Senior Systems Engineer

We have partnered with our client in their search for a Senior Systems Engineer to work remotely.

• Design & build IaC:
  Own Terraform modules, state management, and environment baselines; implement policy-as-code and drift detection (e.g., with Spacelift).

• Automate operations:
  Use Ansible for golden image builds, patching, and configuration orchestration across Linux/Windows fleets.

• Secure the platform:
  Integrate and operate secrets managers (e.g., Azure Key Vault, Hashi Corp Vault); implement least-privilege RBAC across cloud and tooling.

• Own CI/CD workflows:
  Design, maintain, and troubleshoot pipelines in Git Hub Actions and Azure Dev Ops (multi-stage, approvals, artifact/versioning).

• Reliability & observability:
  Contribute to SLIs/SLOs, logging/metrics/alerting, capacity planning, and performance tuning.

• CMDB stewardship:
  Keep services and dependencies accurate in the CMDB; drive discovery, metadata quality, and change traceability.

• Governance & change:
  Participate in change control (CAB), incident response, and post-incident reviews; implement corrective actions via code.

• Documentation & enablement:
  Produce clear runbooks, diagrams, and “how-to” guides; mentor engineers on IaC, security, and operational best practice.

• Continuous improvement:
  Identify toil and remove it with automation; propose roadmap items that improve reliability, security, and developer velocity.

• Terraform at scale (modules, work spaces, remote state, policies, reviews).

IaC tooling:
Ansible (roles/playbooks) and Spacelift (or similar IaC orchestration).

Secrets management:
Azure Key Vault, Hashi Corp Vault, or equivalent; key rotation and secret scanning practices.

CI/CD:
Git Hub Actions and Azure Dev Ops (pipelines, runners/agents, approvals, environment protections).

RBAC:
Designing and enforcing least-privilege access across cloud, repos, pipelines, and platforms.

CMDB usage and data quality practices (service ownership, relationships, change traceability).

Strong scripting (Power Shell and/or Python or Bash) and version control (Git, trunk-based or Git Flow).

Linux / Unix experience in addition to Windows Servers and Endpoints.

Excellent documentation-able to translate complex systems into simple, repeatable procedures.

Azure (preferred) and/or multi-cloud experience; networking fundamentals (VNet/VPC, DNS, VPN, WAF, load balancers).

Policy-as-code (OPA/Conftest/Sentinel), artifact registries, SBOM, and supply-chain security.

Observability stacks (Azure Monitor, Promethe Grafana, ELK) and incident management.

Containers and orchestration (Docker, AKS/Kubernetes) and image hardening.

Experience working within ISO 27001 / SOC 2 / NCSC guidance or similar UK/EU frameworks.

• 5+ years in systems engineering, platform engineering, Dev Ops, or SRE roles.

Senior Systems Engineer

100% remote

Risk