Senior Infrastructure Engineer

Who you are

• Proven GCP multi-region disaster recovery experience
• Confident at bootstrapping Google Cloud Organisations, hardening with policies and structuring an enterprise’s resource hierarchy
• Experience with Google Cloud Platform (GCP) services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, Identity and Access Management (IAM) and VPC Service Controls
• Experience writing clean, modular Terraform code
• Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure
• Experience with key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager — including cryptographic key ceremonies
• Experience designing hybrid connectivity from GCP to co-located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect
• Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD
• Experience with observability tooling — Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus and OpenTelemetry (we also use Grafana)
• Experience setting up Google Workspace / Google Cloud Identity
• Experience with automation using a scripting language like Python or Go
• Experience implementing CI/CD pipelines
• An understanding of RESTful API and event-driven concepts
• Comfortable writing RFCs and ADRs which can be taken from design to implementation and into Production with documented runbooks and operating models
• Experience with Zero Trust security (mTLS, SSO)
• Experience with AWS
• Comfortable with bash and either Golang, Java or Python development
• Understanding of database monitoring, analysis, disaster recovery and performance tuning
• Understanding of networking and routing concepts (TCP/IP, VLANs, VPNs, BGP, etc.) and preferably experience designing and establishing connectivity between GCP and on-premise locations
• Awareness/ability to leverage Claude Skills during development
• The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great!
• Java, which makes up the majority of our backend codebase
• GCP and AWS — we're cloud-native
• Container-based architecture
• Kubernetes (GKE on GCP, EKS on AWS)
• TeamCity for CI/CD (with multiple production releases per day)
• Terraform and Grafana
• RDS and CloudSQL for PostgreSQL
• You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway

What the job involves

• We're looking for a Senior Infrastructure Engineer to help us design, build and run the cloud foundations our first-in-class, cloud-native banking platform is deployed on — across multiple regions and cloud providers globally. You'll be an inquisitive engineer with an aptitude for finding clean and simple solutions to technical problems, passionate about building observable, reliable and secure systems that positively impact the wider engineering organisation
• Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear more from the team in our latest Blog or our case studies with Women in Tech
• Design, document, build and maintain scalable infrastructure on GCP
• Ensure the performance and reliability of cloud environments whilst measuring cost-effectiveness
• Embrace automation and be reluctant for manual implementation
• Build systems with security by design as a core foundation
• Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS
• Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager — including support for cryptographic key ceremonies
• Rapidly diagnose and fix client-reported infrastructure issues while maintaining peak security and performance
• Write clear technical documentation and host training sessions for the team
• Demonstrate knowledge of new technologies and changes in the industry
• Lead complex infrastructure projects from inception through to run, and shape the future capabilities of Engine — our approach, tooling, automation and architecture
• Lead by example in your contributions, setting a high technical bar for others to aim for

The application process

• Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:
• Initial interview with an Engineer — ~45 minutes
• Take-home technical test, to be discussed in the next interview
• Technical interview with some Engineers — ~1.5 hours
• Final interview with our CTO / deputy CTO — ~45 minutes

Benefits

• 🏖️ 33 holiday days: Including public holidays which you can take when works for you
• 👨‍👩‍👦 Generous family-friendly policies
• 🏥 Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner Benefits include discount with Waitrose, Mr&Mrs Smith and Peleton
• 🚗 Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
• 🎗️ 16 hours paid volunteering time a year
• 👵🏽 Salary sacrifice, company enhanced pension scheme (10%)
• 🛟 4x life insurance: Life insurance at 4x your salary & group income protection
• 😋 Perkbox membership, giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• 🎂 An extra day’s holiday for your birthday
• 🏥 Medical, Dental, and Vision insurance plan options
• 👵🏽 401(k) with company match of 100% of the first 4%
• 🛟 Company-paid Long-Term Disability, and Life and AD&D insurance Optional ancillary benefits such as Short-term Disability, Accident Insurance, Legal & ID Protection, and more
• 🏖️ 20 days annual vacation PTO and 11 Paid Holidays
• 🌍 Work from anywhere policy