Principal Platform Engineer – Remote Cloud & Security

Ocho; United Kingdom; Remote; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Fully remote work

Generous annual leave

Comprehensive benefits package

Principal-level influence

Job summary

Ocho is seeking a Principal Platform Engineer to design and run the secure hosting core that every product in our fintech runs on. This hands-on role reports to the Director of Platform Engineering and combines system design with production code in Go, C#, Java or Rust across on-premises, private cloud, OCI, AWS and Azure.

You’ll lead architecture decisions, mentor engineers, drive reliability through SLOs and audits, and collaborate across Systems, Network, DevOps and InfoSec.

Qualifications

• Extensive experience designing, building and running production infrastructure platforms.
• Strong knowledge of at least one statically typed backend language.
• Hybrid and multi-cloud design experience with failover strategies.
• Deep PKI, CA design, rotation, and mTLS at scale.
• Identity management knowledge incl. Entra ID, OAuth 2.0, OIDC, SAML.
• Secrets management and zero-trust networking.
• SRE practices: SLOs, telemetry, incident management.

Responsibilities

• Design the secure hosting core across on-premises, private cloud, OCI, AWS and Azure, and own the architecture decisions behind it
• Lead the move from Active Directory to Entra ID, and build an internal identity platform for just-in-time and privileged access with PCI DSS and SOX audit evidence
• Design and run the certificate authority on HashiCorp Vault, with mTLS between services and automated issuance and rotation
• Keep every secret in Vault with automatic rotation, secret scanning across the estate and 72-hour rotation of any credential
• Design and run external and internal DNS, including DNSSEC and zone migrations, with all origins locked down behind Cloudflare
• Build desired-state control planes that drive DNS, load balancers, firewalls, service discovery and cloud through their APIs, with drift detection
• Shift network and egress control to policy as code, leading zero trust network access and identity-based segmentation
• Build policy-as-code decision services and supply-chain controls, including signed artefacts, admission control and vulnerability gating
• Run the platform to SLOs and error budgets, owning telemetry, alerting, capacity planning, safe releases and tested, immutable recovery
• Lead design reviews, blameless incident reviews and on-call escalation, and mentor senior engineers

Skills

Go

C#

Java

Rust

Production code daily

System design

Tools

HashiCorp Vault

Terraform

Cloudflare

Entra ID

Certificate Authority

DNS management

OCI/AWS/Azure

Job description

Ocho is seeking a Principal Platform Engineer to design and run the secure hosting core that every product in our fintech runs on. This hands-on role reports to the Director of Platform Engineering and combines system design with production code in Go, C#, Java or Rust across on-premises, private cloud, OCI, AWS and Azure.

You’ll lead architecture decisions, mentor engineers, drive reliability through SLOs and audits, and collaborate across Systems, Network, DevOps and InfoSec.