Staff Infrastructure Engineer (GCP) - Engine by Starling

At Engine by Starling, we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology.

We are looking for a Staff Infrastructure Engineer to help us design, build and run the cloud foundations our first-in-class, cloud-native banking platform is deployed on , across multiple regions and cloud providers globally.

As a Staff Infrastructure Engineer, you will:

• Design, document, build and maintain scalable infrastructure on GCP
• Ensure the performance and reliability of cloud environments whilst measuring cost-effectiveness
• Embrace automation and be reluctant for manual implementation
• Build systems with security by design as a core foundation
• Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS
• Design and operate key and secret management on GCP , Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager , including support for cryptographic key ceremonies
• Rapidly diagnose and fix client-reported infrastructure issues while maintaining peak security and performance
• Write clear technical documentation and host training sessions for the team
• Demonstrate knowledge of new technologies and changes in the industry
• Lead complex infrastructure projects from inception through to run, and shape the future capabilities of Engine , our approach, tooling, automation and architecture
• Lead by example in your contributions, setting a high technical bar for others to aim for

Requirements:

• Proven GCP multi-region disaster recovery experience
• Confident at bootstrapping Google Cloud Organisations, hardening with policies and structuring an enterprise’s resource hierarchy
• Experience with Google Cloud Platform (GCP) services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, Identity and Access Management (IAM) and VPC Service Controls
• Experience writing clean, modular Terraform code
• Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure
• Experience with key and secret management on GCP , Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager , including cryptographic key ceremonies
• Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect
• Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD
• Experience with observability tooling , Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus and OpenTelemetry
• Experience setting up Google Workspace / Google Cloud Identity
• Experience with automation using a scripting language like Python or Go
• Experience implementing CI/CD pipelines
• An understanding of RESTful API and event-driven concepts
• Comfortable writing RFCs and ADRs which can be taken from design to implementation and into Production with documented runbooks and operating models

Benefits:

• 33 days holiday (including public holidays, which you can take when it works best for you)
• An extra day’s holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care
• Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
• Generous family-friendly policies
• Incentives refer a friend scheme
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks