> Markdown version of [/jobs/ext/3904066-staff-infrastructure-engineer-gcp-engine-by-starling](https://www.wearedevelopers.com/jobs/ext/3904066-staff-infrastructure-engineer-gcp-engine-by-starling). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Infrastructure Engineer (GCP) - Engine by Starling

- **Company:** Starling Bank
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Bash Shell, Border Gateway Protocol, Cloud Computing, Cloud Engineering, Continuous Integration, Core Foundation, Disaster Recovery, Distributed Systems, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), PostgreSQL, Network Connections, PCI Data Security Standards, Performance Tuning, Prometheus, Zero Trust Network Access, Service-Oriented Architecture, TCP/IP, Virtual Local Area Networks, Datadog, Data Logging, Network Switches, Scripting, Google Cloud, Cloud Monitoring, Grafana, Amazon Virtual Private Cloud (VPC), Kubernetes, Build Tools, Gsuite, Claude, Teamcity, Database Monitoring, Restful APIs, Terraform, Golang
- **Published:** October 24, 2026
- **Apply:** https://www.careerboard.com/gb/en/find-jobs-in-United-Kingdom/-89C9EC48DD84C021F1/

## About the Role

We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you care enough to find elegant solutions to difficult technical problems, we'd love to hear from you., * Proven GCP multi-region disaster recovery experience

 * Confident at bootstrapping Google Cloud Organisations, hardening with policies and structuring an enterprise's resource hierarchy
 * Experience with Google Cloud Platform (GCP) services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, Identity and Access Management (IAM) and VPC Service Controls
 * Experience writing clean, modular Terraform code
 * Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure
 * Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies
 * Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated/Partner Interconnect
 * Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD
 * Experience with observability tooling - Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus and OpenTelemetry (we also use Grafana)
 * Experience setting up Google Workspace/Google Cloud Identity
 * Experience with automation using a Scripting language like Python or Go
 * Experience implementing CI/CD pipelines
 * An understanding of RESTful API and event-driven concepts
 * Comfortable writing RFCs and ADRs which can be taken from design to implementation and into Production with documented runbooks and operating models

Ideally you also have:

 * Experience with Zero Trust security (mTLS, SSO)
 * Experience with AWS
 * Comfortable with bash and either Golang, Java or Python development
 * Understanding of database monitoring, analysis, disaster recovery and performance tuning
 * Understanding of networking and routing concepts (TCP/IP, VLANs, VPNs, BGP, etc.) and preferably experience designing and establishing connectivity between GCP and on-premise locations
 * Awareness/ability to leverage Claude Skills during development

## Description

* Ensure the performance and reliability of cloud environments whilst measuring cost-effectiveness
 * Embrace automation and be reluctant for manual implementation
 * Build systems with security by design as a core foundation
 * Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS
 * Design and operate key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including support for cryptographic key ceremonies
 * Rapidly diagnose and fix client-reported infrastructure issues while maintaining peak security and performance
 * Write clear technical documentation and host training sessions for the team
 * Demonstrate knowledge of new technologies and changes in the industry
 * Lead complex infrastructure projects from inception through to run, and shape the future capabilities of Engine - our approach, tooling, automation and architecture
 * Lead by example in your contributions, setting a high technical bar for others to aim for, * Java, which makes up the majority of our Back End codebase
 * GCP and AWS - we're cloud-native
 * Container-based architecture
 * Kubernetes (GKE on GCP, EKS on AWS)
 * TeamCity for CI/CD (with multiple production releases per day)
 * Terraform and Grafana
 * RDS and CloudSQL for PostgreSQL

Our Interview Process

Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:

 * Initial interview with an Engineer - 45 minutes
 * Take-home technical test, to be discussed in the next interview
 * Technical interview with some Engineers - 1.5 hours
 * Final interview with our CTO/deputy CTO - 45 minutes