Senior DevOps Engineer

What will you be doing?

As a Senior DevOps Engineer, you will help shape the cloud platforms and engineering practices that support secure, reliable and scalable software delivery across PayPoint Group.

Working closely with Development, Architecture, Security and Operations teams, you will lead improvements across our AWS environments, CI/CD pipelines, infrastructure as code, observability and deployment processes.

This is a hands-on senior role where you will provide technical direction, support and mentor other engineers, and help establish consistent DevOps and platform engineering standards. You will also ensure that our deployment and automation processes meet security and regulatory requirements, including PCI DSS, ISO 27001 and Cyber Essentials.

Experience within financial services, a regulated environment or another service-critical industry would be particularly valuable.

This is a hybrid role with occasional onsite collaboration — typically once every 2–3 months, but you are able to attend our offices as much as you like, — at either our Welwyn Garden City or Livepool offices. From time to time, you may also travel between sites.

Key responsibilities

• Lead the design and improvement of CI/CD pipelines using GitHub Actions, Azure DevOps, AWS deployment services, Flux and Argo CD
• Build and manage infrastructure as code using Terraform and, where appropriate, CloudFormation
• Design and operate secure, scalable AWS environments across development, staging and production
• Manage containerised platforms using Docker, Kubernetes and Amazon EKS
• Improve monitoring, logging, tracing and alerting using OpenTelemetry, Prometheus, Grafana and Dynatrace
• Embed security, compliance and policy controls into CI/CD pipelines and runtime environments
• Develop reliability practices covering SLOs, SLIs, incident response, root cause analysis and post-incident improvements
• Support backup, disaster recovery and business continuity planning and testing
• Manage secrets, configuration and encryption using AWS Secrets Manager, Systems Manager Parameter Store and KMS
• Improve cloud cost, capacity and performance through FinOps and architecture improvements
• Work with engineering teams to improve release quality, deployment frequency and operational resilience
• Participate in the production support rota, currently one week in every six

You will also help improve

• Deployment automation and release governance across multi-account AWS environments
• Platform observability and the quality of operational alerts
• Vulnerability management, security controls and compliance automation
• System performance, scalability and resilience testing
• Developer productivity through reusable tooling, templates and self-service capabilities

What we would like from you

We are looking for someone with strong experience in several of the following areas. We do not expect every applicant to meet every requirement:

• Hands-on AWS experience across services such as EC2, ECS or EKS, Lambda, VPC, IAM, RDS, S3, CloudFront, Route 53, KMS and CloudWatch
• CI/CD tooling such as GitHub Actions, Azure DevOps, Flux or Argo CD
• Infrastructure as code, particularly Terraform
• Docker and Kubernetes, ideally including Amazon EKS
• Secure AWS landing zones and multi-account environments
• GitOps principles and modern deployment approaches, including blue-green, canary and rolling deployments
• Scripting and automation using Bash, Python or PowerShell
• DevSecOps, cloud security controls and policy as code
• Troubleshooting, incident management and root cause analysis
• Working collaboratively across technical teams and with a range of stakeholders
• Agile software engineering environments

It would be great if you have the following

• AWS Organisations, account governance or platform guardrails
• AWS networking and security services such as WAF, Security Hub, GuardDuty, NACLs or Transit Gateway
• Database deployment automation or migration strategies
• Microservices, API gateways, service mesh or runtime security technologies
• AWS certifications, such as Solutions Architect Professional, DevOps Engineer Professional or Security Specialty
• Experience mentoring engineers or helping set technical and platform standards
• PCI DSS or other regulated-industry experience
• SRE principles, error budgets, ITIL or service management practices
• Automated testing and quality gates within CI/CD pipelines

Our benefits if you decide to join us

• Holiday purchase scheme, with 25 days holiday plus bank holidays as standard.
• On-site gym at our office (Free), and nationwide corporate rate gym membership
• Online benefits portal where you can access lots of deals, discounts - for example of shopping or holidays
• Contributory company pension scheme
• Progression and Development
• Private medical insurance
• Electric Car Scheme
• Life assurance of 3 x annual gross salary, with the option to purchase additional cover
• You’re also able to purchase a range of benefits at a discounted rate including, critical illness cover, bicycles via our Cycle2Work scheme, dental insurance and TasteCard dining discount card
• Love2shop Everyday Benefits Card

As a disability-confident committed company, we have a passion for championing equality. We welcome all colleagues into a work environment where success is attainable for everyone, regardless of disability, age, race, religion, gender identity, or sexual orientation. We are committed to ensuring that everyone has equal access to growth and opportunities in our workplace.