SRE / DevOps Engineer

Hays plc
North Mymms, United Kingdom
1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
£ 168K

Job location

North Mymms, United Kingdom

Tech stack

Continuous Integration
DevOps
Github
Virtual Private Networks (VPN)
Key Management
Reliability Engineering
Ansible
Zero Trust Network Access
Runbook
VCloud
Kubernetes
Bare Metal
Terraform

Job description

Platform Engineering & Operations

  • Build, run, and continuously improve lab and production platforms across GCP (GKE / GKE On Prem / GDC) and VMware Cloud Foundation (VCF).
  • Operate Kubernetes clusters at scale, including cluster lifecycle, upgrades, Day 0/1/2 automation, drift remediation, and reliability engineering.
  • Implement GitOps first operations using ArgoCD.
  • Enforce platform policies, configuration baselines, and compliance evidence collection.

Automation & Infrastructure as Code

  • Engineer consistent public/private cloud infrastructure using Terraform Enterprise, Ansible Automation Platform, and Metalsoft.
  • Develop and maintain multistage CI/CD pipelines using GitHub Actions and TFE.
  • Industrialise reusable Golden Path modules and templated stacks.

Security, Zero Trust & Secrets Management

  • Embed zero trust principles (MFA, IP allow listing, IAP, HA VPN) into pipelines and runtime.
  • Implement enterprise-grade secrets lifecycle management using Akeyless.
  • Integrate compliance controls, CI policy gates, and audit trails supporting DORA.

Customer Delivery & Technical Leadership

  • Lead customers through platform modernisation and DevOps transformation.
  • Produce automation frameworks, reference architectures, and runbooks.
  • Participate in customer workshops and ensure successful handover to support teams.

Requirements

  • CI/CD & IaC automation (GitHub Actions, Terraform Enterprise, Ansible Automation Platform)
  • Cluster lifecycle management & GitOps operations
  • TFE workspace/module design across VCF & GCP
  • Secrets lifecycle & vault patterns (Akeyless)
  • Multistage app + infra pipelines
  • Reusable modules & Golden Path stacks

Practitioner Level:

  • Kubernetes operations, patch automation, drift remediation
  • Secret rotation automation and compliance evidence
  • Metalsoft automation for bare metal IaC
  • Network/perimeter controls incl. IAP, HA VPN, MFA, IP allow listing
  • Policy checks, CI gating, and AAP-based patching/hardening
  • Cost aware provisioning

Apply for this position