New Cloud & Security Platform Lead

Joining a team of 10, you’d be responsible for leading the strategy (and setting standards across the department) behind their cloud and security technology, with a focus on working with AWS, which is their cloud provider of choice.

The client

A well-known British motoring company are looking for a Cloud & Security Platform Lead to join them in what is a brand new position for the company. There’s a lot of scope here for you to have a real impact on their cloud platform.

The role

What will I be doing?

The bulk of this role does sit at a strategic level but there will be instances where you are conducting code reviews, providing constructive feedback and ensuring adherence to coding standards and best practices. They want someone who can really ensure the department is working to the best of it’s ability.

As it’s a high level position you will be communicating and collaborating with various stakeholders in the business, so you’ll have to be comfortable doing this and articulating complex technical concepts to non-technical persona.

Over the next two years there is a lot of strategy to be done on the application itself. There’ll be times when you’ll need to jump in but the bulk of the role encompasses defining what the platform, architecture and application itself looks like.

The candidate

What’s in it for me?

You’ll get a salary of up to £120K for the role as well as a wide range of benefits. These include an annual bonus of up to 20%, a £5K cash-car allowance (which you’ll get even if you don’t have a car!), 7% pension and private medical insurance.

You’ll have flexibility to work on a hybrid basis in the office twice a week (they’ve locations in London and Basingstoke) and there will be travel once or twice a month involved to the location you’re not in. This will of course be expensed.

What experience do I need?

You’ll need really in-depth knowledge of AWS (as well as the relevant services, such as compute, storage, networking, database and most importantly serverless, as this is what they work on) as you’ll be working with it day to day.

You’d also need to have had experience with IaC tools like Terraform, CloudFormation and ARM templates as there are a lot of cloud deployments to automate. You’ll need prior hands on experience with containerisation technologies such as Docker and Kubernetes, as well as cloud-native application development and microservices architecture.

Security is a key aspect of the role, covering both hands-on implementation and compliance. The focus will primarily be on AppSec, encompassing principles and practices such as firewalls, intrusion detection and prevention systems, encryption, and endpoint protection.

On the compliance access you’ll need an understanding of security standards and frameworks such as ISO27001, NIST and GDPR.

What does the interview process look like?

They’re looking to move quickly on this (in their words; they needed someone last week) so are doing 3 short stages. The first is a 30/45 minute conversation with the Head of Technology, which will be followed by a 75 minute technical deep dive. If that goes well then the last stage will be to meet the wider team for 45 minutes. This is a chance to get to know both them and the company culture a little better.

Don’t worry if your CV’s not up to date, just ping me a message on will@zebrapeople.com and we can go from there.