Senior Platform Engineer

Cloud Gateway; City Of London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Small team

Impactful work

Growth opportunities

Wide tech exposure

Job summary

Cloud Gateway in London (hybrid) is seeking a Senior Platform Engineer to own a multi-account AWS estate, build CI/CD pipelines, and advance observability and network automation. You’ll design infrastructure, write code, respond to incidents, and ship continuous improvements to production.

You’ll collaborate with NetOps and engineering teams to maintain services, implement automation, and uphold security/compliance in a regulated environment.

Qualifications

• Strong hands-on experience with AWS services (EC2, ECS, Lambda, RDS, VPC, IAM, CloudWatch, API Gateway, S3, Route53).
• Solid Terraform experience managing multi-account infrastructure across prod/dev.
• Experience with CI/CD pipelines and automated testing, quality gates, and deployment workflows.
• Docker experience with ECS multi-stage builds and ECR.
• Linux administration (Amazon Linux/Ubuntu).
• Experience with monitoring/observability tools (Grafana, Prometheus, InfluxDB, CloudWatch).
• Scripting in TypeScript, Python, or Bash.

Responsibilities

• Manage multi-account AWS with Terraform across prod and development environments.
• Build/maintain CI/CD pipelines for infra, app releases, Docker images, and migrations.
• Operate observability stack for 200+ devices and AWS infra.
• Support Observability-as-a-Service product including onboarding and tenant management.
• Participate in on-call rotation, incidents, and postmortems to drive reliability.
• Contribute to security/compliance (Cyber Essentials Plus, IAM governance, vulnerability management).
• Maintain golden AMI pipelines with patching, CIS hardening, vulnerability scanning.
• Support Network Automation Platform with FortiGate, Juniper, and NetBox integration.
• Maintain legacy infra while modernising gradually.

Skills

AWS

Terraform

CI/CD

Docker

Linux

Observability

Scripting

Security mindset

On-call/Incident response

Network automation

ClickHouse/OpenTelemetry

Govt/regulatory experience

FinOps

AWS Certifications

Education

Tools

Bitbucket Pipelines

NetBox

FortiGate

Juniper

Job description

Location: London (hybrid) Contract: Permanent, full-time

About Cloud Gateway

Cloud Gateway is a UK-based managed network security provider delivering secure

connectivity and network services to government and enterprise clients. We operate in a

regulated, security-first environment where reliability is non-negotiable.

About the Role

We're looking for a Senior Platform Engineer to join our small but impactful platform team. You'll

own and operate a multi-account AWS estate supporting critical government services, build and

maintain CI/CD pipelines, and contribute to our growing observability and network automation

products.

This is a hands-on role with real ownership. You won't be pushing tickets around a queue; you'll

be designing infrastructure, writing code, responding to incidents, and shipping improvements to

production. You'll work closely with our NetOps, ServiceDesk, and engineering teams to keep

things running and make them better.

What You'll Be Doing

• Managing and evolving a multi-account AWS organisation with Terraform-managed resources across production and development environments.
• Building, maintaining, and optimising CI/CD pipelines for infrastructure deployments, application releases, Docker image builds, and database migrations.
• Operating and improving our observability stack (Grafana, InfluxDB, Prometheus, OpenTelemetry, CloudWatch) monitoring 200+ network devices and all AWS infrastructure.
• Supporting and developing our Observability-as-a-Service product built on ClickHouse Cloud, HyperDX, and OpenTelemetry, including customer onboarding and tenant management.
• Participating in on-call rotation, responding to production incidents, writing postmortem reports, and driving reliability improvements.
• Contributing to security and compliance initiatives including Cyber Essentials Plus certification, IAM governance, and vulnerability management.
• Building and maintaining golden AMI pipelines with automated patching, CIS hardening, and vulnerability scanning.
• Supporting the Network Automation Platform initiative, integrating with FortiGate, Juniper, and NetBox for automated device configuration management.
• Maintaining and supporting legacy infrastructure across established accounts, including investigating issues in systems, understanding how they were built, and planning gradual modernisation where appropriate.

What We're Looking For

• Strong hands-on experience with AWS (EC2, ECS, Lambda, RDS, VPC, IAM, CloudWatch, API Gateway, S3, Route53). This is an AWS-heavy environment and you'll be working with these services daily.
• Solid Terraform experience. We manage all infrastructure as code and you'll be writing, reviewing, and maintaining Terraform across multiple accounts and projects.
• Experience with CI/CD pipelines. We use Bitbucket Pipelines but the principles matter more than the specific tool. You should understand automated testing, quality gates, deployment strategies, and production approval workflows.
• Docker experience. We run production container images on ECS with multi-stage builds and ECR.
• Linux administration and troubleshooting. Amazon Linux and Ubuntu are our primary operating systems.
• Experience with monitoring and observability tools. Grafana, Prometheus, InfluxDB, CloudWatch, or similar.
• Scripting ability in at least one of TypeScript, Python, or Bash.
• A security-conscious mindset. Our clients are government bodies and everything we build has to meet strict compliance standards.
• Comfortable with on-call responsibilities and incident response.
• Comfortable working with legacy infrastructure and services.
• Experience with network automation tools (Ansible, NAPALM, Scrapli, NETCONF).
• Familiarity with ClickHouse, OpenTelemetry, or time-series data platforms.
• Experience working with government clients or in regulated environments.
• Exposure to FinOps practices and cost optimisation.
• AWS certifications (Solutions Architect Associate or similar).

What We Offer

• The chance to own a platform end-to-end, not just a slice of it.
• Real impact, the services you support help millions of people across the UK.
• A small team where your contributions are visible and valued.
• Exposure to a wide range of technologies across infrastructure, serverless, observability, and network automation.
• A growing product engineering function with opportunities to shape the direction of new