Senior Platform Engineer
IG Group
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
IG Group is seeking a Senior Platform Engineer to own IG's Akamai edge delivery estate and move configurations from manual processes to a Terraform-first workflow. You will build reusable modules and pipelines, enabling teams to request changes safely, while ensuring high performance and reliability across regions.
The role emphasizes automation, edge security, and collaboration with Platform Managers to scale edge knowledge and capabilities.
Qualifications
- 5+ years in CDN/edge delivery engineering with Akamai expertise and IaC background.
- Hands-on with the Akamai Terraform Provider, reusable modules, and GitLab pipelines.
- Routing, DNS, and traffic management across multi-region delivery.
- Experience with ITSM/change-control processes such as ServiceNow.
Responsibilities
- Lead migration of Akamai configuration to Terraform-first workflow, building reusable modules for properties, rule trees, and DNS that other teams can safely consume.
- Build self-service paths for routine edge changes – new hostnames, redirects, caching rules – with policy checks, automated validation, and staging tests.
- Integrate edge configuration into GitLab CI/CD alongside ServiceNow change control, so every property and DNS change is peer-reviewed and tested.
- Build tooling around Akamai's APIs (Python, Bash) to remove repetitive operational work – bulk changes, certificate expiry checks, drift detection, and inventory reporting.
- Own the design, configuration, and operational health of IG's Akamai estate across staging and production networks, in line with change control.
- Design and maintain URL redirection, rewrite, and forwarding logic across IG's domains, rationalising redirect chains.
- Configure routing and origin behaviour, including edge hostnames, CP codes, conditional/origin selection, failover, and load balancing.
- Set caching and delivery strategy – compression, HTTP/2/3, image/video delivery, and purge and cache invalidation workflows.
- Support multi-CDN and disaster recovery planning for edge delivery.
- Diagnose delivery incidents using Edge Diagnostics and observability tools; partner with Platform Managers to share edge knowledge.
Skills
Tools
Job description
IG is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions – built on scale, trust, and proof.
Senior Platform Engineer
We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.
The bar is high – bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next. Join us at IG – the future gets built here.
We're looking for a Senior Platform Engineer with deep Akamai expertise to own IG's edge delivery estate and change how it's run.
Today, much of our Akamai configuration is managed by hand through Control Center. Your mandate is to move it into code: Terraform modules, version-controlled rule trees, and GitLab pipelines with the automated checks and guardrails that let application teams request and ship their own edge changes safely. You'll be the expert other engineers come to, and the person who steadily reduces how often they need to.
The Platform Team owns the infrastructure and automation platform underpinning IG's global trading operations – cloud-native infrastructure on AWS, GitLab CI/CD, and self-service capabilities that help development teams move faster with greater confidence. Edge delivery sits at the very front of that stack: every customer session, trade, and API call reaches IG through it, across every region we operate in and under latency-sensitive conditions.
You'll work hands-on with Property Manager and Akamai's rule tree model, Edge DNS and traffic management, edge security controls, and certificate lifecycle – from routine property changes through to incident diagnosis and long-term modernisation of the estate. If you care about content delivery and edge infrastructure, and want your work to have direct commercial and customer impact, we'd welcome your application.
- Lead the migration of Akamai configuration from manual Control Center changes to a Terraform-first workflow, building reusable, well-documented modules for properties, rule trees, and DNS that other teams can safely consume
- Build self-service paths for routine edge changes – new hostnames, redirects, caching rules – wrapped in policy checks, automated validation, and staging tests that catch mistakes before they reach production
- Integrate edge configuration into GitLab CI/CD alongside ServiceNow change control, so every property and DNS change is peer-reviewed, tested, and promoted through environments the same way each time
- Build tooling around Akamai's APIs (Python, Bash) that removes repetitive operational work – bulk changes, certificate expiry checks, drift detection, and inventory reporting
- Own the design, configuration, and operational health of IG's Akamai estate across staging and production networks, in line with change control
- Design and maintain URL redirection, rewrite, and forwarding logic – 301/302, host- and path-based, and Cloudlet-driven – across IG's public and internal domains, rationalising inherited redirect chains as you go
- Configure routing and origin behaviour, including edge hostnames, CP codes, conditional and dynamic origin selection, failover, and load balancing to support multi-origin, multi-region delivery
- Set caching and delivery strategy – compression, HTTP/2 and HTTP/3, image and video delivery, API acceleration – and run purge and cache invalidation workflows that support release and incident response
- Support multi-CDN and failover strategy through Global Traffic Management, and contribute to disaster recovery and resilience planning for edge delivery
- Configure and tune edge security controls – Site Shield, network lists and IP allow-listing, WAF, and bot mitigation – as traffic patterns and threats evolve
- Manage the SSL/TLS certificate lifecycle for edge properties in coordination with Venafi, ensuring certificates reach the edge well ahead of expiry
- Maintain an auditable inventory of properties, hostnames, certificates, and CP codes, and lead periodic reviews that surface and remediate configuration drift and stale entries
- Diagnose complex delivery, routing, and performance incidents using Edge Diagnostics, debug and pragma headers, mPulse, and reporting APIs – tracing an issue from DNS resolution through edge and origin behaviour to root cause, then closing the gap that allowed it
- Partner with Platform Managers and application teams to translate hosting and delivery requirements into configuration that is secure, performant, and maintainable, and spread edge knowledge across the wider platform organisation
Experience level: 5+ years in CDN and edge delivery engineering, with deep hands-on Akamai expertise and a strong infrastructure-as-code background.
- Deep Akamai expertise – property creation, versioning, rule tree configuration, and activation across staging and production via Property Manager (Control Center and PAPI), with the judgement to know which logic belongs at the edge and which doesn't
- Automation and infrastructure-as-code – hands-on with the Akamai Terraform Provider, writing reusable modules that others actually adopt; GitLab CI/CD pipeline experience; and scripting in Python or Bash to automate against vendor APIs
- Routing, DNS, and traffic management – edge hostnames, CP codes, origin and failover behaviour, conditional origins, and traffic steering, with working knowledge of Edge DNS and/or Global Traffic Management for resolution, load balancing, and multi-region routing
- Redirection and rewrite strategy – host- and path-based redirects, rewrites, and Cloudlet policies (Edge Redirector, Forward Rewrite, Visitor Prioritization), including untangling legacy redirect logic without breaking live traffic
- Edge security and certificates – Site Shield, network lists, WAF and bot mitigation, plus SSL/TLS certificate lifecycle management (ideally with Venafi) and a solid grasp of certificate chains, SNI, and secure delivery requirements
- Troubleshooting and delivery observability – Edge Diagnostics, debug headers, mPulse (RUM), and traffic reporting APIs, backed by strong network fundamentals (TCP/IP, DNS, HTTP/HTTPS, routing) and a clear picture of how DNS, CDN, origin, and application layers interact under production load
- Delivering change in a controlled environment – experience working through formal ITSM/change-control processes such as ServiceNow, in regulated or high-availability settings
- Akamai certification in Web Performance, Cloud Security, or Media Delivery
- Other CDN and edge platforms (CloudFront, Cloudflare, Fastly) for comparative or multi-CDN architecture
- AWS networking services (Route 53, CloudFront, ALB/NLB) and hybrid CDN-to-cloud-origin patterns
- Edge compute (EdgeWorkers/EdgeKV), API Gateway, or service mesh for application-layer traffic management
- Akamai DataStream or similar for streaming delivery telemetry into wider observability tooling
- Compliance frameworks such as PCI DSS as they apply to edge and CDN configuration
You troubleshoot systematically, tracing an issue from DNS resolution through edge routing, caching, and origin behaviour rather than reacting to surface-level symptoms. You've modernised a CDN estate before – cleaning up legacy properties, redirect chains, and routing rules without destabilising high-traffic, latency-sensitive applications.
The automation you build gets used. Whether it's Terraform modules, API-driven pipelines, or self-service workflows, it's robust, well-documented, and genuinely adopted by the teams who depend on it – because you designed it around how they actually work, and put guardrails in place that make the safe path the easy one.
Security and compliance aren't an afterthought for you. You've tuned WAF rules, managed certificate lifecycle, and hardened edge configuration, and you understand how choices made at the edge shape risk. You're equally comfortable owning a single complex property change and setting the routing and redirection strategy for an entire domain estate – and you're methodical enough to balance immediate operational demands against longer-term platform quality.
Your growth fuels our success! Thrive with tailored development programs, mentoring opportunities with leaders, and clear career progression. Expand your network through committees, sports and social clubs. Enjoy extra time off for volunteering and community work.
- Competitive salary
- Flexible Benefits Package on top of your salary (12%)
- Private medical cover for you and your family
- Life insurance
- Contribution to gym memberships
- 25 Days holiday, with 1 additional day off to celebrate your Birthday & 2 additional days off a year for voluntary work (28 in total)
- The option to buy or sell holiday days
- A comprehensive global and local onboarding process
- Enhanced primary (maternity), secondary (paternity), and shared parental pay and leave, as well as a range of support and benefits for parents
1
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
