> Markdown version of [/jobs/ext/2022382-platform-devops-engineer](https://www.wearedevelopers.com/jobs/ext/2022382-platform-devops-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform / DevOps Engineer - **Company:** EC Markets - **Location:** London, UK (Remote available) - **Experience:** Expert - **Salary:** £81,392.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Amazon Web Services, Amazon S3, Bash Shell, Cloud Computing Security, Code Review, Continuous Integration, Information Engineering, Data Masking, Software Debugging, DevOps, Github, Identity and Access Management, Subnetting, Python (Programming Language), Key Management, Routing, OpenID, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), TypeScript, AWS Cdk, DevOps Tools - Open-source, Delivery Pipeline, Snowflake, Change Data Capture, Amazon Virtual Private Cloud (VPC), AI Platforms, Information Technology, AWS Fargate, Data Management, Cloudwatch, Terraform, Docker - **Published:** August 11, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5834877848 ## About the Role * Deep Terraform. Multi-provider setups, reusable modules, remote state and locking, and a healthy respect for what a bad plan can do in production. * Strong AWS. Hands-on across networking, containers (ECS/Fargate), IAM, S3, Secrets Manager, and event-driven scheduling built as code, not clicked in the console. * CI/CD you've actually built. GitHub Actions (or equivalent), OIDC-based cloud auth, container builds, and multi-environment delivery pipelines. * Docker fluency building, slimming, tagging, and shipping images through a registry. * Deep understanding in VPC, Subnets, Routing, Gateways, trust boundaries. * Comfortable in Python and Bash to glue systems together and automate operations. * Security instincts. Sound secrets management and least-privilege IAM as a default, not an afterthought. * Polyglot comfort. You can read across Python, TypeScript, and Java well enough to unblock a build or debug a pipeline you don't need to own those apps, just keep them shipping. * A bias to ship and automate. You'd rather write the automation once than do the manual step twice. You finish things. Essential Requirements * Degree in Computer Science, Data Engineering, or related field. * 8+ years of hands-on experience as a Devops or Platform engineer * Excellent understanding of networking andA WS cloud. * Knowledge of security frameworks (ISO 27001, NIST) applied in practice. * Experience with DevOps tooling, automation, and secure system design. * Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Desirable * AWS CDK (TypeScript) * AWS DMS / change-data-capture, Kinesis Firehose, or other streaming-ingest tooling * Entra ID (Azure AD) SSO and SCIM provisioning * FinOps / cloud cost optimisation * A background working with regulated or financial-services data ## Description EC Markets runs a UK markets business on top of a real engineering estate: trading apps, a CRM, AI services, websites, and data platforms. We move quickly and ship often and our infrastructure has to keep up without breaking things. We're looking for a Platform / DevOps Lead: a hands-on engineer who codes their infrastructure, automates the manual stuff, and sets the standard for shipping trusted changes. You'll own infrastructure-as-code end to end Terraform first, with our existing AWS CDK stacks alongside it and you'll have the mandate to fix what's slow or fragile. This is a doer's role with real ownership. You write the Terraform, you build the pipelines, you carry the standard. Your flagship first project is already waiting: stand up a cleanly separated production environment with a credible Devroy promotion path., * Own infrastructure-as-code across the estate. Terraform is the primary tool managing both AWS and Snowflake from a single, version-controlled source of truth and you'll also own the AWS CDK (TypeScript) stacks. Drive the estate toward consistent, reusable, well-tested IaC. * Stand up a real production environment. Build a clean separation between development and production and a safe, repeatable promotion path between them. This is the headline gap and your first big win. * Build and harden CI/CD. GitHub Actions with OIDC, matrix container builds to ECR, plan-on-pull-request with deliberate applies, and multi-environment staging production promotion. Make deploys predictable and reversible. * Automate away the toil. Secret provisioning and rotation, state-lock hygiene, drift detection, safe-apply guardrails. Every manual runbook step is a candidate for a pipeline. * Run the AWS footprint. VPC and networking, ECS Fargate, DMS, S3, IAM, Secrets Manager, EventBridge provisioned as code, sized sensibly, and cost-aware (you'll make the calls on things like NAT vs VPC endpoints). * Own observability and reliability. CloudWatch alarms and dashboards, SNS alerting, data freshness and quality signals, and automated recovery for the pipelines that need it. When something breaks at 2am, you've already built the thing that catches it. * Manage Snowflake as code. Storage and notification integrations, Snowpipe ingestion, role-based access control, SSO via Entra ID (SAML/SCIM), and data masking / PII governance. * Set the bar for trusted code. Code review, tests, repeatable deploys, clean rollbacks. Partner with product and data engineers so they can move fast without fear and so what ships is what was reviewed. ## Related Videos - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [7 Most Popular Web Developer Jobs in Europe](https://www.wearedevelopers.com/magazine/163-7-most-popular-web-developer-jobs-in-europe) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)