Cloud Platform Engineering Lead

Schroders; Greater London; Hybrid; GBP 120,000 - 160,000; Full time

Job summary

Schroders seeks an experienced Cloud Platform Engineering Lead to build, operate and secure an AI-first AWS cloud platform in a regulated enterprise environment. You will enable developers and autonomous AI agents with paved roads and guardrails, while delivering platform capabilities with strong engineering discipline.

You will lead Terraform-based IaC, build CI/CD pipelines, and implement preventative/detective security controls across AWS services, ensuring reliability and governance in a

Qualifications

• Deep AWS expertise with Landing Zones and guardrails.
• Experience building paved roads for developer productivity.
• Security-first mindset with compliance in regulated environments.
• Hands-on engineering delivering platform capabilities.
• Experience in enterprise-grade cloud platforms.

Responsibilities

• Design and operate an AI-first AWS cloud platform.
• Build and govern CI/CD pipelines with automated tests.
• Develop and maintain MCP servers and reusable agent skills.
• Implement security controls and policy as code.
• Collaborate with security and application teams.

Skills

AWS

Terraform

Python

Linux

CI/CD

GitHub Actions

Security

Platform Engineering

SRE

Agentic AI

Tools

Terraform

AWS Landing Zones

AWS Organizations

Control Tower

AFT (Account Factory for Terraform)

OPA/Cedar/Sentinel

Job description

Who we’re looking for

We are seeking an experienced Cloud Platform Engineering Lead with deep AWS expertise to join Enterprise Cloud Engineering. This role is focused on building, operating and securing an AI-first, agentic-native AWS cloud platform in a regulated enterprise environment. We are looking for someone with experience of AWS Landing Zones, a security-first mindset, and knowledge of building ‘paved roads’ that reduce friction for application teams and make it easier for developers to comply with policy requirements. Previous software engineering experience is a bonus.

Job Description

Who we’re looking for

We are seeking an experienced Cloud Platform Engineering Lead with deep AWS expertise to join Enterprise Cloud Engineering. This role is focused on building, operating and securing an AI-first, agentic-native AWS cloud platform in a regulated enterprise environment. We are looking for someone with experience of AWS Landing Zones, a security-first mindset, and knowledge of building ‘paved roads’ that reduce friction for application teams and make it easier for developers to comply with policy requirements. Previous software engineering experience is a bonus.

You will be a hands‑on engineer responsible for delivering platform capabilities and agent skills that enable developers and autonomous AI agents to develop, build, test, and deploy applications through to production. You will also build SRE capabilities covering release management, operational stability, monitoring, and incident and alert response.

About Us

Schroders is a global investment manager which provides active asset management, wealth management and investment solutions. We aim to provide excellent investment performance to clients through active management. We serve a diverse client base that includes pension schemes, insurance companies, sovereign wealth funds, endowments, foundations, high net worth individuals, family offices, as well as end clients through partnerships with distributors, financial advisers, and online platforms.

Established in 1804, we have around 5,500 people across 36 global locations. Schroders' success can be attributed to its diversified business model, spanning different asset classes, client types and geographies.

Technology at Schroders

There’s a huge amount of change going on at Schroders. Technology’s shaping our business more and more, so there are many opportunities waiting to be grabbed. And because we’re a big financial player, we can put hefty backing behind good ideas.

We’re a serious business – we have enormous responsibilities to our clients and shareholders. But just because we’re suited and booted, that doesn’t make us stuffy; our tech teams are friendlier and more informal than you might expect.

The base

We moved into our new HQ in the City of London in 2018. We’re close to our clients, in the heart of the UK’s financial centre. And we have everything we need to work flexibly.

The team

You will be part of the Enterprise Cloud Engineering function, with a primary focus on AWS. The team builds and operates AWS Landing Zone foundations (including AWS Organizations, Control Tower, and AFT), security controls, and platform capabilities that enable developer agility while adhering to governance and compliance requirements.

We build platform products using strong engineering discipline, including automated testing and well-governed software delivery practices.

What You’ll Do

• Design and deliver a development platform on AWS, enabling teams and autonomous agents to securely create, test, and deliver applications and infrastructure through standardised paved roads
• Engineer and operate the AWS Landing Zone using AWS Organizations and Control Tower, including automated account vending via Account Factory for Terraform (AFT) and governance guardrails (e.g., SCPs).
• Implement Terraform based Infrastructure as Code that is modular, reviewable, and suitable for AI assisted/agentic authoring.
• Build and operate CI/CD pipelines using GitHub Actions/Workflows, embedding quality controls such as linting, static analysis, vulnerability scanning, and automated tests.
• Define and implement test strategies for platform services and infrastructure code (e.g., unit testing for automation/services, policy tests, IaC validation, integration testing in ephemeriod environments).
• Implement preventative and detective security controls (e.g., AWS Config, Security Hub, policy as code, automated compliance scanning).
• Develop and maintain Model Context Protocol (MCP) servers and reusable agent skills, contributing to an enterprise Agent Skills Marketplace with appropriate guardrails.
• Design, build, and support AWS services including VPC networking, compute, storage, containers (ECS/EKS), and serverless (Lambda).
• Develop Python based automation, services, and agent skills using Boto3 and AWS Lambda.
• Perform Linux configuration, hardening, and troubleshooting in cloud environments.
• Collaborate with security, platform, and application teams to improve reliability, security, and developer experience, treating the platform as a product.
• Strong hands‑on experience engineering AWS platforms in enterprise or regulated environments.
• Familiarity with agentic AI development patterns and tools; experience with AWS Bedrock/Agent-Core and MCP is desirable.
• Experience with policy as code tools (e.g., OPA, Cedar, Sentinel) and testing/validating policies is desirable.
• Experience building developer platforms / paved roads / self‑service platform products is highly desirable
• Deep knowledge of AWS Landing Zones, including Organizations, Control Tower, AFT, account vending, audit, and compliance.
• Strong Infrastructure as Code skills using Terraform (required); familiarity with AWS CDK and CloudFormation is a plus.
• Experience with CI/CD and Git‑Ops using GitHub Actions/Workflows, including approval gates for infrastructure change.
• Strong AWS security experience across preventative/detective controls, monitoring/alerting, policy as code enforcement, and vulnerability management.
• Proficient Python development (Boto3/Lambda), building automation and services that compose into larger workflows.
• Strong Linux systems knowledge and troubleshooting skills.
• Experience with AWS core services: networking (VPC), compute, storage, containers (ECS/EKS), serverless.
• Demonstrable experience designing and implementing testing strategies, including automated unit/integration/end to end testing, and embedding these into CI/CD pipelines.

What You’ll Be Like

• A pragmatic, hands‑on, delivery-focused AWS platform engineer with a builder’s mindset.
• Quality‑minded: you default to reliable systems supported by automated tests and meaningful CI/CD quality gates.
• An enabler: you enjoy building platform capabilities as products, with strong engineering discipline and attention to developer experience.
• Security‑focused with an automation‑first mindset—security should be designed‑in, not bolted on.
• Curious about agentic AI and actively experimenting with AI development tools and frameworks.
• Comfortable operating at platform scale in complex environments where “you ship it, you own it”.
• Clear communicator who produces reviewable infrastructure code and durable documentation.

We Recognise Potential, Whoever You Are

Our purpose is to deliver excellent investment performance to clients through active management. We believe diverse perspectives and an inclusive culture help us make better decisions and achieve better outcomes for our clients. That's why inclusion is a strategic priority for us, and we are an equal opportunities employer. You are welcome here, regardless of your age, disability, gender identity, religious beliefs, sexual orientation, socio‑economic background, or any other protected characteristic.

We will consider flexible working arrangements for all roles and provide reasonable accommodations to support applicants and employees, including those with neurodiversity, disability, or physical and mental health needs. For more information, please visit our FAQs.

About Us

We’re a global investment manager. We help institutions, intermediaries and individuals around the world invest money to meet their goals, fulfil their ambitions, and prepare for the future.

We have around 6,000 people on six continents. And we’ve been around for over 200 years, but keep adapting as society and technology changes. What doesn’t change is our commitment to helping our clients, and society, prosper.