{"id":2173026,"url":"https://alion.io/job/serco-cloud-platform-engineer-iac-network-security-operations","title":"Cloud Platform Engineer (IaC, Network & Security Operations)","company":{"id":1779743,"name":"Serco","domain":"serco.com","url":"https://alion.io/company/serco-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"Kubernetes","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"FinOps","optional":true}],"status":"live","first_seen_at":"2026-10-08T02:00:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-13T03:51:14Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Role purpose\nBuild and operate the core Azure platform as infrastructure-as-code, providing the reliable, automated foundation that application and AI teams deploy onto. A hands-on engineering role focused on cloud and platform engineering, automation, cloud and hybrid networking, and operational security.\nKey Responsibilities\nImplement and maintain Azure infrastructure as code across environments.\n\nBuild and operate AKS clusters, networking, and shared platform services.\n\nProvide operational support and troubleshooting for cloud and hybrid network services, including Azure VNets, routing, DNS, VPN/ExpressRoute connectivity, Private Link, network security controls and associated connectivity issues, coordinating with external network providers where required.\n\nDevelop and maintain CI/CD pipelines and GitOps deployment workflows.\n\nImplement observability, alerting and operational automation.\n\nSupport cost optimisation through autoscaling, right-sizing and scale-to-zero patterns.\n\nTake an AI-first approach to the work, using agentic AI tooling as the default way of building and delivering.\n\nWork in an iterative, board-tracked flow (Azure DevOps Boards or GitHub Projects), with peer code review as standard practice.\n\nKeep clear architecture and technical documentation current as part of the definition of done.\n\nProvide operational support and troubleshooting for cloud and hybrid network services, including Azure VNets, routing, DNS, VPN/ExpressRoute connectivity, Private Link, network security controls and associated connectivity issues, coordinating with external network providers where required.\n\nAzure Firewall - rule design and standardization, re-configuration (changes) and operations in collaboration with managed supplier.\n\nDay-to-day operations regarding Application Gateways and Front Door.\n\nDay-to-day operations regarding Defender.\n\nDay-to-day operations regarding Mail authentication (SPF, DKIM, DMARC).\n\nImplement and maintain Azure infrastructure as code across environments.\n\nBuild and operate AKS clusters, networking, and shared platform services.\n\nSecurity Operations responsibilities\nIn addition to the core platform engineering responsibilities, this position provides the dedicated technical Security Operations capability for Platform Services.\nOwn and support the operational vulnerability management process, including identification, technical assessment, prioritisation, reporting and remediation follow-up.\nOperate and maintain security monitoring capabilities and investigate security alerts and incidents.\nSupport incident response activities, including containment, eradication, recovery and lessons learned.\nPerform technical security assessments of systems, infrastructure and cloud environments.\nImplement and maintain technical security controls aligned with corporate security standards.\nReview infrastructure and platform changes to ensure technical security requirements are appropriately implemented.\nCoordinate technical remediation activities with IT teams and third-party suppliers.\nSupport internal and external audits by providing technical evidence and remediation input.\nPerform security health checks and identify control weaknesses, technical debt and opportunities for operational improvement.\nMonitor emerging threats and vulnerabilities and recommend appropriate technical actions.\nMaintain operational security documentation, procedures and technical standards.\nWork closely with the GRC function while maintaining a clear separation of duties: this role is responsible for technical implementation and day-to-day security operations; GRC retains governance, risk acceptance, policy ownership, compliance monitoring and independent assurance.\nMust-have experience\nStrong hands-on Azure cloud and platform engineering experience.\n\nInfrastructure-as-code proficiency (Terraform or Bicep).\n\nProduction Kubernetes / AKS operations experience.\n\nCI/CD and GitOps experience (Azure DevOps or GitHub Actions).\n\nScripting and automation skills (for example Python, PowerShell, Bash).\n\nStrong understanding of enterprise and Azure networking, including TCP/IP, DNS, routing, VPN, firewalls, VNets, peering and hybrid connectivity, with hands-on troubleshooting experience.\n\nExperience in cybersecurity operations, security engineering, or equivalent hands-on technical security responsibilities.\n\nStrong understanding of vulnerability management and technical security assessment practices.\n\nExperience with security monitoring / SIEM and incident response activities.\n\nUnderstanding of network security, system hardening and secure configuration practices.\n\nAbility to analyse technical security risks and communicate findings clearly to technical and non-technical stakeholders.\n\nNice to Have\nExperience operating platforms that host AI or data workloads.\n\nAdvanced Azure networking exposure, including ExpressRoute, Private Link, network security controls and complex hybrid connectivity.\n\nCost-control and FinOps tooling exposure.\n\nExperience supporting audits, compliance activities and remediation programmes.\n\nExperience with Microsoft security technologies, endpoint protection and identity security\n\nKey Security Operations deliverables\nReduction of technical security debt and timely remediation of identified vulnerabilities.\n\nTimely investigation and resolution of security incidents and alerts within the scope of Platform Services.\n\nContinuous improvement of operational security controls and monitoring capabilities.\n\nEffective technical remediation tracking and reporting.\n\nTechnical support for audits, compliance initiatives and security projects","description_format":"text","description_chars":5630,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-09T13:04:05Z"}],"visa":[],"liveness":{"score":82,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.817,"p_room":1,"age_days":4,"expected_fill_days":18,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/serco-cloud-platform-engineer-iac-network-security-operations","json_url":"https://alion.io/job/serco-cloud-platform-engineer-iac-network-security-operations.json","meta":{"generated_at":"2026-10-13T04:56:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7719,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1779743},"rest":"https://alion.io/mcp/rest/get_company?id=1779743"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fserco-cloud-platform-engineer-iac-network-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fserco-cloud-platform-engineer-iac-network-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fserco-cloud-platform-engineer-iac-network-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/serco-cloud-platform-engineer-iac-network-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fserco-cloud-platform-engineer-iac-network-security-operations"}]}