Interval Group

• Design, develop, and maintain robust backend services and scalable systems using Java • Architect and implement cloud-native solutions leveraging the Google Cloud Platform (GCP) ecosystem • Develop high-performance microservices and handle asynchronous data processing • Work extensively with event-driven architectures and messaging systems such as Pub/Sub and RabbitMQ • Manage and optimise relational databases, specifically focusing on PostgreSQL • Design, build, and integrate secure and efficient RESTful APIs • Collaborate closely with cross-functional teams to ensure seamless project delivery

• Provide expert technical support to system administration teams to deploy and maintain EDR and CNAPP agents across on-premises and public cloud environments. • Manage security coverage across diverse client and server endpoints, including physical hosts, VMs, VDIs, and containers. • Support multiple operating systems, specifically ensuring seamless protection across Windows, Linux, and MacOS. • Test, maintain, optimize, and document custom security policies and procedures for EDR and CNAPP tools. • Define and enforce tailored security policies for containers, hosts, and orchestrators like Kubernetes. • Liaise closely with internal infrastructure teams and external vendors to ensure maximum uptime and operational maintenance of security tools. • Integrate endpoint and cloud-native security tools with wider security platforms to enhance overall enterprise resilience and operations. • Monitor tool performance, optimising configurations to ensure minimal impact on system resources without compromising cybersecurity coverage.

• Providing T3 operational ownership for Storage services: handling complex incidents, deep troubleshooting and RCA, and driving permanent fixes and preventive measures • Ensuring operational readiness for storage changes: monitoring/alerting coverage, performance baselines, hardening, patch strategy, rollback and recovery procedures, and runbooks • Executing and improving standard operational procedures through automation (capacity checks, validation procedures, provisioning workflows) • Validating deployment artefacts from an operations perspective and enforcing quality assurance measures • Monitoring system health, performance metrics and service availability across multi-tenant environments • Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions • Implementing monitoring and logging strategies to support audit and compliance requirements • Performing routine security scans and remediating identified vulnerabilities

• Validate deployment artifacts from an operational perspective, enforce strict quality assurance measures, and ensure robust rollback strategies and observability are in place for production deployments • Monitor system health, performance metrics, and service availability across multi-tenant environments to ensure stability and responsiveness • Identify, analyze and resolve incidents swiftly to minimize disruption, triggering root cause analyses and implementing preventive actions • Reduce operational toil by automating recurring standard processes and validating procedures through a structured software development lifecycle • Implement comprehensive logging and monitoring strategies to support audit requirements, perform routine security scans, and remediate identified vulnerabilities

• Lead the validation of deployment artifacts from an operational standpoint • Monitor system health, performance metrics, and service availability • Direct root cause analyses and implement corrective and preventive actions • Reduce operational toil by automating recurring remedial processes • Implement comprehensive logging and monitoring strategies

• Managing core ITSM processes (Incident, Major Incident, Problem, Change, Service Request, Knowledge) end-to-end across T2/T3 and product stakeholders • Triaging and steering work in ITSM queues: validating completeness, routing to resolver groups, ensuring correct categorisation, priority/urgency and customer impact statements • Orchestrating Major Incident execution: ensuring roles are assigned, communications are running, timelines captured and PIR/RCA actions tracked to completion • Coordinating change execution: raising requests correctly, documenting risk/impact, obtaining approvals, capturing implementation evidence and recording outcomes • Managing problem flow: converting recurring incidents into problems, assigning RCA ownership and tracking corrective actions through to completion • Managing Service Request operations: enforcing SLAs, handling escalations and identifying opportunities for optimisation and automation • Ensuring knowledge articles are created and updated from incidents, problems and changes, with quality reviewed and articles linked to tickets for reuse • Monitoring operational SLAs/OLAs, identifying breaches early and coordinating recovery actions • Running planned operational cadences (daily ticket health checks, change coordination touchpoints, backlog reviews) • Identifying, defining and managing continuous service improvements

• Providing T3 operational ownership for Network & Security services: resolving complex incidents, driving RCA and remediation across the full network/security stack • Ensuring operational readiness for network/security changes: monitoring/alerting, validation steps, rollback strategies, runbooks and maintenance procedures • Supporting compliance-relevant operational controls (logging/monitoring evidence, access enforcement patterns, vulnerability handling coordination) • Coordinating with platform and Kubernetes teams to resolve cluster and application impacts caused by network/security constraints • Executing and improving standard operational procedures through automation to reduce toil and improve MTTR and stability • Monitoring system health, performance metrics and service availability across multi-tenant environments • Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions • Implementing monitoring and logging strategies to support audit and compliance requirements • Performing routine security scans and remediating identified vulnerabilities

• Providing T3 operational ownership for Compute & OS services: handling complex incidents, troubleshooting and RCA, and driving permanent fixes and preventive measures • Ensuring compute/OS readiness for releases and changes: monitoring/alerting coverage, performance baselines, hardening, patch strategy, rollback and recovery procedures, and runbooks • Executing and improving standard operational procedures through automation to reduce toil and improve MTTR and stability • Coordinating with Kubernetes, Data, Network and Storage SMEs to resolve cross-domain production issues • Validating deployment artefacts from an operations perspective and enforcing quality assurance measures • Monitoring system health, performance metrics and service availability across multi-tenant environments • Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions • Implementing monitoring and logging strategies to support audit and compliance requirements • Performing routine security scans and remediating identified vulnerabilities

• Deliver a pre-structured Level 2 curriculum focusing on fundamental Python programming concepts • Facilitate collaborative group projects and manage evening classroom dynamics for adult learners • Provide essential pedagogical support to help learners gather, structure, and collate the evidence required for their accredited portfolios • Maintain accurate records of learner attendance and weekly progress

• We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector. • You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability. • Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles and clients • Configuring SSO flows, MFA and identity federation across hybrid cloud and on-premises workloads • Deploying Keycloak on VMs, Docker and Kubernetes (OpenShift and bare-metal), configuring OIDC, OAuth2, SAML and Kerberos/LDAP federation • Deploying Keycloak on GKE with Helm/Operators, integrating with Google Identity and mapping Keycloak roles to GCP IAM roles • Configuring HashiCorp Vault to secure Keycloak operational secrets, implementing dynamic secrets for DB backends and integrating Vault Agent/Sidecar injector for secret injection into Keycloak pods • Deploying and operating Vault in production on Linux-based systems, including HA, Raft storage, seal/unseal mechanisms and HSM/KMS integration • Managing Vault PKI operations including intermediates, issuing CAs, short-lived certificate issuance, CRL/OCSP integration and automated revocation • Implementing ACME v2, EST for devices, AIA/CRL/OCSP publishing and RFC 5280 profiles • Automating Keycloak and Vault deployment and configuration using Terraform, Helm and Ansible • Integrating certificate and secret distribution into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI) • Monitoring both platforms with Prometheus and Grafana and managing incident response for expired certificates, Vault unseal failures and IPA migration issues