Senior DevOps Engineer

ML; Greater London; Hybrid; GBP 70,000 - 95,000; Full time

Job summary

ML in City of London is seeking a hands-on DevOps / Platform Engineer to own cloud infrastructure, delivery pipelines, and internal IT. The role focuses on reliability, security, and governance of the GCP-based environment with GKE workloads.

You will own infrastructure design, implement IaC, manage access control, disaster recovery, and monitor platform health across live and development environments, collaborating with engineering teams.

Qualifications

• Hands-on DevOps/Platform experience in cloud environments.
• Ability to design and enforce access governance and least-privilege models.
• Experience with infrastructure-as-code and disaster recovery exercises.
• Knowledge of production cloud infrastructure and security tooling.

Responsibilities

• Own and operate GCP estate including GKE, databases, networking, and IAM.
• Maintain reliability, security, and cost-efficiency of live production environments.
• Manage edge and DNS configuration and security posture.
• Introduce infrastructure-as-code and repeatable provisioning.

Skills

GCP ownership

GKE expertise

RBAC design

CI/CD pipelines

Security governance

Documentation

Problem solving

Tools

Terraform

Microsoft Intune

Autopilot

GCP

GKE

Job description

DevOps / Platform Engineer - City of London / Hybrid

My client, a leading provider of payments, fx and financial services is looking to a hands-on DevOps / Platform Engineer to own the cloud infrastructure, delivery pipelines, and internal IT.

Their platform runs on Google Cloud Platform with containerised workloads on GKE. You will be responsible for the reliability, security, and governance of this environment (access management, deployment controls, disaster recovery, release quality, and endpoint management) working alongside our development teams.

This is a broad, high-trust role at the centre of an engineering operation. You will be the infrastructure owner: the person who defines how they build, deploy, secure, test, and recover. It suits a versatile engineer who enjoys owning the full operational picture rather than one narrow slice of it.

Key Responsibilities

• Own and operate our GCP estate, including GKE, databases, networking, and IAM, across live and development environments
• Maintain and improve the reliability, security, and cost-efficiency of a live production environment
• Manage our edge and DNS configuration and security posture
• Introduce infrastructure-as-code and repeatable provisioning where beneficial

Access Governance and Security

• Design and enforce RBAC and least-privilege access models across our cloud and tooling estate
• Maintain an auditable access model appropriate to a regulated financial services environment, including joiner/mover/leaver processes and periodic access reviews
• Keep the environment documented end-to‑t end

CI/CD, Release Engineering and Quality

• Design, document, and run disaster recovery and backup restoration exercises, with evidenced outcomes
• Establish monitoring, logging, and alerting for clear visibility of platform health and security events
• Support audit, regulatory, and banking partner requests with infrastructure evidence and control documentation

Internal IT and Endpoint Management

• Manage MDM for a small distributed team using Microsoft Intune and Autopilot
• Define device compliance, encryption, and onboarding standards
• Act as the first port of call for internal IT matters, coordinating with external support providers where needed
• Demonstrable experience owning production cloud infrastructure on Google Cloud Platform, including GKE
• Strong grounding in identity and access management: RBAC design, least-privilege models, and access review processes
• Hands‑on experience building and maintaining CI/CD pipelines in a production setting, including automated testing and quality gates
• Practical experience operating containerised microservice workloads
• Experience designing and executing disaster recovery and backup restoration exercises, not just documenting them
• Experience with Microsoft Intune and Autopilot for endpoint management, or clear capability to stand this up
• Infrastructure-as-code experience (Terraform or equivalent)
• Experience operating in a regulated environment (EMI, PSP, banking, or similarly controlled) is strongly advantageous
• Versatile and self‑directed: comfortable owning a broad remit spanning infrastructure, delivery, and internal IT, with the discipline to document and share knowledge