How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Kord
Kord is an FCA-regulated fintech delivering KYC, Anti-Money Laundering (AML), identity verification, and payments infrastructure to regulated businesses across the UK. We help companies verify who they are dealing with quickly and reliably.
Behind that sits a genuinely interesting engineering problem. Verification checks and payment flows have to be fast, correct, and provable after the fact, on a platform growing on every axis at once: more clients, rising enquiry volumes, and payment systems arriving through acquisition. AWS and Terraform, EKS, a PostgreSQL, MySQL, and Redis data layer, Java, Node.js, and Laravel services on top, and event streaming on the horizon.
Why this role matters
Every check we run and every payment we process depends on the platform underneath it. Get that right, and clients trust us, auditors are satisfied, and the engineering team ships without looking over its shoulder.
We should be clear about what this is. There is no DBA, no security team, no SRE rota, and no tooling group who already solved observability. A fair amount of the stack is unowned. We are FCA-regulated, and we handle identity and payments data, which means nothing here can be approximate. What you build has to hold up under an auditor, a client security review, and a real incident, with you in the room accounting for it.
That is also what makes the role worth having. The decisions are still open, and they will be yours: the standards, the tooling, and the things we deliberately choose not to build. Very few engineers get to shape a regulated platform from the ground up and then watch a growing business run on it. If that is the kind of responsibility you have been looking for, this is it.
What you'll own
- AWS and Terraform. The whole estate, infrastructure as code first, with no undocumented manual changes.
- EKS. Running and scaling workloads securely, including RBAC, network policies, ingress, and secrets.
- The data layer. PostgreSQL, MySQL, and Redis in production: replication, failover, tested restores, and tuning under load.
- Application runtime. Keeping Java, Node.js, and Laravel or PHP services healthy alongside the engineers who write them.
- CI/CD. Secure Bitbucket Pipelines with build isolation, artifact integrity, and dependency control across npm and Composer.
- Observability. Datadog end to end, including APM tracing, SLOs, and alerts people trust enough to act on.
- Security and compliance. Zero trust, least-privilege IAM, secrets and key management, audit evidence, and answering auditors directly.
- Incidents. Incident command, on-call health, and postmortems that actually change something.
- Payments and legacy. Integrating acquired systems, including PCI scoping and segmentation.
- The conversation about all of it. Regular progress reporting to the executive team, and working across engineering, product, compliance, and risk.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we actually need
Roughly 7+ years in infrastructure or platform engineering, including at least 3 years owning production AWS somewhere the consequences were real — regulated, handling payments, or otherwise audited.
We have split this deliberately. The must-haves are genuinely non-negotiable. Everything below that we will trade against strength elsewhere, and we would rather hire someone excellent in most of it than someone adequate in all of it.
Must have
- AWS, in depth. VPCs, routing, private connectivity, least-privilege IAM.
- Terraform, in depth. Module design, remote state, environment isolation, drift management.
- Kubernetes in production. RBAC, network policies, secure ingress and egress, secrets. EKS specifically is a plus, not a requirement.
- Production relational databases you have personally been responsible for. Replication, failover, restores you have actually performed, and tuning under load. PostgreSQL or MySQL — we run both, and we assume whichever you know less well you will pick up.
- Security and compliance you have been accountable for. Defence in depth, least-privilege IAM, secrets management (Secrets Manager or Vault), KMS, TLS everywhere. You have personally answered auditor and client security questionnaires and stood behind the answers — not forwarded them to someone else.
- Senior stakeholder communication. You can hold a room with founders, executives, auditors, and client security teams. You have a track record of reporting progress on a regular cadence to people who are not engineers, and of getting alignment across teams without formal authority.
- You have done this without specialist teams to hand work to. You have built a platform or security function somewhere small or scaling, owned a system over years including upgrades, on-call, backlog, cost, and technical debt — and you can say clearly what you chose not to do, and why.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Strong advantage
- Fintech or payments; FCA regulation or an equivalent regime in another jurisdiction
- ISO 27001, UK GDPR, or PCI DSS hands-on, with audit logging and traceability
- Operating JVM services in production — diagnosing heap, GC, thread, and connection pool problems alongside the engineers who own the code
- Node.js and/or Laravel/PHP in production
- Redis in production
- Supply-chain-hardened pipelines: build isolation, artifact integrity, version pinning, reproducible builds
- SAST, DAST, and dependency scanning implemented as gates engineers actually trust rather than route around
- Distributed tracing and SLOs you have used to resolve real incidents, not just to build dashboards — Datadog, or Prometheus/Grafana/Honeycomb/OpenTelemetry equivalents
- Kafka, Kinesis, MSK, or similar event streaming in production
- Integrating acquired systems; hybrid on-prem and cloud
- Cloudflare; image and runtime scanning
- AWS Security Specialty, CKA, or CKS
We will teach you
Datadog specifically, Bitbucket Pipelines specifically, our Laravel and PHP estate, and our compliance calendar. If you are strong on the must-haves, none of these are worth screening you out over.
The hiring process:
- Screening call with HR, online
- Call with the hiring manager, online
- Take-home task
- In-person interview, including a presentation of your task
- Culture fit interview
Kord is an equal opportunities employer. We welcome applications from all backgrounds and are committed to building a diverse and inclusive team.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location