Responsibilities

Infrastructure and automation

• Builds and maintains our AWS infrastructure as code, treating infrastructure with the same care as application code — reviewed, tested and versioned.
• Optimise our platform and containerised workloads on ECS and Fargate, including scaling, cost and service health.
• Automates repeat work rather than absorbing it, removing toil from the team instead of quietly living with it.
• Owns and improves our CircleCI and GitHub Actions pipelines so builds, tests and deployments are quick and predictable.
• Writes and maintains runbooks so operational knowledge sits with the team rather than with one person.

Reliability and observability

• Set up and tune monitoring and alerting in New Relic so problems are spotted before customers raise them, and so alerts mean something when they fire.
• Takes part in incident response, helps establish root cause, and sees follow-up fixes through to completion rather than leaving them on a list.
• Contributes to backup, resilience and disaster recovery work, including testing that recovery actually works.

Security and compliance

• Applies security fundamentals day to day: least privilege IAM, secrets handling, patching, network segmentation and certificate management.
• Supports evidence gathering and control work for our security and compliance obligations.

Ways of working

• Works closely with product engineering, support and security so platform decisions reflect real needs rather than assumptions.
• Is collaborative by default, creating solutions together or seeking feedback to learn and validate.

Skills

• Solid hands-on experience with core AWS services, and comfortable designing cloud native systems built on containers, serverless components and automation
• Able to read, write and maintain Go, used here mainly for internal tooling
• Practical experience building and maintaining infrastructure as code with Terraform or Pulumi (Pulumi preferred)
• Confident with Git workflows, pull request reviews and GitHub Actions for CI/CD
• Experience configuring and integrating off-the-shelf vendor products as well as internally built tools
• A good grasp of core security fundamentals, including IAM and least privilege, secrets management, networking basics (VPC, DNS, TLS, load balancing) and vulnerability management
• Comfortable troubleshooting Linux and containerised workloads, and scripting your way out of repetitive tasks
• Able to manage your own workload, prioritise sensibly, and keep progress visible without being chased
• Clear communicator, able to explain technical decisions or challenges to non-technical people

Beneficial but not essential

• Some Node.js or Ruby experience
• Cloudflare (DNS, WAF, CDN)
• Octopus Deploy
• Experience working within SOC 2 or ISO 27001 controls
• Observability tooling such as New Relic, Datadog or similar
• Experience with incident management tooling and blameless post-incident reviews

At Zuno, we believe diverse perspectives make us better at what we do. We’re committed to fostering an inclusive, welcoming environment where everyone—regardless of background, identity, or experience—feels valued and supported.

If you’re excited about this role but don’t meet every qualification, we encourage you to apply. Your unique perspective could be exactly what we need to grow and thrive.

Benefits

• 30 days annual leave + bank holidays
• Private Medical Cover with Aviva*
• 4x salary Death in Service cover with Zurich*
• Paid maternity & paternity pay after a year of service
• Salary sacrifice pension matched up to 6%*
• Flexible working times and location
• Team lunches, team events, snacks, fruit, nice people

*: After probationary period