Senior Cloud Platform Engineer

Location: Mainly remote, with a minimum of once a month in our London office

We’re the original pioneers in connected commerce marketing. Since 2008, we’ve been partnering with major retailers, powering global brands, and building meaningful connections with shoppers.

We simplify the mind-boggling complexity of today’s retail media landscape. We deliver impactful campaigns that connect with people where it matters. We create seamless and personalised shopping experiences. Above all, we deliver amazing results for our partners, driven by our unshakeable desire for growth. Time after time, we change the game. SMG is home to a world-class suite of commerce advertising capabilities powered by data and cutting-edge technology.

We constantly push ourselves, our tech and our industry to discover innovative new ways to connect, sell and grow.

We are looking for a Senior Cloud Platform Engineer to design, build and operate the cloud platform that SMG's products run on. The role works in two directions: day to day, you will embed with product squads from discovery to go-live, building the production infrastructure their products need and migrating our remaining AWS workloads into our Azure landing zone. Alongside that, you'll help set the long-term direction of the platform itself: the landing zone, reusable Terraform modules, and the observability and reliability practices that let every squad ship safely without waiting on us.

Platform is currently a small, embedded function. We plan to grow it into a dedicated Platform squad, and you'll be one of the engineers who shapes what that squad becomes.

• Own and evolve our Azure landing zone and cloud foundations required for SMG’s existing products and future platforms and lead the migration of remaining AWS workloads into it.
• Operate observability and SRE tooling: metrics, tracing and logging. Integrate SMG’s chosen observability platform, with clear SLO dashboards, into all products.
• Contribute to the platform roadmap: spot recurring needs across squads and turn them into shared platform capabilities, prioritised with engineering leadership.
• Build the Terraform modules and pipelines that let squads provision and ship into the landing zone safely.
• Security, compliance and cost governance: embed security best practices, participate in audit remediation, manage cloud cost optimisation and tagging/governance.
• Platform networking and identity: design and operate private networking across the landing zone (hub-spoke VNets, private endpoints, private DNS, ingress) and workload identity (managed identities, workload identity federation for pipelines, Entra ).
• Embed with product squads from discovery onwards, shaping infrastructure design before it becomes a delivery problem.
• Enable developer self-service and ownership: mentor engineering teams on SRE practices so teams can reliably operate and own their infrastructure.
• Author clear, actionable, version-controlled runbooks, incident playbooks and onboarding guides that enable developer self-service.

• You've designed, built and run production cloud infrastructure for a SaaS product, not just the pipelines that deploy to it.
• Hands-on Azure landing zone experience: management groups, hub-spoke networking, private endpoints and private DNS, Azure Policy, Entra /RBAC.
• Hands-on AWS experience sufficient to operate existing workloads and migrate workloads off it
• IaC expertise (Terraform strongly preferred; experience with Bicep / ARM is a plus).
• Pipeline authoring in any mainstream CI tool (we use Azure Dev Ops and Bitbucket).
• Observability tooling: metrics, tracing and logging stacks and experience translating those into SLIs/SLOs, specifically using Datadog.
• Incident…