• You will be responsible for operating and contributing to automations and pipelines that add value and increase the squads' productivity; • Manage cloud aspects including vulnerabilities, observability, compliance, and FinOps; • Work within an SRE squad, actively participating in ceremonies, discussions, supporting decision-making, and resolving conflicts.

• Design, build, and maintain AWS-based infrastructure supporting high-performance analytics platforms • Use Terraform for Infrastructure as Code (IaC), ensuring scalable and reproducible deployments • Implement, manage, and optimise Kubernetes clusters for container orchestration and service scaling • Automate CI/CD pipelines, monitoring, and alerting processes • Configure and manage PostgreSQL, MongoDB, and Kafka environments ensuring reliability and performance • Champion cloud security, cost optimisation, and disaster recovery practices • Define and improve reliability practices across cloud platforms and services • Establish and maintain observability standards including metrics, logs, traces, dashboards, and alerts • Participate in incident response, root cause analysis, and post-incident reviews • Create and maintain operational runbooks, playbooks, and automation scripts • Identify operational toil and implement automation to reduce manual work • Collaborate with engineering, analytics, and product teams to ensure reliability, security, and scalability • Drive continuous improvement in deployment reliability, system resilience, and operational processes

• Collaborate closely with software developers to build, maintain and improve our CI/CD pipelines using GitHub Actions, ensuring efficient and reliable delivery of code • Develop, maintain and extend infrastructure-as-code (IaC) configurations using Ansible and/or Terraform to provision and manage consistent, repeatable environments • Manage and maintain containerized workflows using Docker, including writing and optimizing Dockerfiles and maintaining container image hygiene • Operate and maintain AWX/Semaphore job templates, inventories and workflows to automate routine operational tasks • Maintain and improve observability across applications, scheduled jobs, infrastructure, and CI/CD systems using logging, metrics, alerting, and dashboards • Participate actively in code reviews, providing constructive feedback on DevOps-related contributions from peers within and beyond the Ops team • Contribute and maintain clear and accurate technical documentation for pipelines and infrastructure configurations • Collaborate with the Engineering team to troubleshoot CI/CD pipeline failures, incidents and deployment issues, identifying root causes and implementing durable solutions • Support incident response/reporting activities, including post-incident analysis and implementation of remediation actions • Actively pursue growth in AWS and CloudOps knowledge, taking advantage of available learning resources and internal mentorship opportunities • Communicate task and project status clearly and proactively to teammates and management • Remain available and responsive on an on-call basis as needed for emergencies or scheduled off-hours maintenance/deployments. • Follow secure DevOps practices including secrets management, least-privilege IAM, dependency/image vulnerability remediation, audit-friendly change management, and secure handling of customer-facing systems.

Role Description Due to exciting growth, we are expanding our team and have created an opportunity for an experienced Senior DevSecOps Engineer. We offer a remote work mode and a monthly gross salary of €4,250. Joining our Platform Engineering function and reporting to the DevOps Lead, you’ll play a pivotal role in shaping and delivering DevSecOps practices across the combined Perkbox and Vivup platform. You’ll work closely with engineering leadership and cross-functional teams to improve developer experience, own cloud architecture, and ensure secure, resilient delivery at scale. Responsibilities - DevSecOps & Security Engineering - Embed security-by-default across the SDLC (shift-left testing, secure configurations, vulnerability scanning) - Own IAM, RBAC, SSO/SAML, and access governance across all platform environments - Ensure compliance with ISO 27001, SOC 2, NCSC guidelines, Cyber Essentials, and related frameworks - Provide hands-on guidance to engineering teams and drive secure development practices - Platform Engineering & Cloud Architecture - Own multi-cloud architecture across AWS (primary), Azure, and GCP - Manage Kubernetes workloads and serverless architecture (AWS Lambda) - Lead infrastructure-as-code using Terraform to ensure consistency and scalability - Contribute to platform-level scalability, resilience, and performance decisions - Support Windows Server and Azure environments, integrating with identity systems - CI/CD, Automation & Developer Experience - Own and evolve CI/CD pipelines across Jenkins, GitLab CI, and Azure DevOps - Drive automation of deployments, testing, and provisioning - Improve developer experience through faster, more reliable, secure delivery - Reliability, Observability & Incident Management - Own monitoring and observability using tools like Prometheus, Grafana, Splunk (or equivalents) - Define and manage SLIs/SLOs - Lead incident response, root cause analysis, and prevention strategies - Proactively identify and mitigate reliability and performance risks Qualifications - Strong hands-on experience in AWS cloud architecture - Experience implementing DevSecOps practices across the SDLC - Experience with IAM, RBAC, SSO/SAML, and modern security tooling - Expertise in building and managing CI/CD pipelines at scale (e.g., GitLab CI, Jenkins, Snyk, SonarQube, Lacework/FortiCNAPP) - Proficiency in Bash and Python scripting for automation - Strong Kubernetes experience (cluster management, containerised delivery at scale) - Experience with observability, monitoring, and incident management (Grafana, Sentry, Darktrace, SLIs/SLOs) - Experience leveraging AI tooling to improve engineering workflows and delivery What Success Looks Like - Security is embedded early, reducing vulnerabilities reaching production - Compliance standards consistently met with no major audit findings - Cloud environments are reliable, scalable, and aligned with IaC standards - CI/CD pipelines are stable, trusted, and improving delivery performance - Automation meaningfully reduces manual effort across engineering - Incidents are detected early and resolved at root cause - Monitoring and alerting are trusted and actionable across teams Interview Process - Online interview with the Senior Talent Advisor - Technical interview with the Director of Engineering and the Director of IT & Cybersecurity - Introduction to the CPTO Diversity & Inclusion At Perkbox, we are committed to being an inclusive employer and creating a fair workplace for all. We encourage applications from candidates across all backgrounds, circumstances, ages, disabilities, ethnicities, religions or beliefs, gender identities, or sexual orientations. We are happy to offer reasonable adjustments during our hiring process. Just let us know, and we'll make it work for you. Your comfort and success matter to us!