Role Description Join Kainos and Shape the Future. At Kainos, we’re problem solvers, innovators, and collaborators - driven by a shared mission to create real impact. Whether we’re transforming digital services for millions, delivering cutting-edge Workday solutions, or pushing the boundaries of technology, we do it together. Working within our Defence and National Security accounts, you will be working on some of the most challenging and critically important projects across various cloud technologies. As a Senior Platform Engineer (Senior Associate) in Kainos, you’ll be responsible for leading the design of significant components of a modern digital service platform including its automation, build, deployment, and support. You’ll do this whilst learning about new technologies and approaches, with talented colleagues that will help you to learn, develop, and grow. Your key responsibilities will include: - Working as part of a team - Collaborating with colleagues in engineering, testing, consulting, product management, and security capabilities to build, test, and deploy software of the highest quality. - Using technology for positive impact - Ensuring the latest technologies are employed appropriately to extract maximum user and business benefit, while aligning to industry standards and best practices. - Putting people first - Supporting colleagues and facilitating an inclusive DevOps culture in all that you do. - Finding your voice - Driving conversations and decisions to ensure services are scalable, secure, reliable, and performant. - Supporting services through Live Operation - Ensuring the service is available, secure, and performant as you strive to continuously improve it. - Becoming a Role Model - Embodying the Kainos values and proactively coaching and mentoring more junior members of the team. - Pushing the boundaries - Developing specialisms and choosing to pivot your career in a certain direction through exposure to technology. Qualifications - Proven ability of strong team skills, including working in a multi-disciplinary team. - Good verbal and written communication skills, with the ability to communicate issues to other technical and non-technical people. - Significant expertise in the use of multiple configuration management, infrastructure provisioning, and automation tools. - Fluency in at least one of the following: Powershell, Bash, Python, Ruby, Go, Groovy. Requirements - Demonstrable experience in designing, building, testing, automating, monitoring, and supporting significant components within a modern digital service platform in production environments. - Producing designs that are scalable, resilient, efficient, secure, cost-effective, and minimize lock-in. - Contributing to technical decisions and direction in a collaborative team environment, including architecture, estimation, product planning, user story/requirement creation, and advocating MVP. - Implementing modern Continuous Delivery processes for releasing software to production. - Applying industry best practices and patterns across infrastructure and application components (e.g., security, elasticity, performance). - Using public cloud platform(s) to solve business problems (AWS or Azure). - Applying configuration management, infrastructure provisioning, and container orchestration tooling to solve business problems. - Using modern version control systems including git. - Debugging complex problems across multiple servers, services, and tools. Benefits - Third level – or equivalent - qualification in a related discipline. - Obtained mid-level certification with a public cloud provider (AWS/Azure). - Active participation in knowledge sharing activities, both within the team and with wider non-technical audiences. - Experience of cloud-native SaaS and PaaS technologies. - Experience in managing, mentoring, and coaching junior members of staff. Company Description At Kainos, we believe in the power of diversity, equity, and inclusion. We are committed to building a team that is as diverse as the world we live in, where everyone is valued, respected, and given an equal chance to thrive. We actively seek out talented people from all backgrounds, regardless of age, race, ethnicity, gender, sexual orientation, religion, disability, or any other characteristic that makes them who they are. Our friendly talent acquisition team is here to support you every step of the way, so if you require any accommodations or adjustments, we encourage you to reach out. We understand that everyone's journey is different, and by having a private conversation, we can ensure that our recruitment process is tailored to your needs.

• Architect, implement, and maintain automated identity and access management solutions across on-premises and cloud environments, with a focus on enterprise-scale Active Directory and SailPoint integrations • Develop and optimize automation scripts, workflows, and connectors (using PowerShell, BeanShell, Python, etc.) to streamline user provisioning/deprovisioning, group management, access reviews, and certifications • Lead integration projects between SailPoint (IdentityNow/IdentityIQ), Active Directory (including Azure AD), and cloud security solutions (e.g., Zscaler, Okta, AWS IAM, Azure Security, etc.) • Design, deploy, and manage automated access controls and role-based access control (RBAC) policies, ensuring compliance with security and privacy regulations (SOX, GDPR, HIPAA, etc.) • Serve as a subject matter expert for Active Directory, including schema management, Group Policy Objects (GPOs), privileged access, domain trust relationships, and hybrid identity synchronization • Automate and orchestrate processes across cloud security tools to facilitate user onboarding/offboarding, privilege management, and audit trail generation • Troubleshoot complex identity and access management issues and directory synchronization problems, and perform root cause analysis of incidents involving identity or access failures • Collaborate with other IT, cloud, and security teams to promote automation best practices and cross-platform security initiatives • Maintain comprehensive documentation for architectures, workflows, procedures, and configuration changes within the identity and access management ecosystem • Lead audit support activities, evidence collection, and remediation related to identity and access management using automated tools and reports

• Design, implement, and maintain automated infrastructure provisioning and deployment processes using industry-standard tools and frameworks. • Collaborate with cross-functional teams to optimize system performance, reliability, and scalability. • Champion and implement best practices for CI/CD pipelines, version control, and release management. • Troubleshoot and resolve issues related to build, deployment, and configuration in collaboration with development and operations teams. • Monitor, analyze, and improve system reliability, availability, and performance. • Participate in incident response, post-mortems, and root cause analysis to prevent future incidents. • Implement proactive measures to identify and address potential reliability and performance bottlenecks. • Work closely with cross-functional teams, including software development, operations, and quality assurance, to understand requirements and deliver solutions. • Communicate effectively with team members, stakeholders, and management on project progress and challenges.

Role Description The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! - Develop, manage and collaborate with other engineering teams for authentication, authorization, audit logging and monitoring. - Ensure customers and internal users are provided a secure, user-friendly way to access systems, including support for SAML, SCIM, MFA and passwordless auth. - Ensure resources have the proper level of authorization that is secure, easy for users to understand and easy for engineers to develop against. - Ensure events are captured for analysis and surfaced for both internal teams and customers as appropriate. - Collaborate with other engineering teams to understand database access management patterns, provide guidance for security or usability improvements and contribute where possible. - Collaborate with other engineering teams to understand integration patterns for third party systems and work to develop common patterns and platforms to enable secure management of credentials for this application. - Ensure systems comply with relevant security and compliance frameworks, such as NIST. - Create and maintain internal documentation to enable other teams to on-board and integrate with identity & access management systems. - Respond to on-call escalations involving the identity and access management platform. Qualifications - 4+ years of experience as a software engineer, with focus on complex system design and development, working with diverse programming languages (i.e. C++, TypeScript). - Bachelor’s or Master’s degree in Computer Science or a related field; or equivalent experience. - Experience implementing authentication and authorization services to a standard such as SAML, SCIM, OAuth2, or OIDC. - Experience implementing access control on web applications, APIs and databases. - Experience with distributed systems, cloud computing, and scalable architectures. - You are passionate about building secure systems that are easy to use and easy to develop against. - You have excellent communication skills and the ability to work well within a team and across engineering teams. - You are a strong problem solver and have solid production debugging skills. - You thrive in a fast paced environment, and see yourself as a partner with the business with the shared goal of moving the business forward. - You have a high level of responsibility, ownership and accountability. Benefits - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 20 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A $500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. - Culture - As part of a rapidly scaling start up, you will be instrumental in shaping our culture.