Security, SIEM and detection

• Own the relationship with our third-party SIEM vendor, covering service management, tuning, use case coverage, contractual performance and value for money.
• Own log collection, aggregation, retention and alerting, with detection use cases and dashboards aligned to security, incident response, compliance and data retention needs, keeping coverage in step with platform change.
• Set and maintain a strong security posture across cloud management practice: least privilege, identity-first controls, secure defaults, secrets management (Azure Key Vault, AWS Secrets Manager or HashiCorp Vault) and controls as code (Azure Policy, AWS Config, SCPs, IAM/Entra ID policy management).
• Take a forward-looking view of the security challenges posed by fast-moving challenger AI models, including AI-assisted attack tooling, agentic access to cloud APIs and control planes, credential or secret exposure through AI tooling, and unsanctioned AI use. Recommend and implement proportionate mitigations ahead of the curve, and advise the SLT on emerging risk.

Reliability and delivery

• Implement robust monitoring, alerting and observability tooling (Azure Monitor/Log Analytics, CloudWatch, Prometheus, Grafana, Datadog), and lead incident response, root cause analysis and resilience improvements.
• Maintain and evolve CI/CD pipelines (Azure DevOps, GitHub Actions, Bitbucket Pipelines or Jenkins) and automate deployments for container-based workloads on AKS, ECS (Fargate) or Azure Functions/Lambda.
• Collaborate with development teams to optimise build and deploy cycles and reduce lead time for changes, with security best practice embedded into provisioning and pipeline execution.
• Some out-of-hours (OOH) work is required to maintain production systems, including participation in the OOH critical ticket rota.

Required Skills & Experience

Experience and leadership

• Depth of experience: significant experience in DevOps, SRE or Cloud Engineering roles (typically 8+ years), including a proven track record at senior or lead level. You will be comfortable setting direction for a highly experienced team.
• Team building: demonstrable experience building and managing high-performing, stable platform teams, with a track record of retention, capability growth and consistent delivery.
• Conflict resolution and collaboration: proven ability to resolve conflict constructively and to build durable, collaborative relationships with R&D and Engineering counterparts.
• Pace: proven ability to operate and lead in a very fast-paced environment, holding quality and security standards while priorities change, and keeping the team steady and focused through it.

Microsoft Azure (primary requirement)

• Strong and demonstrable hands-on Azure expertise is essential. We expect evidence of the following:
  • Managing and changing entitlements on deployed virtual machines, with appropriate control and audit.
  • Provisioning VM family entitlements and quota across alternate regions and SKUs to meet customer demand.
  • Subscription and management group architecture, landing zone design, and enforced separation of production and non-production environments.
  • Azure tagging strategy design and policy-based enforcement.
  • Entra ID (Azure AD), identity and access management, and policy management.
  • VMSS, Azure Networking (VNet, NSGs), AKS, Azure Functions, Azure Monitor and Log Analytics, Azure DevOps, Azure Storage, Azure SQL and Cosmos DB, ARM/Bicep templates and Azure Policy.

AWS and wider engineering tooling

• AWS core services: EC2, IAM, VPC, ECS/Fargate, CloudFormation, CloudWatch, RDS, DynamoDB, S3 and Lambda, with tagging enforcement consistent with the dual-cloud approach.
• Strong Terraform (HCL) across multi-cloud environments, including workspaces, modules and Terraform Cloud or similar; Ansible roles, dynamic inventories and remote configuration management.
• Strong scripting (Bash, Python or Go); container orchestration and deployment (Docker, Kubernetes, ECS or AKS); GitOps or IaC-based workflows.
• Familiarity with Google SRE practices, and with systems reliability metrics and associated tooling.

SIEM and security

• SIEM management: demonstrable experience managing a SIEM delivered through a third-party vendor, including tuning, detection use case ownership, service review and holding the vendor to account. Hands-on implementation of a SIEM in a commercial environment is not required.
• Security posture: strong grounding in cloud security practice, with awareness of the risks presented by rapidly advancing AI models and agentic tooling, and a practical, forward-looking approach to mitigating them.

Desirable

• Experience with subscription management in Microsoft Foundry.
• Experience operating a multi-tenant SaaS platform across multiple geographic regions.

Soft Skills & Behaviours

• Self-driven, with a bias toward action and ownership.
• Excellent communicator, able to collaborate across disciplines and levels of technical understanding.
• Calm and constructive under pressure, comfortable with ambiguity and rapid change.
• Experienced working in cross-functional teams and agile environments (Scrum/Kanban).