as code so our environments are consistent, repeatable and reviewable.

o Make secure configuration the default, so squads get it without having to ask for it.

o Maintain the edge and network security tooling that protects our services.

o Share in the day-to-day operational ownership of the platform, responding to requests and issues raised by other squads.

 

Make our security posture measurable

o Automate the gathering of evidence for ISO 27001 and our other compliance obligations, so that an audit means pulling a report rather than running a manual exercise.

o Write the scripts and small services that turn a manual security check into a scheduled, repeatable one.

o Triage findings from our scanning and posture tooling such as Aikido and Ascidian, work out which ones actually matter, and either fix them or get them in front of the team that can.

o Work with our Head of Security to turn written policy into controls that are enforced by tooling.

 

Strengthen access and identity controls

o Review and tighten access across our cloud accounts, working towards least privilege.

o Improve how we manage secrets, credentials and machine identities.

o Make access changes auditable, and straightforward for engineers to request and for us to review.

 

Extend our platform standards beyond AWS

o Help us apply the standards, tooling and controls we have built in AWS to our Google Cloud estate.

o Work with the teams who use Google Cloud to understand their needs and where the gaps are.

 

Team collaboration

o Work closely with other squad members and stakeholders to align on goals and solutions.

o Support engineers across other squads who use our platform, and take their feedback seriously.

o Proactively build shared understanding across the team through pairing, discussions, and reviews.

o Document your work clearly to support knowledge sharing and future maintenance.

 

Self development

o Take ownership of your learning journey and technical development plan.

o Approach challenges with curiosity and a growth mindset.

o Learn from your peers and actively seek feedback and mentorship.

 

Your skills and experience

We are looking for someone with:

· Commercial experience building and maintaining cloud infrastructure on a major cloud provider (AWS, Google Cloud or Azure).

· Hands-on experience defining infrastructure as code.

· Experience building and maintaining continuous integration and deployment pipelines.

· A good working understanding of cloud security fundamentals.

· Proficiency in at least one scripting language, ideally Python.

· Comfort working in a regulated environment. We are FCA regulated and take our ISO 27001 commitments seriously.

 

You will also need at least one current associate-level cloud certification:

· AWS: Solutions Architect Associate, Developer Associate or SysOps Administrator Associate. We would also be interested in the AWS Certified Security Speciality.

· Google Cloud: Associate Cloud Engineer.

· Microsoft Azure: Administrator Associate (AZ-104) or Security Engineer Associate (AZ-500).

 

Entry-level certifications such as AWS Cloud Practitioner, Google Cloud Digital Leader and Azure Fundamentals do not meet this on their own. Please include the certification name and your credential ID or badge link with your application.

 

We would also like to see at least one of the following. You do not need both, and we will support you to build the other:

· A security specialism, where you can tell us about security or compliance tooling you have built and what it caught.

· Experience across more than one cloud provider, ideally both AWS and Google Cloud.

The interview process

This position has a four-stage interview process, which will be held via Zoom.

· Stage 1 - an initial conversation with a member of our Talent team.

· Stage 2 - an informal meeting with the hiring manager for about 45 minutes. We will explain more about the role and explore how your experience matches up with what we need.

· Stage 3 - a longer interview, up to an hour, with the hiring manager and two engineers from the team. We will ask some competency questions and work through a technical scenario together. There is no take-home exercise.

· Stage 4 - an informal conversation with our Head of Security.

About the team

The EPD ("Engineering, Product and Design") team operates with a squad system and Agile ways of working within quarterly terms - and we really enjoy working collaboratively. We hold regular ‘Hack Weeks’ to look at products and address problems relating to the business, and we get the chance to highlight and work on things we’re interested in and feel passionately about.

Our tech stack

We are on a mission to become the best we can be, constantly challenging ourselves to achieve and learn. You will be supported to learn new technology – both in breadth and depth - and encouraged to challenge our ways of thinking with new and innovative ideas.

Our “north star” is to become an elite performer as defined by the 4 key DORA metrics. To drive towards elite status, we apply and continually inspect and adapt the best Agile frameworks and practices inspired by DevOps, SRE, Scrum, XP and Lean. We are a highly collaborative environment and regularly practice Mob and Pair based programming which we believe improve our quality of delivery and share understanding.

We take our operational performance, security, and reliability as seriously as our quality and development practices. We are cloud hosted and highly automated, primarily on AWS with some critical services running on Google Cloud.

Some specific technologies we use include: AWS | Google Cloud | Python | MongoDB | Aikido | Ascidian | Cloudflare