Integration Engineer

Who you are

• Hands-on Kubernetes & Containerization: Experience deploying, managing, and scaling multi-user applications on Kubernetes
• CI/CD & Automation: Proven track record building continuous deployment pipelines using tools such as GitHub Actions, GitLab CI, ArgoCD, or Jenkins
• Security Scanning & Vulnerability Management: Experience implementing and analyzing container and dependency security scanning tools
• Infrastructure as Code (IaC): Proficiency with Terraform, OpenTofu, or similar for provisioning repeatable environments
• Identity & Access Management (SSO): Practical experience configuring Single Sign-On (SSO) and Directory integration via SAML 2.0 / OIDC (e.g., Okta, Azure AD/Entra ID)
• Scripting Skills: Proficiency in Python, Bash, or Go to automate maintenance routines and internal workflow
• GitOps Methodology: Hands-on experience with GitOps tools like ArgoCD or Flux for declarative state enforcement
• Database & Storage Administration: Experience backing up, restoring, and tuning databases commonly used by self-hosted applications (PostgreSQL, MySQL, Redis)
• Observability Stacks: Experience using monitoring, alerting, and logging tools

What the job involves

• We are seeking a talented Integration Engineer to own, secure, and scale our suite of internal, multi-user tools and applications
• You will be responsible for a number of vendor applications that we deploy in our own environments
• You will bridge the gap between Integration, Operations, and Security
• You will be responsible for the full software lifecycle; from configuring secure cloud environments, orchestrating application deployments, running automated security scanning, and executing continuous updates with minimal downtime
• Platform Deployment & Lifecycle Management:
• Deploy, upgrade, patch, and maintain multi-user self-hosted software instances across cloud environments
• Plan and execute seamless, low-downtime application maintenance and database migration windows
• Integrate with customer identity platforms to provide secure access
• Configure monitoring and alerting, with runbooks for application health management
• Continuous Deployment & Orchestration:
• Build and maintain continuous deployment pipelines to automate application delivery (primarily for Kubernetes)
• Maintain Infrastructure-as-Code (IaC) templates and configuration management scripts for reliable instance provisioning
• Application Security & Vulnerability Scanning:
• Integrate continuous security scanning into pipelines to inspect application code, dependencies, and container images for vulnerabilities
• Remediate identified CVEs and enforce compliance and security standards across all internal platform tooling
• Identity & Access Integration: Configure Single Sign-On (SSO), Role-Based Access Control (RBAC), and directory integration (SAML 2.0 / OIDC) for onboarded applications
• Endpoint & Cloud Deployment: Automate and manage software rollouts across desktop fleets, headless Linux machines, and cloud environments using modern deployment pipelines and configuration tools
• Configuration & Hardening: Enforce security baseline configurations, secrets management, and access controls for all newly introduced software packages

Benefits

• Pension contribution
• Health and wellness benefits
• Enhanced parental support
• Development opportunities
• Hybrid model: It’s hugely important for us to share knowledge and build strong relationships with each other, and we find it easier to do this if we spend time together in person. This is why we follow a hybrid model, and would require you to be able to come into the office 3 days a week (currently Tuesday, Wednesday, and one other day depending on which team you’re in).