Start up - DevOps Engineer

We are working alongside one of our fast-growing clients, a software startup, revolutionising the facilities management industry with innovative, industry-first solutions. We are seeking a highly capable DevOps Engineer to take ownership of FMClarity’s cloud infrastructure, platform reliability, deployment pipelines, observability and operational security. This is a senior hands-on role suited to someone who is equally comfortable improving IaC and CI/CD pipelines, hardening cloud infrastructure, troubleshooting complex production issues, driving security uplift, and partnering closely with developers to improve engineering practices. The successful candidate will help ensure environments are secure, scalable, cost-effective and operationally robust, while also contributing to the longer-term improvement of platform operations and infrastructure maturity. The role also includes responsibility for maintaining practical cloud security controls, including identity and access management, data protection, vulnerability hygiene, and other technical safeguards. What you will be responsible for: Own and improve FMClarity’s cloud infrastructure across production and non-production environments. Manage and optimise AWS services including compute, networking, storage, security and delivery layers. Monitor deployment and infrastructure health, and play an active role in troubleshooting production issues by providing useful operational diagnostics to the development team. Consulting developers on best practices and collaborating for CI/CD pipeline creation while introducing relevant tools and technologies for efficient releases. Own cloud security posture including network segmentation, security group design, WAF implementation, and infrastructure hardening aligned to best practices (e.g. CIS benchmarks). Play an active role in securing production and non-production environments in line with internal security policies, customer expectations, and cloud security best practices. Administer identity and access across key business and platform systems, including Google Workspace user provisioning, access control, security settings, and onboarding/offboarding support. Requirements Deep and wide-ranging experience in various AWS components with some understanding of GCP and/or Azure. Must have managed deployments at scale. Hands-on experience in containerization in ECS and Kubernetes along with infrastructure design, management and cost management. Good experience in building and maintaining CI/CD pipelines with tools like GitHub Actions, Jenkins etc. Should have deployed and managed clusters like NoSQL or RDBMS databases, caches and other distributed loads. Experience required in two or more from MongoDB, PostgreSQL, MySQL/MariaDB, Redis, Kafka, Cassandra or Elasticsearch. Comprehensive experience with IaC practices using Terraform or CloudFormation and the ability to write fairly complex scripts in Bash, Python or other languages. Experience in NPM, Gradle, Maven, Make, CMake, or others. Proficient in fundamental Linux system administration with an in-depth understanding of core security and networking concepts. Very strong understanding of essential protocols and standards at different layers of the OSI model like TCP/IP, TLS, HTTPS, HTTP/2, REST, OAuth, GraphQL, WebSockets etc. Experience in building an ELK or similar pipeline and/or integration of a SIEM tool with actionable incident reporting will be given strong preference. Bachelor’s degree in Computer Science, a related Engineering discipline or equivalent professional experience. Strong experience in a senior DevOps, Platform Engineering, SRE or SecDevOps role Hands-on AWS experience Experience with CI/CD pipelines Knowledge of infrastructure as code such as Terraform, CloudFormation or CDK Strong Linux and scripting skills Experience with monitoring and logging tools Good understanding of security fundamentals Confidence working in production and responding to incidents Clear communication skills and a collaborative approach Operational Availability This role includes responsibility for supporting critical platform operations outside standard business hours, where reasonably required. This may include incident response, disaster recovery testing, urgent security or infrastructure remediation, and planned production changes or maintenance activities. Full-time permanent role with a flexible, hybrid work arrangement (2 days in office). Ongoing professional development and training opportunities. Career growth in a fast-evolving tech startup. Collaborative and supportive team environment.