Platform engineer

Tide; United States; Remote; USD 77,000 - 108,000; Full time

Benefits offered by this job

Remote-first

25 days annual leave

Volunteer days

Private Health Insurance

Mental health support

L&D budget

Share options

Flexible workplace

Job summary

Tide помогает малым предприятиям экономить время и деньги через банковские и управленческие решения. Вы будете техническим SME для наших IT-платформ, отвечать за архитектуру, конфигурацию и здоровье платформ, принимать ключевые решения и обеспечивать безопасность и соответствие требованиям.

Роль предполагает работу в удалённом формате с гибкими условиями, участие в аудите и взаимодействие с командами разработки и поддержки.

Qualifications

• Опыт работы с Configuration as Code на SaaS платформах.
• Умение скриптинга на Python, Bash и PowerShell, работа с REST API.
• 7+ лет в IT или Workplace инженеринге, не менее 3 лет на старшем уровне в облачно-натуральной SaaS-организации от 1000 пользователей.

Responsibilities

• Вы будете техническим SME для наших IT-платформ и принимать ключевые архитектурные решения.
• Поддерживать безопасность, грамотность и документооборот платформ.
• Разрабатывать архитектурные решения для Workplace Technology и миграционные стратегии.
• Выступать как L3 escalation и проводить RCA, записывать runbooks и документацию.

Skills

CaC (Configuration as Code)

Python

Bash

PowerShell

REST APIs

Google Workspace administration

GAM/GAMADV-XTD3

Admin SDK

Apps Script

Netskope SSE/SASE

ZTNA

Jamf Pro

Microsoft Intune

Identity & Access (SAML, OIDC, SCIM)

Jira Service Management

Confluence

Terraform

Git

CI/CD

Tools

Google Workspace

Netskope

Jamf Pro

Microsoft Intune

GAM

Admin SDK

Apps Script

Jira

Confluence

Terraform

Git

Job description

Описание

At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.

Задачи

You'll be the technical SME for our core IT platforms. As a senior individual contributor, you’ll own the architecture, configuration and health of the platforms every Tidean relies on. You’ll make the key design decisions, keep the platforms secure, well governed and documented, and drive improvements from design through to rollout. Google Workspace: identity and access policies, DLP, email security and ChromeOS management Netskope (SSE/SASE): SWG, CASB, DLP and ZTNA Jamf Pro and Microsoft Intune: zero-touch provisioning, compliance, patching and encryption for the Mac and Windows fleet Atlassian: Jira Service Management as our ITSM platform and CMDB, plus Jira and Confluence Establish configuration as code mentality within the team: manage platform config through Terraform, Git and CI/CD where the tools allow it, and script everything else. Own the engineering side of endpoint security and compliance controls, including EDR integrations, OS and application patching, vulnerability remediation, encryption, device compliance and security baselines. Build monitoring, reporting and operational health metrics for workplace platforms, using APIs and automation to identify configuration drift, failures, capacity issues and emerging operational risks before they become incidents. Own technical design and architecture decisions for Workplace Technology, including platform standards, technical debt, vendor evaluation, proof of concepts, migration strategy and lifecycle planning. Act as L3 escalation for complex incidents, carry out root-cause analysis, and turn what we learn into lasting fixes. Support audit and compliance work (e.g. ISO 27001, SOC 2, FCA and DORA requirements) with evidence, controls and documentation. Mentor engineers and service desk colleagues, raise the team's technical bar, and write the runbooks and Confluence documentation that let others work independently.

Требования

Extensive experience with CaC (Configuration as Code) on SaaS platforms. Confident scripting in Python, Bash and PowerShell, and comfort working with REST APIs. 7+ years in IT or workplace engineering, including at least 3 years at senior level in a cloud-native, SaaS-first organisation of 1,000+ users. Deep hands-on Google Workspace administration at enterprise scale, including automation with GAM/GAMADV-XTD3, the Admin SDK APIs or Apps Script. Production experience designing and running Netskope or a comparable SSE/SASE platform (Zscaler, Prisma Access, Cloudflare One), including ZTNA and DLP. Strong experience with both Jamf Pro and Microsoft Intune, running a mixed Mac and Windows fleet end to end. Solid grasp of identity and access: SAML, OIDC, SCIM, MFA, conditional access and device trust. Clear, confident communication with engineers, stakeholders and non-technical users alike.

Будет плюсом: Admin-level experience with Jira, Confluence and Jira Service Management, including JSM automation and Assets; Experience in fintech or regulated financial services (FCA, DORA, PCI DSS, ISO 27001, SOC 2); Working knowledge of GCP and AWS, particularly IAM and networking relevant to ZTNA; Relevant certifications (Google Workspace Administrator, Jamf 300/400, Netskope NSK200/300, MD-102, Atlassian ACP)

Условия

• The gross annual salary for this position ranges from €68,400 to €96,200 but we are also open to discussing the salary further, taking into account your expertise and contributions.
• Remote first
• 25 days of paid annual leave
• 3 paid days off for volunteering or L&D activities
• Private Health Insurance
• Mental Health Support Platform FitPass Family and friendly leave (according to statutory)
• Personal L&D budget
• Share Options
• At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams.