Trusted by multi-academy trusts to enable smarter financial management
Head of Platform Engineering
Location
United Kingdom
Posted
2 days ago
Salary
0
Seniority
Lead
Job Description
Head of Platform Engineering
IMP Software
• Own Azure infrastructure end to end: subscriptions, networking, edge (Azure Front Door with WAF and CDN), Azure Container Apps, ingress, secrets, identity, and the base services everything sits on • Standardise infrastructure-as-code using Terraform/OpenTofu, with all changes Git-driven, reviewable and increasingly AI-assisted • Build a self-service developer platform that abstracts infrastructure complexity so engineering teams can focus on their products: service templates, starter repos, CI/CD pipelines and deployment automation • Create the guardrails that let AI-first teams move at speed without losing control: policy-as-code, automated quality gates and security scanning in pipelines • Work closely with the Lead Architect and the Architecture Working Group on platform architecture choices and create/maintain suitable platform documentation. • Design, build and operate deep observability and alerting across the platform, so problems are spotted and triaged early • Set and operate to clear platform/infrastructure reliability and performance targets, with a proactive approach to capacity management • Lead platform incident management: act as incident commander when needed, run blameless post-mortems and make sure remediation lands • Design for high availability and disaster recovery, with rehearsed recovery procedures • Own cloud and AI cost governance: spend, environment hygiene, and visibility on model and agent usage • Own the platform security posture end to end: identity and access, network segmentation, secrets, data protection, and vulnerability management, working with the Head of IT on corporate-side controls and cross-boundary incidents • Enforce zero-trust and private-by-default across the platform: managed identities everywhere, no long-lived keys or passwords, private networking with edge-only public entry, and least privilege as the default • Embed security into pipelines and infrastructure: SAST, DAST, SCA, IaC scanning, container image scanning, secrets scanning, and policy-as-code gates that block on critical findings • Own vulnerability management and threat detection for the platform: patching SLAs, CVE triage, Microsoft Defender for Cloud, security event aggregation, and evidence for audit and compliance (Cyber Essentials, UK GDPR) in partnership with the Head of IT • Design guardrails for AI-specific security risks: prompt injection defence, agent permission boundaries, and preventing model exposure to sensitive tenant data • Manage and develop the existing DevOps team, growing it into a high-impact Platform Engineering function • Set the operating model: how the Platform team works with product squads, what it owns, and how it prioritises • Shift the culture from ticket-taking DevOps to Platform as a Product, serving internal customer teams
Job Requirements
- 5+ years running production SaaS systems, including incident ownership and response
- Expert in Azure as our core cloud, with hands-on experience across Azure Container Apps, Azure Database for PostgreSQL and SQL Server, Azure Front Door (with WAF, CDN and managed certificates), Azure Service Bus, Cache for Redis, Key Vault, App Configuration, Blob Storage and Application Insights
- Strong containerisation skills and Azure networking, with hands-on experience of Azure Container Apps (or equivalent managed container platforms)
- Expert in infrastructure-as-code using Terraform/OpenTofu, with Azure DevOps and Git-based workflows
- Strong observability and alerting: hands-on with OpenTelemetry and Application Insights, able to design, build and operate the depth of telemetry needed to run a mission-critical SaaS platform, with a proactive approach to capacity management
- Hands-on experience with AI developer tooling (Claude Code, Copilot, Codex or similar), with a clear view on where AI accelerates platform work and what guardrails matter
- Hands-on with multi-tenant SaaS isolation patterns (row-level security, shared-schema tenant partitioning, per-tenant storage containers, tenant-scoped cache keys)
- Deep security experience for cloud SaaS: identity and access, network segmentation, secrets management, pipeline security (SAST, DAST, SCA, image and IaC scanning), vulnerability management and threat detection. Secure-by-design mindset, comfortable being personally accountable for the platform’s security posture
- Track record of managing a team’s workload while mentoring and growing engineers
- Strong communicator, comfortable working with product, engineering leadership and senior stakeholders
Benefits
- Competitive salary and benefits package
- Fully remote role
- The chance to build and shape a platform engineering function at a pivotal moment for the business
- Funded CPD and professional development
- Regular team socials and company events
- Work with a passionate team solving real problems for the education sector
Related Guides
Related Categories
Related Job Pages
More Platform Engineer Jobs
Role Description We are looking for an experienced Edge Platform Team Lead to drive Zyte's strategic initiative to run browsers on Edge devices. The Edge Platform Squad builds and operates browsers that power undetectable web access across cloud and edge devices. This includes engineering Zyte's end-to-end browser technology — from a custom Chromium deployed on cloud infrastructure to cross-platform browser agents running on edge devices — delivering undetectable and scalable infrastructure that enables reliable access to the most hard-to-reach data. As the Team Lead, you will be both a hands-on technical contributor and a people leader, guiding a distributed squad of engineers through complex systems challenges at the intersection of browser engineering, anti-bot evasion, networking, and distributed systems. What You Will Do - Lead, mentor, and grow a distributed team of 5–7 engineers, fostering a culture of ownership, collaboration, and technical excellence. - Own the technical direction and delivery roadmap for the Edge Platform, including sprint planning, backlog prioritization, and cross-squad coordination with other platform engineering teams. - Develop and maintain a cross-platform browser-agent application for Windows, macOS, and Android that runs on millions of devices. - Operate and evolve a large-scale gateway that connects to millions of peer devices, including node scheduling, sharding, and allocation strategies. - Build advanced stealth capabilities into the browser-agent SDK and a custom Chromium build to evade difficult antibot-protected websites, continuously identifying and eliminating bot-detection surfaces. - Develop and maintain the browser-rendering service and browser-stack microservice consumed by the API squad, providing a robust interface for routing requests. - Keep the custom Chromium branch current with every official release cycle. - Provide a sandboxed runtime for product teams to deploy site-specific logic, and support the CDP proxy layer for integration with headless browser frameworks (Selenium, Puppeteer, Playwright). - Drive architectural decisions through RFDs (Requests for Discussion). - Own KPIs related to antiban success rates, website coverage, and system reliability; report on team performance against defined deliverables. - Collaborate with Product, QA, and DevOps stakeholders to ensure quality, observability, and operational readiness of all Edge services. Qualifications - 10+ years of software engineering experience, with at least 3 years in a team lead or tech lead role managing distributed engineering teams. - Strong systems programming skills in one or more of: C++ or Rust, with experience building high-load, latency-sensitive services. - Strong understanding of networking protocols (HTTP/1.1, HTTP/2, HTTP/3, WebSockets, TLS) and network programming. - Strong knowledge of event-driven and asynchronous programming patterns (event loop, futures, reactor patterns). - Proficiency with containerization and orchestration: Docker, Kubernetes, and cloud platforms (GCP, AWS). - Excellent communication skills in English and experience leading remote-first, globally distributed teams. - Computer Science degree or equivalent working experience. Requirements - Experience with CI/CD pipelines, observability tools, and operational best practices for production services. - Experience with distributed systems architecture: command-and-control patterns, peer-to-peer networking, node scheduling, and sharding. - Hands-on experience with Chromium development, building custom browser forks, or contributing to browser engine projects. - Experience with win32 API. - Experience with cross-platform desktop or mobile application development (Windows, macOS, Android). - Deep knowledge of browser internals, the Chromium codebase, or browser automation frameworks (Puppeteer, Playwright, Selenium, CDP). - Knowledge of anti-bot detection systems and evasion techniques (fingerprinting, TLS signatures, behavioral analysis). - Experience with web scraping or web data extraction at scale. - Familiarity with the Quiche networking library or custom networking stacks. - Apache Kafka or similar event streaming platforms experience. - Track record of driving architectural decisions through RFC/RFD processes. - History of open-source contributions. Benefits - Become part of a self-motivated, progressive, multi-cultural team. - Have the freedom & flexibility to work remotely. - Get the chance to work with cutting-edge open source technologies and tools.
• Build and maintain full stack features in our JavaScript and python-based applications • Improve and maintain our CI/CD pipelines (Bitbucket Pipelines) • Automate infrastructure tasks and deployment workflows using Infrastructure as Code (IaC) tools • Help monitor and support AWS-based services • Collaborate on improving system observability (e.g., Sentry, CloudWatch) • Participate in security and compliance initiatives (SOC 2, ISO 27001) • Manage developer access, backups, and recovery planning • Work closely with teammates across product, engineering, and operations
Senior Power Platform Tech Lead
Brilliant Infotech, Inc.Brilliant Infotech Inc. | MBE Certified e-Verify Employer 200 Metroplex Dr, Suite 414 | Edison NJ - 08817 www.brilliantinfotech.com
Role Description We are seeking a highly experienced Tech Lead with a strong background in banking and lending systems and deep expertise in the Microsoft Power Platform (Power Automate, Power Apps, Copilot Studio). This role will drive enterprise automation strategy, lead requirements sessions, and deliver intelligent workflows and agentic solutions across the organization. - Business Process Automation: Design, build, and deploy low-code automation solutions; migrate legacy bots; integrate with Teams, Azure, Dataverse, SharePoint, and APIs. - Governance & Security: Implement DLP, RBAC, auditing, and change control; optimize performance and reliability. - Team Leadership: Mentor junior builders, lead requirements sessions, and contribute reusable templates/patterns. - Stakeholder Management: Collaborate with business leaders, negotiate trade-offs, and coordinate with vendors. - System Architecture: Partner with architects to design scalable solutions; provide advanced troubleshooting and root cause analysis. - Risk & Impact Analysis: Manage risks, dependencies, and change requests across complex projects. Qualifications - 10+ years delivering enterprise-grade automation solutions. - Deep hands-on expertise in Power Automate, Power Apps, and Copilot Studio. - Strong background in banking, lending, or financial services systems. - Experience with agentic solutions, Azure Functions, APIs, SQL/Dataverse, SharePoint, Teams. - Solid grasp of ALM, CI/CD pipelines, GitHub/Azure DevOps. - Pro-code experience (C#, JavaScript, Python) preferred for custom connectors and complex integrations. - Excellent communication, stakeholder management, and leadership skills. Requirements - Microsoft Certified: Power Platform Developer Associate (required) - Microsoft Certified: Azure Fundamentals (AZ-900) (required) - Microsoft Certified: Power Platform Solution Architect Expert (preferred) - Microsoft Certified: Power Platform Functional Consultant Associate (preferred) - Microsoft Certified: Azure Developer Associate (AZ-204) (preferred) - Automation Anywhere Certified Advanced RPA Professional (nice-to-have)
• Own the day-to-day administration, support, health, and continuous improvement of the Microsoft 365 platform. • Serve as the primary technical authority and Tier 3 escalation point for Microsoft 365-related incidents and complex technical issues. • Design, implement, and maintain Microsoft 365 solutions that are secure, scalable, and aligned with enterprise architecture standards. • Administer and support Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft Entra ID, and Microsoft Intune. • Manage hybrid identity services including Microsoft Entra ID, Active Directory integration, Conditional Access, Multi-Factor Authentication, and Single Sign-On. • Support enterprise application integrations leveraging SAML, OAuth, OpenID Connect, and SCIM provisioning. • Develop and maintain standards, governance controls, operational procedures, and platform best practices. • Evaluate Microsoft roadmap enhancements and lead the adoption of new technologies and platform capabilities. • Administer endpoint management solutions including Intune, Windows Autopilot, device compliance policies, configuration profiles, application deployment, and endpoint security baselines. • Design and maintain automated device provisioning and lifecycle management processes. • Develop PowerShell and Microsoft Graph-based automation to improve operational efficiency, platform governance, reporting, and service delivery. • Monitor platform health, capacity, service performance, and user experience, proactively identifying and resolving issues. • Build and maintain operational dashboards, reporting, and metrics related to platform performance, adoption, compliance, and service quality. • Partner with Cybersecurity teams to implement and support Microsoft 365 security controls, including Conditional Access, identity protection, and collaboration governance. • Participate in major incident response, root cause analysis, problem management, and service improvement initiatives. • Create and maintain technical documentation, architecture diagrams, operational runbooks, and support procedures. • Provide technical guidance and mentorship to Service Desk, Digital Workplace, Infrastructure, and operations teams. • Collaborate with Infrastructure, Security, Service Desk, Digital Workplace, and business stakeholders to deliver reliable and innovative solutions.
