-
CI/CD Standardisation
-
Own and evolve shared pipeline templates (pipeline.yaml tasks for Maven, Gradle, npm/Nx, Python, container image build, and Helm chart publish)
-
Consolidate legacy Jenkins/Harness pipelines onto the strategic declarative platform
-
Drive build times, flakiness rates, and pipeline success rates as tracked operational metrics
-
Kubernetes & Release Engineering
-
Maintain Helm chart and values conventions across dev/SIT/UAT/prod and multiple data centres
-
Standardise probes, resource sizing, autoscaling, config/secret injection, and rollback procedures
-
Own promotion paths and zero-downtime release patterns on OpenShift/ECS and EKS
-
Infrastructure as Code
-
Ansible for the Airflow/VM estate; Terraform-style declarative provisioning where applicable
-
Deliver reproducible developer environments and eliminate snowflake configurations and manual runbook dependencies
-
Build & Dependency Governance
-
Manage Artifactory repository policy, JDK 17/21 and Node 22/24 toolchain currency, and the shared Gradle dependency BOM
-
Drive Renovate rollout and remediation of vulnerable or EOL dependencies across all 70+ repositories
-
Observability & Reliability
-
Own AppDynamics, Prometheus/Grafana, and log aggregation standards across the platform
-
Define SLOs, alerting rules, capacity and cost visibility frameworks
-
Lead production incident response, RCA, and permanent-fix follow-through for platform-level failures
-
Security & Controls Automation
-
Externalise secrets from code into CyberArk/Vault; enforce SonarQube quality gates and secure-coding checks in pipeline
-
Own image hardening, scanning, and audit evidence generation for regulatory review and compliance
-
Data & AI Platform Enablement
-
Own deployment, scaling, and operational support for Spark batch, Iceberg/Starburst, Airflow, and JupyterHub
-
Support GenAI/RAG service operations — including GPU/model gateway access patterns, vector store operations, agent-service scaling, and token cost/latency management
-
Developer Experience
-
Build and maintain golden-path templates for new services across all supported stacks
-
Ensure local build parity with CI; maintain platform documentation so teams self-serve rather than raise tickets
-
Technical Leadership
-
Mentor engineers across the ERM programme; conduct design reviews and set engineering manifesto standards
-
Champion branch hygiene, PR etiquette, green builds, and SonarQube compliance across the estate
-
Represent the platform engineering function in architecture forums, risk governance, and regulatory audit engagements