SRE / DevOps Engineer
Hays plc
North Mymms, United Kingdom
1 month ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
Senior Compensation
£ 168KJob location
North Mymms, United Kingdom
Tech stack
Continuous Integration
DevOps
Github
Virtual Private Networks (VPN)
Key Management
Reliability Engineering
Ansible
Zero Trust Network Access
Runbook
VCloud
Kubernetes
Bare Metal
Terraform
Job description
Platform Engineering & Operations
- Build, run, and continuously improve lab and production platforms across GCP (GKE / GKE On Prem / GDC) and VMware Cloud Foundation (VCF).
- Operate Kubernetes clusters at scale, including cluster lifecycle, upgrades, Day 0/1/2 automation, drift remediation, and reliability engineering.
- Implement GitOps first operations using ArgoCD.
- Enforce platform policies, configuration baselines, and compliance evidence collection.
Automation & Infrastructure as Code
- Engineer consistent public/private cloud infrastructure using Terraform Enterprise, Ansible Automation Platform, and Metalsoft.
- Develop and maintain multistage CI/CD pipelines using GitHub Actions and TFE.
- Industrialise reusable Golden Path modules and templated stacks.
Security, Zero Trust & Secrets Management
- Embed zero trust principles (MFA, IP allow listing, IAP, HA VPN) into pipelines and runtime.
- Implement enterprise-grade secrets lifecycle management using Akeyless.
- Integrate compliance controls, CI policy gates, and audit trails supporting DORA.
Customer Delivery & Technical Leadership
- Lead customers through platform modernisation and DevOps transformation.
- Produce automation frameworks, reference architectures, and runbooks.
- Participate in customer workshops and ensure successful handover to support teams.
Requirements
- CI/CD & IaC automation (GitHub Actions, Terraform Enterprise, Ansible Automation Platform)
- Cluster lifecycle management & GitOps operations
- TFE workspace/module design across VCF & GCP
- Secrets lifecycle & vault patterns (Akeyless)
- Multistage app + infra pipelines
- Reusable modules & Golden Path stacks
Practitioner Level:
- Kubernetes operations, patch automation, drift remediation
- Secret rotation automation and compliance evidence
- Metalsoft automation for bare metal IaC
- Network/perimeter controls incl. IAP, HA VPN, MFA, IP allow listing
- Policy checks, CI gating, and AAP-based patching/hardening
- Cost aware provisioning