{"id":3152356,"url":"https://alion.io/job/octopus-money-devops-engineer","title":"DevOps Engineer","company":{"id":679751,"name":"Octopus Money","domain":"octopusmoney.com","url":"https://alion.io/company/octopusmoney","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":67500,"max":null,"currency":"GBP","period":"year","gross":null,"usd_annual":90303},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon Aurora","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"DynamoDB","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"K3s","optional":false},{"name":"Least Privilege","optional":false},{"name":"New Relic","optional":false},{"name":"Octopus Deploy","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Traefik","optional":false},{"name":"Grafana","optional":true},{"name":"Kubernetes","optional":true},{"name":"OpenTelemetry","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-23T09:12:10Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T16:12:09Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Octopus Money is hiring a DevOps Engineer to own and evolve the AWS platform that our customer-facing products run on. The platform is defined entirely as code: a single Terraform monorepo, orchestrated with Terramate, spanning dev, staging and production accounts across multiple tenants. You will join a small platform team and take shared ownership of everything from networking and IAM to container services, databases, observability and the CI/CD pipelines that ship it all. \nThis is a hands-on engineering role. You will spend most of your time writing Terraform modules, reviewing infrastructure PRs, running plans through GitHub Actions, and working with product engineers to get new services onto the platform safely. Octopus Money is FCA-regulated, so security, least privilege and auditable change are part of the day job, not an afterthought. \nA large share of the recent work has been driven by our ISO 27001 programme and external penetration testing. You will own the technical side of both: implementing controls as code, producing the evidence auditors ask for, and closing pentest findings through the normal PR process. \nWhat you'll do:\nDesign, build and maintain reusable Terraform modules forAWS services (ECS, ALB, RDS, DynamoDB, Lambda, Cognito, CloudFront, SES, SQS, SNS, KMS, WAF, Route 53) and wire them into per-tenant Terramate stacks. \nOnboard new backend services onto the ECS platform: task roles, load balancers, DNS, autoscaling, observability, and the GitHub OIDC roles their CI/CD pipelines deploy with. \nOwn the change pipeline: PR-based Terraform plans in GitHub Actions, Terramate runs per project and environment, and controlled applies to staging and production. \nReview infrastructure PRs for correctness, least-privilege IAM, correct secret and account references, and adherence to the repo's module conventions. \nRun and improve security tooling: GuardDuty, Security Hub, IAM Access Analyzer, CloudTrail Lake, AWS Config, access-key rotation, network ACLs and WAF rules. \nBuild and tune observability: CloudWatch dashboards and alarms, New Relic alerts, load balancer and RDS alerts, and Slack-routed notifications for anything that pages. \nMaintain data platform plumbing: RDS Postgres with backups, bastions and nightly dumps, DynamoDB backup exports to S3, DMS ingestion pipelines and S3 replication. \nSupport developer productivity: ephemeral test environments (EC2 + k3s + Helm), branch-preview deployments behind Traefik, and scripts that spin a full environment up in minutes. \nManage third-party integrations as code: Cloudflare, New Relic, SFTP transfers, Slack and email delivery, and vendor-specific IAM boundaries. \nInvestigate drift and incidents using read-only access first, and drive fixes through the normal PR process rather than console changes. \nKeep documentation, module READMEs and runbooks current so the next engineer can pick up any stack cold. \nDeliver ISO 27001 controls as code and keep them evidenced: automated IAM access key rotation, KMS key rotation, pgaudit on Aurora, S3 server access logging and default bucket policies, TLS 1.2+ on every load balancer, encryption at rest, cross-region replication of backups, and the Vanta integration that reports on all of it. \nSupport external penetration tests end to end: provision tester access through IAM Identity Center, triage the findings, remediate them (HTTPS redirects, failed-login and access-denied alerting, region locks on privileged roles, CloudTrail change alerts), and remove access when the engagement closes. \nAdminister IAM Identity Center: permission sets per environment, read-only versus admin access, group-based grants for data and engineering teams, migrating users off legacy IAM, and periodic access-key audits and cleanup. \nKeep an eye on cost, from right-sizing services to measuring and trimming spend on newer workloads such as Bedrock-backed tooling. \nWhat we're looking for:\nThree or more years running production infrastructure on AWS, with real ownership of at least one multi-account estate. \nStrong Terraform: you have written and maintained reusable modules, understand state and provider lifecycles, and can read a plan and spot what it will actually do. \nComfortable with IAM at depth: trust policies, OIDC federation, permission boundaries, and the discipline to scope every policy to specific ARNs.\nExperience running containers in production, ideally ECS, including load balancing, service discovery, autoscaling and task-level IAM. \nSolid CI/CD practice with GitHub Actions or similar: reusable workflows, environment gating, and PR-driven change with no manual console edits.\nOperational grounding in relational and NoSQL databases: backups, restores, migrations and the alerts that catch problems early. \nA security-first habit: least privilege by default, secrets never in code, and the instinct to flag a risk rather than work around it. \nClear written communication. Most of your work lands as PR descriptions, review comments and short Slack updates to engineers who were not in the room. \nWillingness to work inside a regulated environment where change control, auditability and separation of environments matter. \nHands-on experience supporting an ISO 27001 (or SOC 2) programme: turning control requirements into infrastructure changes and producing audit evidence without slowing delivery. \nExperience working with external penetration testers, from scoping and access through to remediation and retest. \nIAM Identity Center or another SSO-based access model forAWS, including permission set design and least-privilege access reviews. \nConfidence to challenge and influence. \nNice to have:\nTerramate or another stack orchestrator on top of Terraform. \nKubernetes basics (k3s, Helm, Traefik) for our ephemeral test environments.\nCognito or another managed identity provider, including user migration.\nObservability tooling beyond CloudWatch: New Relic, Grafana, OpenTelemetry. AWS security services in anger: GuardDuty, Security Hub, CloudTrail Lake, Access Analyzer. \nEmail deliverability with SES: domain identities, dedicated IP pools, configuration sets. \nScripting in Bash and Python for glue tooling and one-off automation.\nExperience in fintech or another regulated sector. \nCompliance automation platforms such as Vanta or Drata. \nDatabase auditing and hardening on Aurora or RDS Postgres, including pgaudit.\nSuccess looks like this at Octopus Money:\nYou can handle ambiguity. You’re comfortable using judgement to create structure and applying first principle thinking.\nYou’re someone who ‘chases the ball’, rather than just hoping others pick it up. We look for determination, resilience and a healthy dose of optimism.\nYou thrive in a fast paced environment. You’re open to course correct when needed, and challenge yourself and others to.\nAbout Octopus Money\nWe’re on a mission to become the most recommended financial services business in the UK\nMoney shapes every part of life. Yet most people never get the support they need:\nHalf of Brits reach retirement age without enough to live the life they want\nFinancial stress is a leading cause of poor mental health\nOnly 8% of people have access to 1-to-1 financial advice\nThere’s no shortage of information. What people actually need is clarity, guidance and a plan that makes sense for them.\nThat’s where we come in.\nOctopus Money brings together financial planning, investment expertise and smart technology so people can understand their options and take action with confidence. We help people build a clear plan for their savings, investments and pensions and make investing simple with managed portfolios built by experts. We also support employers who want their teams to feel more secure and in control. \nSome people need regulated advice. Others need coaching. Many need both at different points in life. Our service adapts to what each person needs. \nWe believe everyone deserves money support that works for real life.\nWe value people who: \nMake every conversation matter\nYou care about how you make people feel. You communicate clearly, listen well and build trust with customers and colleagues. You want every interaction to move things forward.\nMove with urgency and focus\nYou like getting stuck in. You care about making progress, not perfection. You stay focused on what matters, learn quickly and find smart ways to keep things moving.\nOwn it\nYou take responsibility for your work and the outcomes it creates. You’re comfortable solving problems, making decisions and tackling challenges head on. You hold yourself to a high standard and want to make a real impact.\nWhat’s in it for you:\nBase salary: £67,500 + benefits\nWe want people to grow here, to feel supported and to feel proud of the impact they make!\nYou’ll get:\nHybrid working with 3 days in the office each week (Tuesday - Thursday)\n18 days a year working from anywhere \nPerformance-based bonus\nThe opportunity to participate in our Share Incentive Plan (HMRC approved scheme enabling employees to invest tax efficiently)\nCompany pension\nPrivate medical insurance\nEnhanced parental leave and Return to Work coaching (find out more on our website)\nBirthday day off\nA mission driven focus - the chance to help people improve their lives through financial wellbeing, and a supportive team who care about what they do\nAbout Octopus Group \nWe're part of Octopus Group, a privately-owned business that's spent 25 years doing things differently. Octopus Group builds businesses designed to outlast it, aiming to leave things a little better for the generations that follow.\nThat same instinct runs through the whole group:\nOctopus Energy changed how millions of people think about their energy provider, built on fairness, transparency and a genuinely good customer experience\nOctopus Legacy is changing how people plan for the end of life\namicable is building a better way to go through divorce\nAurora is rethinking education\nSeccl is building the fintech infrastructure behind modern investing\nOctopus Investments and Octopus Capital back the ideas and businesses of tomorrow\nWe share that same DNA, doing the same thing in a different corner of people's lives: money.\nOctopus Group doesn't just talk about entrepreneurship, the group enables it. Springboard, a program open to anyone however junior or senior, lets people pitch an idea to win funding. A number of businesses have been started this way, founded by former Octopus employees.\nPlease note, as a regulated business we are required to run background checks for all employees which covers adverse financial and unspent convictions. These will only take place upon a successful job offer.\nWe believe in equal financial education for everybody, no matter their background. The same goes for opportunities within our team. We pride ourselves on building an inclusive working environment where diversity is celebrated.\nWe do not and never will discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.\nIf you require support completing your application please contact ","description_format":"text","description_chars":11153,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Personal Finance Apps & Education"],"lifecycle":[{"event":"open","at":"2026-10-23T12:58:38Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["conf:0","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":90303,"is_top_pay":false},"html_url":"https://alion.io/job/octopus-money-devops-engineer","json_url":"https://alion.io/job/octopus-money-devops-engineer.json","meta":{"generated_at":"2026-10-25T18:39:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26390,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679751},"rest":"https://alion.io/mcp/rest/get_company?id=679751"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foctopus-money-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foctopus-money-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foctopus-money-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/octopus-money-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foctopus-money-devops-engineer"}]}