Access Governance and Security

• Design and enforce RBAC and least-privilege access models across our cloud and tooling estate
• Maintain an auditable access model appropriate to a regulated financial services environment, including joiner/mover/leaver processes and periodic access reviews
• Keep the environment documented end-to-end

CI/CD, Release Engineering and Quality

• Design, document, and run disaster recovery and backup restoration exercises, with evidenced outcomes
• Establish monitoring, logging, and alerting for clear visibility of platform health and security events
• Support audit, regulatory, and banking partner requests with infrastructure evidence and control documentation

Internal IT and Endpoint Management

• Manage MDM for a small distributed team using Microsoft Intune and Autopilot
• Define device compliance, encryption, and onboarding standards
• Act as the first port of call for internal IT matters, coordinating with external support providers where needed

Role Expectations

• Demonstrable experience owning production cloud infrastructure on Google Cloud Platform, including GKE
• Strong grounding in identity and access management: RBAC design, least-privilege models, and access review processes
• Hands-on experience building and maintaining CI/CD pipelines in a production setting, including automated testing and quality gates
• Practical experience operating containerised microservice workloads
• Experience designing and executing disaster recovery and backup restoration exercises, not just documenting them
• Experience with Microsoft Intune and Autopilot for endpoint management, or clear capability to stand this up
• Infrastructure-as-code experience (Terraform or equivalent)
• Experience operating in a regulated environment (EMI, PSP, banking, or similarly controlled) is strongly advantageous
• Versatile and self-directed: comfortable owning a broad remit spanning infrastructure, delivery, and internal IT, with the discipline to document and share knowledge