Senior Platform Engineer

Job Title

Job Description

So, who are we?

IG Group is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions - built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.

The bar is high - bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next.

Join us at IG - the future gets built here.

Your team

This role is part of our Platform Engineering team who are responsible for building the cloud and containers platform landscape to support the business applications via self-service capabilities and automation.

Your role in the Team's Success

As a Senior Platform Engineer, you’ll be a hands-on technical expert who builds, improves and operates platform infrastructure that is secure, scalable, reliable and cost-effective, across our on-premises and AWS estates.

You’ll bring engineering, security and FinOps best practice into platform design and delivery. You’ll contribute to complex technical decisions, reduce platform risk, and help engineering teams deliver with confidence and speed. You’ll also mentor more junior engineers and promote knowledge sharing across the team.

What you'll do:

• Design and build scalable, secure AWS infrastructure using Infrastructure as Code (Terraform), and contribute to cloud technology evaluation and standardisation.
• Build and maintain configuration management using open-source Puppet (roles, profiles and modules with Hiera), developing reusable modules with unit testing, linting, versioning and controlled promotion across environments. Use Ansible for orchestration and automation tasks where it is the better fit.
• Design, build and optimise GitLab CI/CD pipelines that test, validate and deploy infrastructure and configuration changes, embedding DevOps and DevSecOps practices such as secrets management and vulnerability scanning.
• Manage and automate AWS EC2 and Linux estates with AWS Systems Manager (State Manager, Run Command, Patch Manager, Parameter Store and automation documents), including instance configuration, hardening and lifecycle management.
• Manage the certificate lifecycle across platform services, including issuance, renewal, rotation and expiry monitoring, and automate these processes to reduce outages and manual effort.
• Build and run Kubernetes environments (EKS) and deliver self-service capabilities to development teams through platform tooling and an internal developer platform (for example Backstage).
• Lead infrastructure modernisation, including OS migrations, tooling upgrades and reducing configuration drift across environments.
• Manage the software and dependency lifecycle, including security patching, vulnerability management, open-source component updates and RPM package management, with a clear inventory of platform dependencies.
• Maintain organised, versioned and accessible artefacts and packages through repository tooling such as JFrog Artifactory.
• Define and apply monitoring, alerting and observability standards (for example Honeycomb, Prometheus and Grafana) so issues are found and understood before they affect users.
• Act as subject-matter expert in diagnosing and resolving complex infrastructure and configuration incidents, running root cause analysis and putting preventive measures in place.
• Partner with Platform Managers and development teams to understand their needs and deliver solutions that work, helping to bridge development and operations.
• Mentor junior engineers and write and maintain clear documentation to support continuous learning and engineering best practice.

What you'll need for this role

Key Qualification Requirements:

• Experience level: 6+ years in infrastructure engineering, configuration management and automation, including significant hands-on experience with Linux systems and AWS cloud.

Core technical requirements

• • Configuration management: Strong hands-on expertise with open-source Puppet, including writing, testing and maintaining modules using roles, profiles and Hiera. Experience with module testing and release workflows (for example rspec-puppet and puppet-lint) is essential. Working experience with Ansible (playbooks, roles and inventory management) is also required.
  • Certificate management and rotation: Hands-on experience managing the certificate lifecycle, including issuance, renewal, rotation and expiry monitoring, using internal or public certificate authorities and tooling such as AWS Certificate Manager. Ability to automate rotation safely across Linux, load balancer and Kubernetes environments.
  • AWS cloud: Solid hands-on experience designing and operating AWS platforms, especially EC2, with a good understanding of IAM, S3, VPC and networking (for example Transit Gateway and Direct Connect).
  • AWS Systems Manager: Practical experience using SSM for configuration and state management (State Manager, Run Command, Patch Manager, Parameter Store and automation documents).
  • Infrastructure as Code: Hands-on experience with Terraform. Terragrunt or equivalent tooling is a plus.
  • CI/CD and DevSecOps: Experience designing multi-stage CI/CD pipelines, ideally in GitLab (or Jenkins or GitHub Actions), with good knowledge of security practice such as secrets management, vulnerability scanning and compliance.
  • Linux administration: Strong experience with Red Hat Enterprise Linux 9, Rocky Linux 9 or equivalent, including systemd, SELinux and security hardening.
  • Scripting: Strong Python and Bash skills for automation. Go is a plus.
  • Packaging and artefacts: RPM package management and building, with experience administering RPM repositories and artefact repositories such as Artifactory or Nexus.
  • Containers and Kubernetes: Working experience administering Kubernetes (EKS preferred), including networking, RBAC, pod security and Docker image management. Service mesh (Istio) is a plus.
  • Observability and reliability: Hands-on experience with monitoring and observability tools (Honeycomb, Prometheus and Grafana) and defining alerting standards.
  • Networking and architecture: Strong network fundamentals (TCP/IP, DNS, load balancing, traffic management and troubleshooting) and a good grasp of microservices and cloud architecture patterns.
  • Software lifecycle and security: Experience managing security patching, vulnerability management and dependency hygiene. Familiarity with compliance frameworks such as PCI DSS is advantageous.
  • Version control and collaboration: Proficient with Git (GitLab, GitHub and Bitbucket), able to work autonomously and contribute to engineering standards across teams.

The Perks

It really is more than a job. We think like a start-up, but we deliver like a FTSE 100 - so the bar is high, and we won't pretend otherwise. We work hybrid, which means three days in the office. We’ll recognise your talent and make sure that you can still have a life - at work, and outside of it. Networks, committees, awards, sports and social clubs, mentorships, volunteering opportunities, extra time off… the list goes on.

• Performance-related bonus

• Life insurance

• Medical insurance for you and your family

• Provident fund contributions from day one

• Employee assistance programme

• Contribution to gym memberships

• Lunch & snacks on us

• 15 days annual leave increasing to 20 days after 2 years’ continuous service

• A day off to celebrate your birthday as well as two days’ volunteering leave per year.

Join us for this exciting journey. Apply now!

Number of openings