Platform Engineer

About us We love pets - which is why we're on a mission to make the world a better place for pets and their parents. We offer pet insurance policies with generous pet health benefits that are designed with their needs in mind. We've helped half a million pets stay happy and healthy since 2017 - and many more customers throughout the world are joining us every day. Our company is respectful, fun-loving and passionate about pets and their wellbeing. Throughout our business you'll meet people who think differently, aim for impact, and love to try new things. Want to join our pack? Join us. Love every moment. Love ManyPets. A day in the life As a Platform Engineer, you will initially join our platform squad. We build and maintain the AWS infrastructure, deployment pipelines, tooling and engineering standards that every other squad at ManyPets depends on. This role has a strong security focus, and it will become more security focused over time. Much of the work is compliance and assurance: building and running the tooling that checks our cloud estate against our security standards, writing the scripts that turn a manual check into a scheduled one, gathering the evidence we need for ISO 27001 and our other obligations, and supporting the audits that depend on it. Alongside that you will help us tighten access controls across our cloud estate, and take on ownership of the edge and network security tooling that protects our services. Over time this role moves across to work directly with our Head of Security as we build out a dedicated security function at ManyPets. You will help shape what that function does and how it works, rather than inheriting something already built. Our environment is fast-paced and highly collaborative. You will work closely with your teammates using pair or mob programming, participating in regular workshops and planning sessions, primarily over Zoom, with occasional in-person collaboration. We embrace modern development practices: · All our services are cloud-hosted on AWS, using serverless and event-driven architectures for scalability and resilience. · We use a fully automated deployment pipeline, allowing you to release to production within minutes, multiple times per day. · We define our infrastructure as code, and we emphasise observability, testing and secure-by-design principles from the start. As a squad we own our work end-to-end, including development, maintenance and support. You will play a key role in ensuring the reliability and quality of what we provide to the rest of engineering, and contribute to a culture of rapid learning and continuous improvement. Your responsibilities ü Build and maintain secure platform foundations o Design, build and maintain the shared cloud infrastructure, tooling and deployment pipelines that other squads rely on. o Define infrastructure as code so our environments are consistent, repeatable and reviewable. o Make secure configuration the default, so squads get it without having to ask for it. o Maintain the edge and network security tooling that protects our services. o Share in the day-to-day operational ownership of the platform, responding to requests and issues raised by other squads. Make our security posture measurable o Automate the gathering of evidence for ISO 27001 and our other compliance obligations, so that an audit means pulling a report rather than running a manual exercise. o Write the scripts and small services that turn a manual security check into a scheduled, repeatable one. o Triage findings from our scanning and posture tooling such as Aikido and Ascidian, work out which ones actually matter, and either fix them or get them in front of the team that can. o Work with our Head of Security to turn written policy into controls that are enforced by tooling. Strengthen access and identity controls o Review and tighten access across our cloud accounts, working towards least privilege