DevOps Engineer - Mid/Senior

We're seeking a Mid-Senior DevOps Engineer to own and evolve our cloud platform, CI/CD, security, reliability and cost-efficiency across multiple regions. This is a pivotal and exciting role as we expand into new markets and continue to grow rapidly. In this role, you'll have high autonomy, and your impact on the team and wider company will be far-reaching. Your focus will be on cloud infrastructure, automation and supporting high developer productivity. You'll collaborate closely with Developers, QA and the Technical Lead to build a robust, well-documented and auditable platform that lets the team ship safely and quickly.

This role is remote, home-based (UK) with occasional travel to Canterbury (e.g. for initial onboarding and sprint planning).

Core ResponsibilitiesPlatform Reliability, Security & Governance

• Patch management across Windows/Linux servers; automate updates and manage maintenance windows and rollback plans.

• Security hardening: manage access policies, accounts, secrets and least-privilege controls across servers, DBs and AWS.

• User access security: maintain IAM roles and server/DB access, manage JML and periodic access reviews.

• Vulnerability management: operate and tune Intruder, Sophos and similar tools; triage findings and track remediation.

• Secure SDLC: maintain Snyk/SonarCloud integrations, alerts, thresholds and quality gates.

CI/CD

• Own and improve TeamCity pipelines; troubleshoot agent, server and process issues; keep agent images current.

• Improve build stability and reduce QA/dev interruptions through proactive detection and pipeline optimisation.

• Extend release automation across all deployables, including mobile apps; standardise promotion flows with approvals and audit trails.

• Continuously optimise pipelines for speed, cost and reliability; maintain CI metrics and SLOs.

• Produce runbooks and documentation for CI/CD, branching strategy, release calendars and incident processes.

Cloud Operations (AWS)

• Cost-aware architecture: right-size workloads, refine autoscaling and propose modern AWS services for performance/cost gains.

• Environment hygiene: maintain and sanitise EC2/AMIs/volumes/snapshots; enforce retention and naming/tagging standards.

• Network/perimeter: review and rationalise Security Groups and ingress/egress rules.

• Data lifecycle & backups: define/enforce retention for DBs/S3; manage backup/restore tests for data and deployment artefacts.

• Multi-region growth: extend and automate patterns for new clients/regions, including one-click tenant provisioning and CI/CD cost/config updates.

• Monitoring/alerting: maintain actionable dashboards and alerts across infra, CI and applications; reduce noise.

Database Operations

• Improve MySQL performance (indexing, query plans, connections) and track changes via migration tooling.

• Implement data privacy practices: anonymisation, retention and related controls.

Documentation & Compliance

• Maintain accurate documentation for servers, cloud architecture, CI/CD and operations.

• Contribute to security reviews/audits; ensure evidence capture (change logs, approvals, test results, DR/backup tests).

Do you have experience in SOAP?, * Comfortable proposing better ways of working; thrives in a small, agile team.

• Works at pace with minimal supervision; dependable and delivery-driven.
• Automation-first mindset: scripting, config management.
• Observability fundamentals and practical alerting design.
• Excellent documentation skills and a security-first approach.

Role Requirements

Required

• Proven DevOps/Platform/Infra experience for .NET workloads in AWS.
• Strong Windows Server admin/patching; proficient with PowerShell and Bash.
• CI/CD expert (TeamCity, Jira) and skilled at pipeline debugging.
• Solid AWS knowledge: EC2, S3, Elastic Beanstalk, Route 53, Lambda, SNS, IAM, VPC/Security Groups.
• MySQL admin, tuning and analysis.
• Observability fundamentals and practical alerting.

Desireable

• AWS certification.
• Experience with .NET Core deployments; REST/SOAP; blue/green or canary strategies.
• Familiarity with Snyk, SonarCloud, Intruder, Sophos.
• Mobile CI/CD (e.g. Bitrise).
• Experience with Atlassian tools and Git workflows.
• Exposure to SSO/identity (OIDC, OAuth2, SAML; e.g. Okta).
• Knowledge of cost-optimised architectures.
• DR planning experience.

At AIRDAT, it's all about life-work balance. Working only 4 days a week, you will get 22.5 holiday days and bonus time during the Christmas/New Year period too. The company also runs around 6 free 'activity days' throughout the year (including things like Go Karting, Off-Road Driving,Spa Day, Kayaking) - you can vote for other activities you'd like to do and you can book onto as many of these as you like (or not!) - plus our team Christmas Party.

We operate a cycle to work scheme, 'meet free Fridays', a Private Healthcare Scheme, Discretionary Occupational Sick Pay and an EAP Scheme too. You'll be provided with all the equipment you need and we reserve an annual budget to help improve skills and further your development too. In addition, all team members receive a purchasing card, so no using your own funds to make company purchases.

As an integral part of our digital solutions team, you will be working on our three core digital products, including our mobile app, our public site and the development of new products and features.

You'll be empowered and working as part of a small, highly supportive agile team, delivering bespoke, complex systems to the aviation industry. Most importantly, we take our work seriously, but never ourselves.

Our company values are Proactive, Evolving, Confident and Supportive - these should resonate with any potential applicants., * Competitive Salary, DOE.

• Expected hours: 32 per week
• EOT Scheme beneficiary after 12 months of service
• Extra time off at Christmas
• Private Healthcare Scheme
• EAP Scheme
• Cycle to Work Scheme
• Up to 6 Fully Paid Company Activity Days per annum
• Discretionary Occupational Sick Pay Scheme

Applying & more informationTo apply for this position please email a copy of your CV and a covering letter/email to inserting the job title into the subject line. More information on AIRDAT can be found at

Job Type: Full-time

Benefits:

• Additional leave
• Bereavement leave
• Casual dress
• Company events
• Company pension
• Cycle to work scheme
• Enhanced maternity leave
• Enhanced paternity leave
• Flexitime
• Free parking
• Health & wellbeing programme
• Life insurance
• On-site parking
• Private medical insurance
• Profit sharing
• Sick pay
• Work from home

Ability to commute/relocate:

• Canterbury CT1 2NY: reliably commute or plan to relocate before starting work (required)

Application question(s):

• Do you have the right to work full time in the UK without sponsorship?

AIRDAT is a UK based systems, training & consultancy company providing services specifically to the Aviation sector. Our products relate to the management of training, assurance, compliance, fleet and auditing. In addition, AIRDAT offers airports an array of support services. AIRDAT is proudly an Employee Ownership Trust (EOT). Joining our Employee Ownership Trust means becoming an integral part of a company where your contributions directly impact our shared success. As an employee-owner, you'll have a stake in the company's achievements, fostering a collaborative and empowered work culture. Our commitment to shared ownership promotes a supportive environment where your dedication is rewarded, creating a fulfilling and mutually beneficial workplace.