Software Engineer

We’re looking for a GCB5 Software Engineer to join the Cyber Security Strategic Engineering team. You’ll build and run software solutions that underpin our cyber big data platform and the services that enable our data engineering teams. You’ll also contribute to engineering solutions that support security governance and controls. Early in the role, you’ll help manage and improve demand for APIs into our cyber data lake (via Kong) and deliver automation across our DevOps integration with change/request processes and systems. Longer term, you’ll contribute to core platform services and engineering initiatives across the cyber domain., * Software engineering & delivery:

• Design, build, test, and maintain backend services, APIs, and automation used by cyber engineering and data teams.
• Apply good engineering practices: design patterns, SOLID principles, pragmatic architecture, and strong code quality.
• Contribute to development, we have a lot of Go and Python (previous experience helpful but not required; willingness to learn is essential).
• Write clear technical documentation and support knowledge sharing across the team.

Platform, cloud & infrastructure as code:

• Build and operate cloud-based solutions on AWS or Azure, understanding core services and how to use them securely and efficiently.
• Use Terraform to provision and maintain infrastructure, including networking components and access controls.
• Work with cloud networking concepts (e.g., VPC/VNet, subnets, routing, security groups/NSGs, private connectivity, DNS).

DevOps & operational excellence:

• Build and maintain CI/CD pipelines using “pipeline as code” approaches, improving reliability, repeatability, and auditability.
• Configure and operate build/deployment agents/runners and associated tooling.
• Implement secure secrets handling in pipelines (e.g., vault/managed secrets, rotation concepts, avoiding secret leakage).
• Support production operations where needed: monitoring, alerting, troubleshooting, and continuous improvement.

Initial focus / day-to-day (first phase):

• Manage and optimise API demand and onboarding for the cyber data lake through Kong (API gateway), including access patterns, standards, and operational support.
• Automate workflows across DevOps tooling and change/request processes, reducing manual effort and improving control and traceability.

• Strong programming experience in at least one major language (e.g., Java, C#/.NET, Python), with the ability to pick up new languages quickly.
• Hands-on experience applying common engineering best practices (design patterns, SOLID, refactoring, code reviews).
• Working knowledge of modern testing approaches such as TDD/BDD, and building testable services.
• Cloud experience in AWS or Azure, with a practical understanding of core offerings and how to use them in production.
• Infrastructure as Code experience with Terraform (modules, state, plan/apply workflow, environment separation).
• Strong DevOps experience: CI/CD, pipeline-as-code, agents/runners, artefact management, and operational hygiene.
• Understanding of secrets management concepts in pipelines and deployments.
• Comfortable working in a security-focused environment with a strong appreciation for control, auditability, and risk management.

Desirable (nice to have):

• Experience with API gateways (especially Kong), API lifecycle management, and API security patterns (authN/authZ, rate limiting, mTLS, OAuth2/JWT concepts).
• Experience building platforms/services that support data engineering teams (e.g., ingestion services, metadata, access patterns, developer enablement).
• Familiarity with big data ecosystems - particularly data bricks/spark (e.g., data lakes, distributed compute, streaming) and observability practices.
• Prior exposure to cyber/security engineering domains (useful, not required).
• Lots of cloud engineering experience
• Serious ownership of Devops Pipelines