DevOps and Platform Engineer

The Dev Ops and Platform Engineer implement and maintain the hosting platform: the virtual machines and services that run the company's applications in Private Hosted Environments, and public cloud services where the business needs them. The role keeps that environment patched, secure, monitored, recoverable and well documented, and builds and maintains the automation (pipelines and infrastructure as code) that gets applications onto it reliably and repeatably.

The role reports to the Platform and Engineering Manager, who sets the hosting standards and assists where needed. The engineer implements and maintains the environment to those standards and is the main hands‑on owner of the platform day to day.

• Implement, configure, operate, and maintain the hosting virtual machines and services in Private Hosted Environments, to the standards set by the Platform and Engineering Manager.
• Implement and maintain public cloud services on AWS and Azure where the business needs them, to the same standards.
• Carry out routine maintenance, including patching, upgrades, certificate and credential renewals, and lifecycle management.
• Provision and decommission development, test, and production environments in a consistent, repeatable way.
• Maintain an accurate inventory of hosted systems, environments, and their dependencies.

• Build and maintain the CI/CD pipelines used by the development team.
• Define infrastructure as code so environments can be rebuilt from source control rather than by hand.
• Automate repetitive operational work and reduce manual steps in deployment and maintenance.
• Support developers in deploying and running their applications correctly in each environment.

• Apply hardening baselines, network segmentation, and firewall and access rules across hosted environments.
• Manage access to hosting environments on a least‑privilege basis, review it regularly and remove it promptly when no longer needed.
• Manage secrets, keys and certificates so that no credentials sit in code or repositories.
• Run dependency, container image and configuration scanning in the pipelines, and act on the results with the Platform and Engineering Manager.
• Remediate hosting‑related security and risk findings assigned by the Platform and Engineering Manager within agreed timelines and provide evidence of the fix for independent verification.

• Implement and operate backups for hosted systems, aligned to the agreed RPO/RTO and system classification.
• Test restores on a regular schedule and records the results.
• Maintain recovery runbooks and contribute to disaster recovery and business continuity planning.

• Implement monitoring, alerting and log collection for hosted systems, and keep alerts actionable.
• Respond to hosting incidents, restore service, and document the root cause and follow‑up actions.
• Take part in out‑of‑hours support for hosted systems.

• Raise hosting changes through the IT Operations change process and implement only approved changes.
• Record what was changed, when and why, so changes can be traced and reversed.

• Right‑size and tag resources, and flag unused or under‑used resources.
• Provide the Platform and Engineering Manager with consumption data so spend can be tracked and motivated.

• Maintain runbooks, architecture diagrams, and procedures so another team member can operate, restore and rebuild the environment in the engineer's absence.
• Work with the Platform and Engineering Manager and the senior developers so that at least one other person can perform critical tasks such as restoring from backup, rotating…