Senior Platform Engineer

About the role

Onedome is a UK fintech building high‑throughput digital infrastructure for the mortgage and property market. As a Senior Platform Engineer you will treat infrastructure as a product, create an internal developer platform, and embed SRE discipline where needed.

Key responsibilities

• Own and manage five AWS accounts across QA, Production, Infra and two additional environments.
• Design, implement and maintain infrastructure as code using Terraform (Terragrunt a plus).
• Build and maintain CI/CD pipelines (GitHub Actions, GitLab, Jenkins, ArgoCD) with blue/green and canary deployments.
• Define and monitor SLIs/SLOs, set up alerting, incident response and lead blameless post‑mortems.
• Implement security best practices: IAM least‑privilege, secrets management, vulnerability scanning and MFA enforcement.
• Prepare the platform for high‑traffic events (TV launch) including autoscaling, capacity planning and runbooks.
• Partner with backend engineers on production issues, JVM tuning, connection pools and memory leaks.
• Architect multi‑region disaster recovery and drive cost optimisation across DynamoDB, Lambda and the broader AWS footprint.

Required profile

• 6+ years of hands‑on production experience with AWS services (VPC, IAM, EC2/ECS/EKS, Lambda, S3, CloudFront, Route53, RDS, DynamoDB, SQS).
• Strong Terraform expertise; experience managing multi‑environment state.
• Production‑grade Kubernetes and Docker experience, specifically EKS.
• Proven CI/CD implementation skills and familiarity with GitOps practices.
• Deep understanding of infrastructure security, observability and incident management.
• Solid backend knowledge in Java (Spring Boot), Python or Node.js and ability to collaborate on application‑level performance.
• Self‑directed senior mindset, disciplined documentation and strong English communication (B2/C1).

Required skills

• AWS
• Terraform (Terragrunt)
• Kubernetes, Docker, EKS
• CI/CD tools: GitHub Actions, GitLab, Jenkins, ArgoCD
• GitOps
• IAM least‑privilege, secrets management, vulnerability scanning, MFA
• Observability: CloudWatch, Datadog, Grafana, Prometheus, OpenTelemetry, ELK
• Java (Spring Boot), Python, Node.js, JVM concurrency
• DynamoDB, Lambda, S3, CloudFront, Route53, RDS, SQS
• Cost optimisation, multi‑region DR, disaster recovery planning