{"id":3649456,"url":"https://alion.io/job/tokio-marine-hcc-sandbox-platform-engineer","title":"Sandbox Platform Engineer","company":{"id":7638,"name":"Tokio Marine HCC","domain":"tmhcc.com","url":"https://alion.io/company/tmhcc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":12,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-11-10T06:52:35Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GitHub","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-02T23:44:10Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-11T03:24:32Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Sandbox Platform Engineer\nAssignment type: 6 month contract (outside IR35)\nThe Sandbox Platform Engineer is responsible for delivering and operationalising the TMHCC International Sandbox Platform in line with the agreed Sandbox Strategy and architecture.\nThe engagement will build a secure, automated and supportable platform that enables teams to provision temporary environments for development, testing, proof-of-concept and technology evaluation use cases, while maintaining appropriate security, governance, cost and lifecycle controls.\nThis is a hands-on delivery engagement focused on implementing a defined platform and associated technical deliverables. The engineer is expected to determine the appropriate technical approach within established architectural, security and technology guardrails.\nScope of Services\nSandbox Platform Design & Delivery\nImplement the Sandbox Platform in line with the approved Sandbox Strategy, roadmap and architecture.\nTranslate the agreed target state into detailed technical designs, engineering tasks, and deployable platform components.\nBuild the Azure platform foundations required to support isolated sandbox workloads and temporary environments.\nSupport sandbox use cases including temporary Windows and Linux virtual machines, developer workstations, proof-of-concept environments and short-lived application infrastructure.\nEvaluate and implement Microsoft Dev Box, Azure Virtual Desktop, Azure Deployment Environments or equivalent approved services where they provide the best fit for a defined use case.\nValidate the platform through representative pilot use cases before transitioning into service.\nInfrastructure as Code (IaC) & Automation\nDevelop and maintain reusable Terraform modules and Ansible Playbooks for the Sandbox Platform in GitHub Enterprise Cloud.\nEnsure platform Infrastructure as Code is version-controlled in GitHub and deployed through approved automated deployment workflows.\nAutomate sandbox provisioning, configuration and decommissioning to minimise manual administration.\nDefine and recommend standard deployment patterns for common sandbox requirements and formalise agreed patterns through reusable automation.\nContribute to the definition of a centralised environment management capability and ensure sandbox deployments publish the required ownership, lifecycle, status and cost metadata to the agreed platform.\nImplement automated expiry, shutdown, reclamation and deletion controls for temporary resources.\nEmbed appropriate validation, approval policy compliance and automated security checks within deployment workflows, integrating with approved enterprise security tooling where applicable.\nIdentity, Security & Governance\nIntegrate the platform with Microsoft Entra ID and approved role-based access control (RBAC) patterns.\nImplement privileged access using established PIM/JIT and least-privilege principles where applicable.\nApply Azure Policy and corporate security guardrails appropriate to sandbox environments.\nWork with Security and Architecture stakeholders to ensure controls protect the wider environment without unnecessarily restricting legitimate sandbox use cases.\nImplement appropriate audit logging, monitoring and security visibility.\nEnsure secrets and credentials are managed using approved secure patterns.\nConnectivity & Environment Isolation\nImplement network isolation appropriate to the sandbox use cases and agreed architecture.\nEnsure sandbox environments do not introduce unnecessary connectivity or trust relationships with the corporate production network.\nConfigure Azure networking, routing, DNS and firewall controls required for approved sandbox patterns.\nSupport controlled access to sandbox resources through approved remote-access methods.\nWhere required, support designs using separate subscriptions, management groups or tenancy boundaries to achieve the necessary level of isolation.\nLifecycle, Cost & Governance Controls\nImplement tagging standards, ownership metadata, expiry dates and environment classification.\nImplement budgets, cost reporting and controls to provide visibility of sandbox consumption.\nDesign the platform to minimise the cost of idle or short-lived environments.\nImplement automated shutdown and deallocation where appropriate.\nProvide controls to identify and remove orphaned or expired resources.\nEstablish clear boundaries between sandbox experimentation and production services.\nEnd User Experience & Standard Patterns\nProvide simple, repeatable ways for users to request or provision approved sandbox environments.\nCreate standard patterns for temporary Windows and Linux machines and other common sandbox scenarios.\nReduce the need for bespoke engineering by exposing reusable platform capabilities through automation.\nDocument user-facing guidance covering access, permitted use, lifecycle, security and cost responsibilities.\nSupport initial consumers of the service and incorporate lessons learned into the final platform.\nOperationalisation & Handover\nProduce platform documentation, support procedures and operational runbooks.\nDefine platform ownership, support boundaries and escalation routes.\nProvide knowledge transfer to the TMHCC internal teams.\nEnsure all delivered code, configuration and documentation is stored in approved corporate repositories and aligned with current platform engineering standards and practices.\nResolve defects identified during pilot delivery and hand over a supportable service at the end of the engagement.\nSandbox Platform Engineer - Sept 2026.docx 3\nEngagement Deliverables\nDetailed Sandbox Platform design aligned to the approved strategy and architecture.\nAzure platform foundations, subscription structure and required isolation controls.\nInfrastructure-as-Code repository containing reusable platform modules and deployment workflows.\nAutomated provisioning and decommissioning capability.\nAutomated environment expiry, shutdown and reclamation controls.\nStandard Windows and Linux sandbox patterns.\nDeveloper workstation capability, including Microsoft Dev Box where appropriate.\nIdentity, RBAC and privileged-access integration.\nAzure Policy, security guardrails and logging integration.\nNetwork and remote-access configuration required for approved sandbox patterns.\nTagging, budget and cost-management controls.\nCompleted pilot sandbox use cases with identified defects resolved.\nOperational documentation, user guidance and support runbooks.\nKnowledge transfer and formal handover to the Hosting and Cloud Platform Teams.\nEngagement Approach\nTakes ownership of agreed technical deliverables and drives them through to completion.\nOperates with an automation-first mindset and avoids unnecessary manual platform configuration.\nWorks independently within agreed architectural, security and technology constraints.\nIdentifies and resolves delivery blockers proactively, escalating dependencies where stakeholder input is required.\nCommunicates clearly with technical and non-technical stakeholders.\nFocuses on repeatable platform services and measurable outcomes rather than general BAU engineering activity.\nMaintains strong attention to security, auditability, governance and operational supportability.\nAdditional Engagement Requirements\nThe engagement is focused on the delivery of the agreed Sandbox Platform and associated technical outputs rather than the provision of general Cloud or Hosting BAU resource.\nThe engineer will work with relevant TMHCC stakeholders where technical dependencies, access, approvals or design decisions require client input.\nThe engagement is expected to conclude following delivery, acceptance, knowledge transfer and handover of the agreed platform and documentation.","description_format":"text","description_chars":7715,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-11-02T23:44:10Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":7,"expected_fill_days":58,"reasons":["conf:7","stale_co","velocity","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/tokio-marine-hcc-sandbox-platform-engineer","json_url":"https://alion.io/job/tokio-marine-hcc-sandbox-platform-engineer.json","meta":{"generated_at":"2026-11-11T04:35:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7638},"rest":"https://alion.io/mcp/rest/get_company?id=7638"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftokio-marine-hcc-sandbox-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftokio-marine-hcc-sandbox-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftokio-marine-hcc-sandbox-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tokio-marine-hcc-sandbox-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftokio-marine-hcc-sandbox-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3649456}},{"tool":"search_jobs","arguments":{"company":"tmhcc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3649456},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}